BlvkWare.

Privacy Policy

BlvkWare does not run analytics, does not set cookies, and has no user accounts. The free tools on this site run entirely inside your browser. Two things do use a server: the kit service, which lists and generates agent kits, and the HALLUX API. This page explains precisely what each part does with your information, including the parts involving third parties.

Who is responsible

BlvkWare is a sole operation run by William Russell Wheeler, based in Mississippi, United States, and selling to businesses nationwide. For anything on this page, write to russ@blvkware.dev.

What this website collects

No accounts. No cookies. No analytics. No advertising or tracking pixels. There is no sign-up anywhere on this site and no profile is ever built about you.

Hosting logs

The site is served as static files by GitHub Pages. Like any web host, GitHub records standard request data (your IP address, browser user agent, and which files were requested) for delivery and abuse prevention. BlvkWare cannot see these logs. GitHub's handling of that data falls under GitHub's own privacy statement.

Fonts

Typefaces are loaded from Google Fonts (fonts.googleapis.com). Your browser contacts Google to fetch them, which means Google receives your IP address and user agent as part of that request. No other Google service is used, and no font request carries any information about what you are doing on the site.

What the tools do with your input

Business Scan, Agent Designer and App Builder are client-side applications. Their code runs on your device. There is no BlvkWare backend receiving your prompts, your API key, or your results.

Your AI provider key

The tools need an AI model to work. On this public site you supply your own key from a provider you choose. That key is stored in your browser's localStorage, on your own device, and is sent directly from your browser to the provider you selected (Google AI Studio, OpenRouter, or Groq) over HTTPS. It never passes through BlvkWare. Clearing your browser storage, or using the "Forget key" button, removes it permanently.

Whatever you type into a tool is sent to that provider along with the request, and is handled under their privacy terms. Read those if you intend to enter anything sensitive.

Data kept in your browser

The tools store a small amount of state in localStorage on your device: your chosen provider and API key, your light/dark theme preference, in App Builder the builds you've generated, and on the kit page the agent design you are working on, so they survive a page reload. None of it leaves your device except as described under the kit service below. Clearing site data in your browser deletes all of it.

Business Scan and third-party page readers

Business Scan analyses a public web page you nominate. A browser cannot fetch an arbitrary website directly, so the address you enter is passed to public read-only relay services, currently corsproxy.io, api.allorigins.win and r.jina.ai, which retrieve the page and return it. Those services see the URL you asked for and your IP address. They are independent third parties operating under their own terms. Only the address is sent; no other information about you is included.

Downloading a report or a design

The download buttons in Business Scan and Agent Designer build the file in your browser and save it to your device. Nothing is sent anywhere.

Designing and buying a kit

The kit service

The kit page sends the design you make to BlvkWare's kit service: the role, the systems, channels and capabilities you picked, the autonomy level, and your answers about your business, including any rules you write. The service uses it to list the files in your kit and, when you download, to generate the kit. The design is not stored. Once the response is sent it is gone, and BlvkWare keeps no copy of it or of your kit.

The kit service runs on Netlify, which records standard request data (your IP address, browser user agent and the time) as any host does, under Netlify's own privacy policy.

Your licence key

When you download, the kit service checks your licence key with Gumroad. It keeps one record per key: a one-way fingerprint of the key, which cannot be turned back into the key, with the role it unlocked, the kit size, the times of its first and latest download, and a download count. That is all. No name, no email address and no design is kept with it. The key itself is not stored in your browser either.

Gumroad

Kits are bought on Gumroad, which collects what it needs to take your payment and issue your key, under Gumroad's own privacy policy. BlvkWare never sees your card details. As the seller, BlvkWare can see the purchase in its Gumroad account, including the email address you bought with. That is used only for your purchase, to answer you or to handle a refund, and is never added to a marketing list.

The HALLUX API

HALLUX, the package-verification API at api.blvkware.dev, meters requests by a salted, truncated hash of the calling address rather than the address itself, so its quota records cannot be walked back to an IP address. Its hosts, Netlify and Hugging Face, record standard request data as any host does. The method is set out in the HALLUX documentation.

When you email BlvkWare

Email sent to russ@blvkware.dev is received and stored in Zoho Mail. Your address and the content of your message are kept so the conversation can continue. It is never sold, never shared with advertisers, and never added to a marketing list without you asking. Ask and it will be deleted.

Your rights

Because there are no accounts and no tracking, there is usually nothing held about you at all. Where there is (an email you sent, or a purchase), you may ask for a copy, a correction, or its deletion, and you may object to its use. Write to russ@blvkware.dev and it will be handled within 30 days at no cost.

Depending on where you live, these rights may be guaranteed to you by law, including the UK and EU GDPR and the California Consumer Privacy Act. BlvkWare does not sell personal information, under any definition, to anyone.

Security

Everything is served over HTTPS. There is no account system and no store of personal data to breach: the kit service keeps no design and no kit, and its only records are licence-key fingerprints, which cannot be turned back into keys. The main security consideration is your own AI provider key, which is why it stays on your device and is never transmitted to BlvkWare.

Changes

If this policy changes, the date at the top changes with it. Material changes will be described plainly rather than buried.