Privacy Policy
Which personal data Blob Web Explorer processes, why, where it is stored, and how you can exercise your rights — for the website, the SaaS service, Platinum editions, and the Azure Marketplace application.
At a glance
- Your files stay in the Azure Storage accounts you connect. We access them only to perform the operations you request.
- We process the account, configuration, sharing, activity, and support data needed to run and secure the service.
- With Azure Marketplace, application data is stored in your own Azure subscription.
- Website analytics run only if you accept analytics cookies. We never sell personal data.
1. Who is responsible
ONERiC EI ("we"), France (contact@blobexplorer.com; full details in the Legal notice) is the data controller for the website and for accounts created on the SaaS service.
When an organization uses Blob Web Explorer for its own users — through a Platinum edition or Azure Marketplace — that organization is the controller of its users' data. We act as a processor when we process that data on the organization's behalf, for example in a publisher-managed Platinum deployment or during a support case.
2. Data we process
| Category | Examples | Purpose |
|---|---|---|
| Account and identity | Name, email address, country, identity provider identifier, and, in enterprise deployments, the role or group assigned by your organization | Sign-in, authorization, account management |
| Storage configuration | Container alias and name, storage account name, connection mode, and the connection settings you provide | Connecting the containers you choose |
| Sharing | Recipient email, permission, validity period, optional sharing reason | Granting and controlling access to shared containers |
| Activity logs | User, action, file name and path, size, date, outcome, error code, IP address, correlation identifier | Audit trail, security, troubleshooting |
| Product usage events | Event name, plan, outcome, and a one-way hash of the email address | Service reliability and product improvement |
| Support | Ticket content, messages, attachments, contact details | Answering and following up support requests |
| Billing (paid SaaS plans) | Stripe customer identifier, plan, invoices. Card details are processed by Stripe only. | Subscription management and invoicing |
| Azure Marketplace provisioning | Managed application identifier, subscription identifier, plan, event type | Delivering deployment credentials to your deployment |
| Website | Name, email address, organization and message content when you use the contact form or send us an email; page and interaction analytics if you consent | Answering requests and measuring website usage |
The website contact form sends your request directly to our team. We store the form content with a keyed hash of your IP address, used only to limit abuse, and forward it to our mailbox. An anti-spam check (Cloudflare Turnstile) runs when you use this form. The website's custom analytics events do not include form field values.
3. Your files
Blob Web Explorer reads and writes files in your storage accounts only when you or your users perform an operation (browse, preview, download, upload, rename, move, copy, delete, index). Files are not copied into a separate repository of ours and are not used for analytics, advertising, or model training.
If you use Search, an index of file names, paths, sizes, types, dates, blob metadata, and tags is stored with the application data so that results can be shown quickly. You can clear this index at any time.
4. Legal bases
- Performance of a contract — providing the service, accounts, sharing, billing, and support.
- Legitimate interests — securing the service, keeping activity logs, preventing abuse, and improving reliability.
- Consent — website analytics cookies. You can withdraw consent at any time from the cookie settings.
- Legal obligations — keeping invoices and accounting records.
5. Where data is stored
| Edition | Application data | Your files |
|---|---|---|
| SaaS | Our Microsoft Azure environment | Your storage accounts |
| Platinum Lite and Standard | Dedicated deployment managed by us, in the agreed Azure region | Your storage accounts |
| Platinum Premium | Data layer controlled by you | Your storage accounts |
| Azure Marketplace | Azure App Service and Azure Storage in your own subscription | Your storage accounts |
For Azure Marketplace deployments, our provisioning service receives only the Marketplace event data needed to deliver credentials to your deployment. It does not receive your files or your application data.
6. Service providers
We share personal data only with providers that help us deliver the service, under contractual safeguards, or when required by law:
- Microsoft — Azure hosting, Microsoft Entra ID and Azure AD B2C sign-in, Microsoft Graph for enterprise role resolution.
- Stripe — payments, invoices, and the billing portal for paid SaaS plans.
- Google — Google Analytics if you accept analytics cookies.
- Cloudflare — Turnstile anti-spam check of the website contact form.
- IONOS — mailbox and email relay used to receive and answer contact requests.
- Email delivery — transactional emails and replies to contact requests.
We do not sell or rent personal data.
7. International transfers
SaaS data is hosted in the European Union. Some providers may process data outside the European Economic Area; in that case, transfers rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or an adequacy decision. For Azure Marketplace deployments, you choose the Azure region.
8. Retention
- Account data — for as long as the account exists. Deleting your SaaS account removes your profile and the containers you linked.
- Activity logs and support tickets — for as long as needed for security, audit, and follow-up, then deleted or anonymized.
- Website contact requests — up to three years after our last exchange with you, unless you become a customer.
- Invoices — for the period required by French accounting law.
- Customer-managed deployments — retention is decided by your organization, which controls the Azure resources.
9. Your rights
Under the GDPR you can request access, rectification, erasure, restriction, or portability of your data, object to processing based on legitimate interests, and withdraw consent at any time. Email contact@blobexplorer.com; we answer within one month.
If your account is provided by your organization (Platinum or Azure Marketplace), contact your administrator first: your organization controls that data. You can also lodge a complaint with the CNIL (www.cnil.fr).
10. Security
We use encrypted connections, authenticated access, role-based permissions, server-side authorization of every file operation, and encrypted storage of deployment secrets. Access to production data is restricted to our authorized personnel who need it to operate or support the service.
11. Updates
We update this policy when the service or the law changes. The date at the top of the page shows the latest version; significant changes are announced by email or in the application.