Blueclip Limited, a company registered in Ireland with its registered office at 136 Capel Street, Dublin, D01 T2C9, Ireland ("blueclip," "we," "us," or "our"), provides AI-powered operational intelligence, analytics, and automation solutions for warehouses, fulfillment centers, and supply chain operations.
This Privacy Policy describes how we collect, use, disclose, and protect your personal information when you visit blueclip.ai, use our platform, or otherwise interact with our services. By accessing or using our services, you acknowledge that you have read and understood this Privacy Policy.
Blueclip Limited is the data controller for customers and website visitors located in the European Economic Area (EEA) and the United Kingdom. For customers located in the United States and the rest of the world, x2i Inc. acts as the data controller. In each case, where you upload data to the platform you remain the controller of that data and blueclip acts as your processor.
1. Information We Collect
1.1 Account Information
When you register for a blueclip account or interact with our sales team, we may collect your name, email address, job title, company name, phone number, and billing and payment information.
1.2 Customer Business Data
In the course of providing our platform, we process data that you upload or generate, including:
- warehouse inventory and movement data
- supply chain and logistics information
- order, shipment, and fulfillment records
- labor schedules, task logs, and workforce information
- equipment telemetry and operational metrics
- supplier and vendor contact details
- system events from your connected systems (WMS, TMS, ERP, and others)
We process Customer Business Data solely to provide and maintain our services as described in your service agreement. blueclip acts as a data processor with respect to Customer Business Data, and you, as the customer, remain the data controller. For Customer Business Data processed on behalf of enterprise customers, blueclip generally acts as a data processor and processes personal data only on documented instructions from the customer.
1.3 Usage Data
We collect usage information such as pages visited, features used, device information, browser type, IP address, and session identifiers. Where possible, we aggregate or pseudonymize this information and use it primarily for security, service improvement, troubleshooting, and product analytics.
1.4 Session Recordings
Where enabled, we may collect session replay information to diagnose technical issues, improve usability, provide customer support, and enhance the security of the platform. Sensitive fields such as passwords are masked.
1.5 Enterprise Memory
blueclip maintains a private, customer-specific knowledge layer ("Enterprise Memory") containing company rules, workflows, SOPs, constraints, terminology, and site-specific details used to improve agent intelligence. Enterprise Memory is isolated per customer and never shared across organizations. Customers may request updates or deletion of Enterprise Memory in accordance with their agreement and applicable law.
1.6 Cookies and Similar Technologies
We use cookies and similar technologies to maintain your session and authentication state, remember your preferences and settings, and understand aggregated usage patterns to improve our platform. See Section 10 and our Cookie Policy for detail.
1.7 Communications Data
When you contact us via email, support channels, or other communications, we collect the content of those communications along with associated metadata such as timestamps and sender information.
2. Legal Basis for Processing
blueclip processes personal data under the EU General Data Protection Regulation (GDPR) on the following lawful bases:
2.1 Contract Performance
We process your account information and customer business data as necessary to perform our contractual obligations, including providing access to the platform, processing your data, managing your account and user access, providing customer support, and issuing invoices.
2.2 Legitimate Interest
We process certain data based on our legitimate interests, where those interests are not overridden by your rights and freedoms. These include analyzing anonymized and aggregated usage data to improve our platform, improving the quality and accuracy of our AI capabilities through analysis of anonymized and aggregated data, ensuring the security and integrity of our platform, and preventing fraud and abuse. Where required, we assess our legitimate interests against the rights and freedoms of individuals.
2.3 Consent
Where we rely on consent - for example, for non-essential analytics cookies - we obtain it before processing and you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
2.4 Legal Obligation
We process personal data where necessary to comply with applicable legal obligations, such as tax reporting, regulatory requirements, and responding to lawful requests from public authorities.
3. How We Use Your Information
We use the information we collect to:
- provide, operate, and maintain the blueclip platform
- deliver AI agents, insights, recommendations, and automation
- process and manage your warehousing and supply chain operations
- authenticate your identity and manage account access
- communicate with you about your account and our services
- monitor and improve the performance and reliability of our platform
- analyze anonymized usage patterns to enhance features and user experience
- ensure the security of our systems and detect potential threats
- comply with legal obligations and enforce our terms of service
- respond to your requests and provide customer support
We do not sell your personal information or Customer Business Data.
