How Blake handles your data
A plain-language overview of GDPR lawful basis, data residency, and retention.
Blake is built for European sales teams and treats privacy as an architectural constraint. This article explains what Blake processes, where it lives, and what your rights look like.
What Blake processes
- Account and contact records you add manually or approve from Discovery.
- Message activity from your connected mailbox (Microsoft 365 in v1) to give Blake context.
- Aggregated learning signals that help Blake improve across workspaces.
Personal information is never stored in a form that can be directly linked back to you. When Blake temporarily processes information to improve quality, identifying information is transformed into hashed values before storage. This means temporary stored signals cannot be traced back to your workspace.
If you prefer that no conversation data is retained at all, enable Private mode. In Private mode, conversations are processed but not stored after the request completes.
Where your data lives
- Primary storage is in the European Union.
- AI processing runs in EU regions.
- No prospect-level data is sold, resold, or shared with third parties in a form that identifies your workspace.
Ethical sourcing
Blake finds prospects from public sources: national trade registries (such as the KvK in the Netherlands and equivalents across the EU), company websites, and publicly listed technology and hiring signals. Blake never buys person-level data and never accesses personal contact information without explicit consent.
Deletion and retention
- Soft-delete: when you delete an account, contact, or deal, Blake removes the record from your live views. Immediate deletes can be undone from the toast that appears right after the action.
- Hard-delete: once a record is permanently deleted it cannot be recovered. A configurable retention policy is on the roadmap; until then, soft-deleted data is retained until a deletion request is processed.
- Reversible AI actions can be undone where supported by the product: drafts, approvals, and imports can be reversed from the toast that appears right after the action.
- Before Blake performs an irreversible action, such as permanently deleting data, it always asks for explicit confirmation.
Your GDPR rights
You have the right to access, correct, and request deletion of personal data Blake processes about you. To exercise these rights, contact privacy@useblake.ai. Blake responds within thirty days of receipt as required by GDPR.
A self-serve data subject request portal is on the roadmap. Until it ships, all requests go through the privacy inbox above so we can verify identity and scope the request correctly.
Legal basis and disclosures
- Lawful basis: Blake tracks a GDPR lawful basis for every processing activity you configure.
- AI Act Article 50: every AI-facing surface in Blake carries the disclosure required by the EU AI Act.
- Biometric data: voice recording is opt-in with explicit consent. Nothing is recorded silently.
For seat and plan questions, see Manage seats and billing. For a general overview of the product, see What Blake is and what you can do with it.