BLZN Works, operated by Blue Horizen Technology, a company in Armenia, is responsible for the website, contact and purchase-delivery information described here. Submit privacy requests at https://blznworks.com/contact?topic=privacy.
Supplier Update Guard reads CSV files and creates its outputs in the browser's tab memory. The product has no customer CSV upload API, file analytics or server-side row or filename storage. Clearing the session or closing the tab discards the current working data; files you download remain on your device. Browser extensions, your device and your own hosting setup operate independently.
The contact form privately stores the name, email, selected topic, message, submission time and inquiry reference you provide. Authorized operators use those records to handle support, privacy, purchase and other inquiries. Do not paste catalog data, credentials, card information or unnecessary sensitive personal information into a message. Submitting the form is not an order or an automatic email-support subscription.
For verified purchases, the server receives the payer email and customer identifier from Paddle and keeps the minimal order, provider transaction, product, release, policy, monetary, event digest, access and delivery records needed to provide access, prevent fraud, reconcile payment status and handle refunds or disputes. Payer email is protected at rest with application Data Protection. Sign-in tokens are hashed; raw payment card numbers are not received or stored by BLZN Works.
Paddle processes checkout information as merchant of record under https://www.paddle.com/legal/privacy. Resend processes the delivery email address and message needed to send access links under https://resend.com/legal/privacy-policy; the verified sending domain uses its ap-northeast-1 region. The website and its database are hosted on Microsoft Azure in the United States (East US) and served through Cloudflare. These providers can process technical data internationally under their applicable terms and safeguards.
The website uses essential cookies for form protection, contact confirmations and purchase access. The access cookie is protected by the application, limited to the full-version address and lasts up to 90 days; it identifies the paid order, not your files. Checkout uses the functional browser session state and Paddle scripts needed to complete and verify an order. Server or CDN security logs can contain request times, paths, IP addresses and error information. There are no advertising trackers, product analytics or compulsory marketing signup; purchase data is not sold for advertising.
Purchase and support information is retained while needed to provide the purchased access, handle inquiries and disputes, maintain security and satisfy applicable record-keeping duties. An operator reviews correction and deletion requests, including legal retention exceptions and protected backups; this policy does not claim an automatic purge service or an unimplemented deletion timetable. Access is restricted to authorized operators and service providers for the stated purposes.
You may ask about access, correction, deletion, applicable objections or other rights through the privacy contact form. Reasonable proof of control of the relevant email or purchase may be needed to protect another person's records. Include only the information needed to locate the request, never a full card number, password or store export. Applicable complaint and regulatory rights remain available.
Customer accounts
Added 17 October 2026.
Creating a BLZN Works account is optional; you can still buy as a guest. If you create one, we store your name, email address and whether you confirmed it, a one-way hash of your password (never the password itself), when you accepted the terms, and a short history of sign-in and security events (the type of event and its time, without IP addresses). Your account lists the purchases you made while signed in or paid for with your confirmed email address.
If you choose to sign in with Google or GitHub, that provider handles the sign-in under its own privacy policy and shares your account identifier, name and verified email address with us. We never receive your password for that service.
Confirmation, password-reset and security-notice emails are sent through our email provider, Resend. Single-use links in these emails are stored only as hashes and expire. A protected sign-in cookie keeps you signed in; it contains no password, and it lasts until you close the browser, or up to 14 days without a visit if you choose to stay signed in.
From your account pages you can change your details, download your account data as a file, and delete your account at any time. Deleting it removes the account, its sign-in methods, links and activity history. Purchase and payment records needed for access, refunds, disputes and record-keeping are kept as explained in the rest of this policy.
Website statistics
Added 17 October 2026.
To see which pages are visited and how quickly they load, our public pages use Cloudflare Web Analytics, a statistics service from Cloudflare, which already delivers this website. It sets no cookies, uses no local storage and does not build a profile of you or track you across other websites. These are website visit statistics only: they are not advertising trackers and do not analyse how you use our products.
For each page view, the service records the page address, the referring page, your browser and device type, an approximate country and page-load timings. We only see these as combined totals.
The statistics script is not added to account, checkout, contact or purchase-access pages, and it never runs inside Supplier Update Guard, so it cannot see your CSV files or their contents. Cloudflare processes this information under its own privacy policy at https://www.cloudflare.com/privacypolicy/.
Licensed apps, extensions and add-ins
Added 5 November 2026.
Some BLZN Works products run in your browser, Office, Google Sheets, Visual Studio Code, WordPress or Windows and unlock Pro features with a license key bought on blznworks.com. Paddle processes the payment as merchant of record under its own Privacy Policy.
For each license we store the product, plan, Paddle customer and transaction references, the amounts paid, an encrypted copy of the license key and of the email address used at checkout (plus a keyed one-way index of that address so your account can find the key), and the license state and end date. The key is emailed to you through our email provider, Resend, and shown in your account.
When you activate a key, the product sends the key and a random installation identifier that it creates for itself. We store only a one-way hash of that identifier, the distribution channel (for example "chrome" or "windows") and when it was first and last seen. We do not collect hardware identifiers, IP addresses in license records, or the files and content you work on. A product checks the license online about once a day and works offline for up to 7 days. An installation not seen for 45 days stops using one of your devices automatically, and you can remove a device yourself from your account.
Products may also send anonymous usage counts: the product, channel, event (installed, used today, reached a free limit, uninstalled) and the day. These counts contain no identifier of you or your device, and requests that carry a Do Not Track or Global Privacy Control signal are not counted. Where a store requires your consent for usage data (for example Firefox), the product asks first.
