Blastworks
Privacy Policy
Blastworks — last updated 17 October 2026
This policy covers this website, my contact and order forms, and what I sell from it. A separate section below covers my internal tools that connect to Google services.
Who I am
Kristof Kennes, trading as Blastworks (sole proprietorship), Kuytekopstraat 5 bus GVL0, 2880 Bornem, Belgium. Enterprise number 0795.868.271. Email: blastworksai@gmail.com.
What I use your details for
If you contact me or ask for a demo or training, I use the details you send to reply, arrange the call or work, and keep the thread together. If you buy something, I use your details to take payment, deliver your licence or service, and send the invoice. If you ask to be told when BlastCast checkout opens, I email you once when it opens. To run and secure this website, my host and Cloudflare process technical data such as your IP address and request logs.
Who I share it with
I do not sell your data. I share it only with the services needed to answer you, take payment and deliver your key. My website runs on a server at netcup GmbH in Germany, behind Cloudflare, which helps deliver and protect it. Enquiry forms run through my own email relay into my Gmail mailbox (Google); the relay itself stores nothing. Online checkout is not open yet; when it opens, this policy will name the payment provider before anyone can pay.
Cookies and analytics
I do not use analytics, advertising or profiling on this site. Technical processing needed to deliver and protect the site still happens, as described above.
How long I keep it
Enquiries that do not become orders: I delete your personal details 12 months after our last meaningful contact. Order, invoice and accounting records: I keep them for 10 years, the legal retention period that applies in Belgium. Requests to be told when checkout opens: I email you once when it opens, then delete your details within 3 months unless you buy or reply. My server keeps no visitor logs; Cloudflare keeps technical logs for a short period under its own policy.
BlastCast and Repute data
BlastCast and Repute data does not go to me at all. BlastCast recordings stay on the host’s and guests’ own computers; guests connect either through the built-in temporary localhost.run address or through the host’s own Cloudflare Tunnel, and those providers process connection data under their own terms. Repute runs on your own infrastructure and works in your mailbox (Gmail today; Outlook is planned); I never see your email. A demo runs on my machine with fictional emails, so none of your mail is sent to me for it.
Your rights
You can ask me what personal data I hold about you, ask me to correct or delete it, object to or limit how I use it, ask for a copy in a portable format, and withdraw any consent you gave at any time: email blastworksai@gmail.com. I answer within one month. You can also complain to the Belgian Data Protection Authority.
YouTube API Services (internal tools)
Some internal Blastworks tools connect to Google services (such as a YouTube upload tool) using Google OAuth. That tool uses YouTube API Services; by using it, you also agree to the YouTube Terms of Service. Google’s handling of data is described in the Google Privacy Policy.
With explicit consent via Google’s OAuth flow, the tool accesses the relevant YouTube account solely to upload videos, thumbnails and captions provided for that purpose, and to manage the metadata of those uploads. It stores an OAuth token, encrypted at rest on my own infrastructure, only while the tool is in use. You can revoke access at any time via the Google security settings page, which immediately invalidates the stored token; stored tokens and processed files are also deleted on request via the email address above.