BLAS AI is operated by TAVARA Holdings OPC (SEC registration pending, Philippines), trading as Solomon Teknika.

• Data Protection Officer (interim): Blas Ramos
• Contact: care@tavaraholdings.com
• Applicable law: Republic Act 10173 (Data Privacy Act of 2012, Philippines)
• Supervisory authority: National Privacy Commission (NPC) — privacy.gov.ph

This Privacy Notice describes how we collect, use, store, and protect your personal information in compliance with RA 10173, NPC Circulars, and where applicable, the EU General Data Protection Regulation (GDPR). BLAS AI uses artificial intelligence to process your data — this is disclosed per NPC Advisory 2024-04 and EU AI Act Article 50.

Account Information

• Name, email address, and profile picture (via Google or GitHub sign-in)
• Authentication tokens for session management

Usage Data

• Chat messages and conversations with AI heroes
• Selected modes, domains, and hero preferences
• Uploaded files (images, audio) processed during sessions
• Session metadata (timestamps, duration, hero used)

Technical Data

• IP address, browser type, device information
• Page views and navigation patterns
• Error logs and performance metrics

• To provide and maintain the BLAS AI service
• To process your AI conversations and deliver responses
• To improve our AI models, heroes, and service quality
• To personalize your experience and remember preferences
• To detect, prevent, and address technical issues
• To communicate service updates and changes
• To comply with legal obligations

Your data is processed by the following sub-processors. Per NPC DPA and GDPR Art 28, we maintain Data Processing Agreements with each:

Cross-border transfers: Your data may be transferred from the Philippines to Singapore (Supabase) and the United States (Vercel, AI providers). These transfers are conducted under Data Processing Agreements and, where applicable, EU Standard Contractual Clauses.

We use the following cookies and tracking technologies:

• Session cookies — Required for authentication and session management
• Vercel Analytics — Anonymous usage analytics to improve performance
• Vercel Speed Insights — Performance monitoring

We do not use advertising cookies or sell your data to advertisers.

Chat conversations are retained for service improvement purposes. You may request deletion of your data at any time by contacting us. Account data is retained as long as your account is active. Upon account deletion, we will remove your personal data within 30 days.

We implement industry-standard security measures to protect your data, including:

• Encrypted data transmission (HTTPS/TLS)
• Secure authentication via OAuth 2.0
• Optional Multi-Factor Authentication (MFA/TOTP)
• Rate limiting and abuse prevention
• Regular security reviews

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your personal data
• Object to or restrict processing of your data
• Request a portable copy of your data
• Withdraw consent at any time

To exercise any of these rights, please contact us at the address below.

BLAS AI is not intended for use by individuals under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us immediately.

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the effective date. Continued use of BLAS AI after changes constitutes acceptance of the updated policy.

If you have questions about this Privacy Policy or your personal data, contact us at: