Skip to content

Legal

Privacy Policy

Last updated: 2026-05-26

Who we are

BluOryn is an architecture consultancy. References to "BluOryn", "we", "us" refer to the legal entity operating www.bluoryn.com and its country-specific domains.

Data we collect

  • Contact form submissions — name, work email, phone (optional), company, country, role, message.
  • Chatbot interactions — conversation transcript + session identifier stored in localStorage (no third-party cookies).
  • Analytics — Google Analytics 4 via Google Tag Manager — page views, referrers, device class. IP anonymized. Loaded only after consent.
  • WhatsApp messages (if you initiate) — message content + phone number, processed via Meta WhatsApp Cloud API.

How we use it

  • Respond to your enquiry.
  • Send relevant follow-ups (with your consent).
  • Improve the site (aggregated analytics only).

Legal bases (GDPR Art. 6)

  • Consent — form submissions, WhatsApp interactions, analytics.
  • Legitimate interest — site security, anti-abuse, audit logs.
  • Contract — once we engage on a project, data necessary for delivery.

Data residency

All operational data (form submissions, chat transcripts, agent memory) is stored in EU-resident Azure regions. Inference traffic for AI features stays within EU regions. We document residency posture in every engagement proposal.

Retention

  • Lead data — 24 months from last interaction.
  • Chatbot logs — 90 days.
  • Agent memory facts — until you request deletion via /api/me-delete (immediate hard-delete) or 24 months idle.
  • Analytics — per GA4 defaults (14 months).

Your rights (GDPR Art. 15, 16, 17, 20, 21)

You may request access (Art. 15), rectification (Art. 16), erasure (Art. 17), portability (Art. 20), or object (Art. 21). For the chat assistant we expose programmatic endpoints:

  • GET /api/me-export?sessionId=... — export everything we hold tied to your session
  • POST /api/me-delete with { sessionId } — hard-delete your chat session + memory facts

For all other rights or to identify a session you cannot locate: privacy@bluoryn.com.

Sub-processors

ProcessorPurposeRegion
Microsoft AzureSite hosting, storage, AI inferenceEU (Central India for legacy table storage; West Europe roadmap)
Brevo (Sendinblue)Transactional emailEU (France)
Meta WhatsApp Cloud APIWhatsApp messaging (opt-in)EU / global
Google Analytics 4Aggregated analytics (consent-gated)EU regions where available

Contact

Privacy questions or rights requests: privacy@bluoryn.com