BlockWise is a platform operated by SpaceNet-IT Ltd (“we”, “us”, “our”). We are the data controller for personal data processed through BlockWise. This policy explains what we collect, why, how we protect it, and your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
This is a clear-language summary intended to be genuinely useful. It is not legal advice. If you have questions, contact us at privacy@blockwise.co.uk.
What we collect
- Account data — your name, email address and authentication details.
- Workspace content — the organisations, estates, documents you upload, issues, action plans and evidence you create.
- Usage and audit data — key actions are logged (who did what, and when) to keep your workspace secure and accountable.
- Billing data — if you subscribe, payment is handled by Stripe; we store a subscription record and Stripe identifiers, not your full card details.
How we use it
- To provide the service — analysing documents, tracking issues and generating action plans.
- To secure your workspace and enforce organisation-based access control.
- To manage subscriptions and comply with our legal obligations.
- To communicate with you about your account and the service.
Lawful bases
We process your data on the basis of contract (to provide the service you sign up for), legitimate interests (to secure and improve the platform), and legal obligation (e.g. accounting). Where we rely on consent, you may withdraw it at any time.
Document analysis (AI)
When you request a summary, the text of your document may be sent to an AI provider to generate the analysis. We send only what is necessary for that purpose. AI output is advisory and may be inaccurate — it is not legal advice. If no AI provider is configured, summaries are generated locally as clearly-labelled placeholders.
Sub-processors
We use trusted providers to run BlockWise:
- Supabase — database, authentication and private file storage.
- Vercel — application hosting.
- Stripe — subscription billing.
- An OpenAI-compatible AI provider — document summarisation (where enabled).
Storage and security
Documents are stored in private, access-controlled storage. Access is restricted to members of your organisation through row-level security — there is no public access to your estate’s documents. Data is encrypted in transit.
Retention
We keep your data for as long as your account is active. You can delete content at any time, and you can delete your account from Settings, which removes your profile and any organisation for which you are the sole member.
Your rights
Under UK GDPR you have the right to:
- access the personal data we hold about you;
- request correction of inaccurate data;
- request erasure of your data;
- export your data (available from Settings);
- object to or restrict certain processing;
- lodge a complaint with the Information Commissioner’s Office (ICO).
Contact
For any privacy request, email privacy@blockwise.co.uk. You can also contact the ICO at ico.org.uk.