Back to Home

Privacy Policy & GDPR Compliance

Last Updated: June 30, 2026

At BlockMag, we are committed to safeguarding your privacy and ensuring the security of your personal and business data. This Privacy Policy outlines our data processing practices in full compliance with the **General Data Protection Regulation (GDPR)** and international privacy standards.

1. Data Controller and Data Processor Roles

Under GDPR regulations:

  • BlockMag as Data Controller: We are the controller for the registration data of tenant administrators (e.g., your name, business email, corporate details, subscription history).
  • BlockMag as Data Processor: For all data imported into your workspace (e.g., your customer profiles, timesheets, billing details, staff records, and invoice lists), **you (the tenant) are the Data Controller**, and BlockMag acts strictly as a **Data Processor**, handling information based solely on your configurations and requests.

2. Information We Collect

We collect and process the following categories of information:

  • Account Registration Details: Corporate names, email addresses, phone numbers, tax identification numbers, and country origins.
  • Workspace Data (Processed on your behalf): Customer logs, invoice details, inventory entries, mileage logs, timesheets, and staff details.
  • Technical Logs & Diagnostic Metrics: IP addresses, browser types, interaction logs, and application logs generated during security alerts.

3. Legal Bases for Processing (GDPR Article 6)

We process your personal data under the following legal bases:

  • Performance of a Contract: To set up, operate, and billing your multi-tenant workspace.
  • Legal Obligation: To maintain correct fiscal invoicing records and prevent fraud.
  • Legitimate Interests: To perform server logging, monitor system diagnostics, protect against data breaches, and run safety monitoring on our console.
  • Consent: For non-essential cookies and marketing newsletters (which can be withdrawn at any time).

4. Cookie Policy & Consents (ePrivacy Directive)

BlockMag uses cookies and localStorage elements to operate. We segregate these into:

  • Strictly Necessary Cookies: Essential for user authentication, session security, CSRF protection, and saving your active workspace subdomain settings. Consent is not required for these cookies.
  • Performance & Analytics Cookies: Optional cookies used to monitor platform speed and diagnostic performance. These cookies are only active if you click "Accept All" on our Cookie Consent banner.

5. Data Retention & Security Standards

All database records are stored in secured local MySQL/SQLite environments. Backup files are encrypted at rest. We retain tenant data for as long as your workspace account is active. Upon workspace termination, all tenant records are permanently purged from our active databases within 30 days, subject only to mandatory legal financial records retention laws.

6. GDPR Rights for EU/Global Residents

You have the following rights regarding your personal data processed by BlockMag:

  • Right of Access: Request a full export of your personal account details.
  • Right to Rectification: Edit your profile, company registration info, and default currency at any time from your settings page.
  • Right to Erasure (Right to be Forgotten): Request the permanent deletion of your account and workspace records.
  • Right to Data Portability: Export your databases, CSV spreadsheets, timesheets, or invoice records.
  • Right to Object/Restric Processing: Reject non-essential diagnostic cookies.

To exercise any of these rights, contact our privacy compliance team via the support module in your dashboard.

7. GDPR Data Processing Addendum (DPA)

By checking the GDPR consent box on registration, you agree to our standard Data Processing Addendum (DPA). The DPA binds BlockMag to process all tenant-imported customer and timesheet data in strict accordance with GDPR Article 28, securing sub-processors, ensuring confidentiality commitments, and providing assistance during potential data breach incidents.