Privacy policy
How AI Blocks handles saved work, accounts, AI requests and optional visitor analytics, and how to contact us about your data.
Effective and last updated 22 October 2026
Who handles your information
Kevin Mark, based in India, operates AI Blocks at useaiblocks.com and is responsible for the personal information described here. Contact hello@useaiblocks.com for privacy questions, requests and grievances.
Information saved on your device
Your kits, saved context, workflow drafts, theme preference and private space owner key are stored in your browser. Free workflow assembly runs there too. Saving context alone does not send it to an AI provider.
If you copy instructions or download a pack with context included, that context becomes part of the copied text or files. Sharing those files or sending them to an AI tool shares that information with the recipient.
Information sent to our services
We use the information needed to provide the features you choose and protect them from abuse.
- Sign-in: Clerk handles account identity and sessions, including details supplied by your chosen sign-in provider. Our workflow records use your Clerk user ID to associate usage with your account.
- AI composition: your request, added context, selected options and relevant catalogue descriptions go to our configured AI provider. Saved context is included only if you select it. The service stores the generated result and usage records; a result may repeat information from your request.
- Spaces: space names and saved item content are stored on our server. Owner credentials are stored as hashes. Share links grant access to every item in the space, including items marked private; making an item public exposes it to other visitors.
- Comments: the name you enter, comment text, page and posting time are stored and displayed publicly. A salted IP hash supports abuse limits.
- Site delivery and security: Cloudflare processes network and request information, including IP addresses, to serve the site, apply limits and verify human visitors. Application abuse controls use salted IP hashes.
- Support: emailing us shares your address, message and any attachments with our support mailbox, hosted by Google Workspace. We use them to handle your request.
Why we use it
We use information to deliver requested workflows and saved spaces, authenticate accounts, display contributions, answer support requests, prevent abuse and maintain service reliability. We do not use your submitted workflow text to build advertising profiles.
Where applicable law requires a lawful basis, processing relies on providing the service you request, our legitimate interests in security and support where permitted, consent where required, and legal obligations. You can stop optional submissions or withdraw consent by contacting us; this may prevent us from providing the related feature.
Optional visitor analytics
If you choose Accept cookies, Google Analytics 4 measures public-page visits and basic device and engagement information. Microsoft Clarity provides heatmaps and masked session recordings of clicks and scrolling on eligible public pages. These providers receive technical and network information, including your IP address, when their scripts load. We use this measurement to find usability problems and understand which public resources help visitors.
Optional measurement starts only after opt-in. Private application routes, workflow requests, account identifiers, email addresses, saved context and private space links are excluded from analytics events. Google page-view events omit query strings, fragments and incoming referrers. Clarity recordings are limited to eligible public pages. Clarity is configured to mask page text and form inputs. Advertising consent stays denied.
Use Cookie preferences on the Cookies page to reject cookies or withdraw consent. Your choice is saved on this device for 180 days. Browser Do Not Track and Global Privacy Control signals disable optional tracking. Withdrawing consent stops further optional measurement and removes the site's first-party measurement cookies; it does not automatically delete information already held by the providers.
Providers and international processing
Cloudflare supplies hosting, database and human-verification services. Clerk supplies authentication. Google Workspace handles support email. With your analytics consent, Google Analytics and Microsoft Clarity process public-site measurement information. AI requests are processed by the server's selected model provider, currently OpenAI; a downloaded pack run in another AI is handled by that tool's provider.
These services may process information outside India. Their processing is subject to their applicable service terms, contracts and privacy notices. We do not promise that a provider retains nothing or uses the same settings as another provider. Disclose only information you are authorised to share.
Retention and deletion
Browser saves remain until you remove them or clear site data. Server-side spaces, comments and workflow usage/results currently have no automatic expiry. We retain service records for operation, abuse prevention and resolving requests; contact us to request deletion of your information.
Removing local browser data does not delete server records or close a Clerk account. Removing a public contribution may hide it from view without immediately erasing database records or provider backups. Some records may need to be retained for legal obligations or security.
The 180-day analytics choice controls future collection on this device; it is not a deletion deadline for provider-held measurement data. Google Analytics and Clarity retention depends on their service settings and recording or data type. Contact us for a request about that information.
Your choices and requests
Email hello@useaiblocks.com to request access, correction, deletion, account closure, withdrawal of consent or to raise a privacy grievance. Include the relevant page or account email, but never your password or private owner key. Kevin Mark handles these requests and may ask for proportionate proof of ownership.
Depending on the law that applies to you, you may also have rights to object, restrict processing, receive a portable copy, nominate a representative or complain to the relevant data protection authority. We assess requests under applicable law.
Export local workflows before clearing browser storage. Use the context drawer to clear saved context and My space to manage saved items and rotate its share link.
Age, security and policy updates
Account creation and submitting personal information are intended for people aged 18 or older. Please contact us if you believe a child has supplied personal information so we can review and remove it as appropriate.
We use access controls, hashed space credentials and abuse checks, but cannot guarantee absolute security. Keep account sessions and private device links safe. Changes to this policy will appear here with an updated date.