Blockwave Media, LLC – GDPR & Data Protection Notice

Last updated: November 2025

This page provides additional information required under the EU General Data Protection Regulation ("GDPR") and similar laws about how Blockwave Media, LLC handles personal data.

1. Roles

For shop users (our direct customers), Blockwave Media, LLC typically acts as a data controller for account data and platform configuration.

For end-customers of shops (vehicle owners receiving messages), Blockwave Media, LLC typically acts as a data processor on behalf of the shop, which is the data controller with respect to that relationship.

2. Categories of Personal Data Processed

We process, among others, the following categories of data:

  • Account data (name, email, authentication data)
  • Shop data (shop name, contact information, locations)
  • Customer data (names, phone numbers, vehicle details)
  • Communication data (SMS content, timestamps, delivery status)
  • Usage and technical data (logs, device information, IP)

3. Purposes and Legal Bases

We process personal data for the purposes and on the legal bases described in our Privacy Policy, including:

  • Providing and improving the Service (performance of a contract)
  • Securing our systems and preventing abuse (legitimate interests)
  • Complying with legal obligations (e.g., record-keeping, tax, regulatory)
  • Offering AI-assisted messaging and analytics features (contract and legitimate interests, with safeguards)

4. AI and Automated Processing

Blockwave Media, LLC uses AI models to assist shops in drafting replies, summarizing threads, and analyzing workflow performance. These models may process message content, timing, and metadata.

We do not use AI to make legally binding decisions about individuals without human oversight. Shops remain responsible for reviewing key communications and decisions relating to their customers.

5. Data Location and Transfers

Where feasible, we use infrastructure in the EU/EEA for EU customer data. When personal data is transferred outside the EU/EEA (for example, to infrastructure or service providers in other countries), we rely on appropriate safeguards such as Standard Contractual Clauses or equivalent legal protections.

6. Data Retention and Deletion

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce agreements. Shops may request deletion of certain categories of data, subject to legal and operational constraints.

End-customers may request deletion or limitation of their data via the shop they interact with, or directly from us; we will coordinate with the relevant shop controller where appropriate.

7. Your GDPR Rights

Subject to applicable law, you may have the right to request:

  • Access to your personal data
  • Correction of inaccurate or incomplete data
  • Erasure of your personal data
  • Restriction of processing
  • Data portability
  • Objection to processing based on legitimate interests

To exercise these rights, please contact us using the details below. If you are a vehicle owner and Blockwave Media, LLC is processing your data on behalf of a shop, we may refer your request to that shop.

8. Supervisory Authorities

You also have the right to lodge a complaint with a supervisory authority, in particular in the EU Member State of your habitual residence, place of work, or place of the alleged infringement.

9. Contact for Data Protection

If you have questions about this GDPR notice, our data protection practices, or wish to exercise your rights, you can contact:

Email: support@blockwavemedia.io