4. How We Share Your Information
4.1 Sub-Processors
We engage trusted third-party service providers (sub-processors) who assist us in operating our platform and delivering our services. These sub-processors process data on our behalf and are contractually bound to protect your information. Our sub-processors fall into the following categories: cloud infrastructure and hosting providers; identity and authentication services; AI model inference providers (subject to contractual guarantees that your data is not used for model training); application monitoring and observability services; product analytics services (anonymized data only); and customer-relationship management (CRM) and marketing tools used for our own sales and marketing activities (which process business-contact data, not platform Customer Business Data).
A current list of sub-processors is available upon request by contacting privacy@blueclip.ai and is also published in this document as an appendix. We notify customers of material changes to our sub-processor list through the mechanisms described in our Data Processing Agreement.
4.2 Customer-Approved Integrations
When you connect blueclip to your systems (WMS, TMS, ERP, and others), data flows between blueclip and those systems as necessary to provide our services.
4.3 Legal Requirements
We may disclose your information if required to do so by law, in response to valid legal process (such as a court order), or to protect the rights, property, or safety of blueclip, our customers, or the public.
4.4 Business Transfers
In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred to the acquiring entity. We will notify you of any such transfer and any changes to this Privacy Policy.
We do not sell personal data and do not share Customer Business Data for advertising or marketing purposes.
5. Deployment Options & Data Location
blueclip supports multiple deployment models to meet your data residency and security requirements:
- blueclip Cloud (Managed Deployment) - hosted on our secure EU-region cloud infrastructure for EEA customers.
- Customer Cloud (Dedicated Deployment) - deployed inside your own cloud environment. Data stays entirely within your infrastructure.
- On-Premise Deployment - deployed in your private data center. Data never leaves your network.
By default, Customer Business Data for EEA customers using blueclip Cloud is hosted in the European Economic Area unless otherwise agreed with the customer. AI inference for the EEA offering is performed using providers configured to meet applicable European data protection requirements. Separately, certain business-contact data relating to our own sales and marketing activities is processed in the United States under Standard Contractual Clauses, as described in Section 9. Platform Customer Business Data and sales/marketing contact data are kept separate and do not mix.
6. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law.
| Data Type | Retention Period |
|---|---|
| Account information | Duration of active subscription, plus 90 days after termination |
| Customer business data | Retained for the period specified in the applicable customer agreement; deleted or anonymized thereafter unless we are legally required to retain it longer |
| Usage analytics | Anonymized and aggregated; no personally identifiable information retained |
| Session recordings | Up to 1 year |
| Application and access logs | Up to 1 year |
| Communications data | 2 years from the date of the communication |
| Billing and payment records | As required by applicable tax and financial regulations |
Upon account termination, we delete or anonymize your data within the timeframes specified above. You may request earlier deletion by contacting privacy@blueclip.ai.
7. Data Security
We implement appropriate technical and organizational measures to protect your personal data, including:
- industry-standard encryption in transit and at rest
- role-based access control and least-privilege principles
- multi-factor authentication for administrative access
- regular security assessments and vulnerability scanning
- web application firewall and DDoS protection
- tenant isolation at application and database layers
- comprehensive audit logging and monitoring
- incident response procedures with defined notification timelines
blueclip maintains SOC 2 Type I compliance. Our SOC 2 report and security documentation are available to customers upon request under NDA.
Where required by applicable law, we will notify affected customers without undue delay after becoming aware of a personal data breach affecting Customer Business Data.
8. Your Rights
8.1 Rights Under the GDPR (EEA)
If you are located in the EEA, you have the right to:
- Access your personal data and obtain a copy
- Rectification of inaccurate or incomplete data
- Erasure ("right to be forgotten") where data is no longer necessary
- Restriction of processing in certain circumstances
- Data portability in a structured, commonly used, machine-readable format
- Object to processing based on legitimate interest
- Withdraw consent at any time where processing is based on consent
- Lodge a complaint with a supervisory authority
Our lead supervisory authority is the Data Protection Commission (DPC), Ireland (www.dataprotection.ie). EEA users may also lodge a complaint with their local supervisory authority.
8.2 Rights Under UK GDPR (United Kingdom)
If you are located in the United Kingdom, you have equivalent rights under the UK GDPR and the Data Protection Act 2018. To lodge a complaint, you may contact the Information Commissioner's Office (ICO).
8.3 Exercising Your Rights
To exercise any of these rights, please contact us at privacy@blueclip.ai. We will respond within one month, as required by the GDPR (extendable by two further months for complex requests). We may need to verify your identity before processing your request. If you are an end user of a customer organization, we may direct you to your organization's administrator, as blueclip acts as a data processor on behalf of the customer.
9. International Data Transfers
9.1 Processing Location
For customers and users in the EEA, all Customer Business Data used within the platform is processed and stored within the EU/EEA and is not transferred outside the EEA in the ordinary course of providing the service. Separately, certain business-contact and marketing data relating to our own sales and marketing activities is processed in the United States. These are two separate categories of data and are not combined.
9.2 Limited Transfers & Safeguards
Where personal data is transferred outside the EEA - for example, business-contact and marketing data processed in our US-based sales and marketing tools, or limited support access - we rely on appropriate safeguards under the GDPR, such as European Commission adequacy decisions or Standard Contractual Clauses (SCCs), together with supplementary technical and organizational measures.
9.3 Data Processing Agreement
Every enterprise customer is offered a Data Processing Agreement (DPA), incorporating Standard Contractual Clauses where relevant for any transfers. You may request a copy of our DPA by contacting privacy@blueclip.ai.
10. Cookies
10.1 Essential Cookies
We use essential cookies that are strictly necessary for the operation of our platform, including session cookies for authentication and login state, security cookies for CSRF protection and fraud prevention, and load-balancing cookies for service reliability. Essential cookies cannot be disabled as they are required for the platform to function.
10.2 Analytics Cookies
We use analytics tools that collect anonymized and aggregated data about feature usage and navigation patterns. In the EEA, non-essential analytics cookies are set only with your prior consent via our cookie banner, and no personally identifiable information is collected through analytics cookies.
10.3 Advertising Cookies
We do not use advertising or behavioral targeting cookies within the blueclip platform itself. On our public website, a limited number of marketing and conversion-measurement cookies (for example, from LinkedIn) may be set, but only after you accept the corresponding category in our cookie banner. See our Cookie Policy for the full list.
10.4 Cookie Management
You may manage your consent at any time through our cookie banner or your browser settings. A full list of the cookies we use is set out in our Cookie Policy. Disabling essential cookies may affect your ability to use the platform.
11. AI Agents and Machine Learning
- We do not use your Customer Business Data or Personal Data to train general-purpose AI models. We require AI providers to process Customer Business Data solely for providing the requested services and not for training their general-purpose models, subject to the terms of our agreements with those providers, unless a customer expressly instructs us to do so.
- For the EEA offering, AI inference is performed using providers configured to meet applicable European data protection requirements; the reasoning layer is independent of the underlying model and customers may select among supported providers.
- We may use anonymized, aggregated data to improve our own platform and AI capabilities.
- Enterprise Memory is private per customer and is never shared across organizations or used to train models for other customers.
12. Automated Decision-Making and Sensitive Data
blueclip provides recommendations and operational insights but does not make solely automated decisions that produce legal or similarly significant effects on individuals.
The platform is not intended to process special categories of personal data (as defined in Article 9 of the GDPR) unless a customer instructs us to do so and has established an appropriate legal basis for that processing.
13. Website Visitors, Contact and Marketing Data
When you submit information through our website - for example, contact forms, demo requests, or newsletter sign-ups - we use that information to respond to your request, provide the information or services you ask for, and, where you have agreed or where we are otherwise permitted, to send you marketing communications about our products and services. You can opt out of marketing communications at any time. We process this data on the basis of your consent or our legitimate interest in responding to enquiries and promoting our services, and we retain it only as long as necessary for those purposes.
14. Children's Privacy
blueclip is a B2B enterprise platform and is not intended for individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have collected personal data from a child under 16, we will take steps to delete that information promptly.
15. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by posting the updated policy on our website and updating the "Last Updated" date. For significant changes, we will provide additional notice via email or through the platform.
16. Data Controller & Contact
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact:
Data Controller (EEA / UK): Blueclip Limited
136 Capel Street, Dublin, D01 T2C9, Ireland
Data Controller (US / rest of world): x2i Inc.
711 S Dearborn, Chicago, 60605 IL, USA
Email: privacy@blueclip.ai
We have assessed our processing activities and determined that we are not required to appoint a Data Protection Officer under Article 37 of the GDPR. Privacy matters are handled by the contact above.
To report a security vulnerability or incident: security@blueclip.ai