Offline Transcribe downloads its speech-recognition model once from Hugging Face when you choose a model, so Hugging Face can see your IP address and which model file was requested, under its own privacy policy. Your audio and transcripts stay on your computer.
License and payment records are kept while the license exists and afterwards as needed for refunds, disputes and record-keeping, as described in the rest of this policy.
Fuzzy Match for Google Sheets
Added 6 November 2026. Updated 9 November 2026.
What the add-on can access. Fuzzy Match asks Google for three permissions: to view and edit only the spreadsheet you use it in (spreadsheets.currentonly), to show its menu and sidebar (script.container.ui), and to connect to an external service (script.external_request), which is limited to blznworks.com. It reads the cell ranges you choose or pass to its formulas, and writes its results back as new columns, colours and formula results. It cannot open your other spreadsheets or your Google Drive, and it does not read your Google account name or email address.
Where your data is processed. Matching runs inside Google Apps Script, on Google's servers.
What leaves the spreadsheet. The add-on sends only the following to blznworks.com, over HTTPS:
- Anonymous usage counts: the product, the channel "sheets" and the event (installed, used today, or reached a free limit).
- If you use a Pro license: your license key, a random installation identifier that the add-on creates for itself, the product and the channel. It sends these to activate, check or remove the license.
- If you start an upgrade from the add-on: a random one-time code, with the same installation identifier, that lets the add-on collect your key after payment.
Your cell contents, formulas, sheet names, file name and Google account details are not sent to blznworks.com, and the add-on sends nothing to any other outside service.
What is stored. In your own Google account, Apps Script keeps the license key, the signed license token, the installation identifier, your plan, and the settings of your last run, including sheet names and cell ranges but not cell contents. Inside the spreadsheet it keeps only the date until which Pro formula limits apply. On our side, blznworks.com stores what the section "Licensed apps, extensions and add-ins" above describes: for a license, a one-way hash of the installation identifier with its first and last check, and for anyone, the anonymous daily counts.
Error logs. When an add-on action fails, Google Apps Script records the error message in the Google Cloud logs of our Apps Script project. These messages are short and can include a sheet name, a cell range or an option typed into a formula. We use them only to fix faults.
How we protect your data. Your cell contents are processed inside Google Apps Script and are not sent to or stored by BLZN Works. Every connection between the add-on and blznworks.com is encrypted in transit with HTTPS, and the add-on's Apps Script manifest allows outside connections to blznworks.com only. On our servers, license keys and checkout email addresses are stored encrypted, and installation identifiers are stored only as a one-way hash. The short error messages described above stay in the Google Cloud logs of our Apps Script project.
Sharing. We do not sell Google user data, use it for advertising, or share it with anyone. A purchase happens separately on blznworks.com and Paddle, using the details you enter there.
BLZN Works' use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Removing access. Remove the add-on in Google Sheets under Extensions, or revoke it in your Google account's permissions. To delete license records held by BLZN Works, use the privacy inquiry form.
Supplier Price Watch
Added 6 November 2026.
Supplier Price Watch is different from our browser tools: it runs on our server, so it stores your data there. When you add a watch we store its name, the supplier file address you enter, the column names and your alert setting, linked to your BLZN Works account.
Once a day our server downloads the file from that address. We keep one copy of the last accepted SKU and price list so that we can compare the next file against it, plus a history of each check: its date, its result and the number of changed, new and removed SKUs. We keep the 60 most recent checks for each watch.
The address and the stored price list are encrypted. A report is sent to your confirmed account address through our email provider, Resend, and its text is deleted from our database once it has been delivered. Your account pages and data export show only the host name of the address, because an address can contain a private token.
Only enter an address you are allowed to use. Do not point a watch at a file that contains personal data. We use the file only to produce your reports and do not share it or use it for anything else.
Removing a watch deletes its address, stored price list, history and any unsent report. Deleting your account does the same for all your watches. If your subscription ends, checks stop and your watches stay in your account until you remove them or delete the account.
CaseVane legal drafting workspace
Added 8 November 2026.
The legal drafting workspace is for licensed Canadian lawyers, paralegals and regulated immigration consultants. Unlike our browser tools, it runs on our server, so the documents you paste pass through it. You are the one who decides what client information to share, and you remain responsible for your professional duties of confidentiality, including any client consent they require.
When you start a draft we store the file reference you type, the service you chose and the text you paste, linked to your BLZN Works account. The pasted text is encrypted while it waits and while the draft is being written.
To write the draft, our server sends the pasted text, with sections of the Immigration and Refugee Protection Act and Regulations, to OpenRouter, which passes it to Anthropic's Claude models. Each of them handles it under its own terms and privacy policy. We do not use your documents to train models, and we do not share them for any other purpose. When case citations are checked, only the citation itself, such as 2024 FC 123, is sent to CanLII, never your documents.
The pasted text is deleted from our database as soon as the draft finishes, whether it succeeds or fails. The finished draft, its review and its check results are stored encrypted in your account until you delete the draft. We also keep each draft's status, dates and model cost. Our server logs record a draft's number, outcome and cost, never its content.
Remove personal details the draft does not need, and use your own file reference instead of the client's name. Deleting a draft removes it and anything still stored with it. Deleting your account removes all your drafts. Your account data export lists your drafts by file reference, service, status and date, and each draft can be downloaded from its own page.