Privacy Policy

Who we are

Blue Flame Group is a software company headquartered in El Paso, Texas. We build and operate 8AI, a cloud-native platform for public housing authorities. For the purposes of this policy, Blue Flame Group is the data controller for information collected through this website.

What we collect

Information you provide directly

When you submit the demo request form on this website, we collect:

• Full name
• Work email address
• Agency or organization name
• Phone number (optional)
• Any message or notes you include in the form

We do not collect payment information, government identification, or sensitive personal data through this website.

Information collected automatically

When you visit this website, standard web server logs and browser signals may capture:

• IP address (typically anonymized at the network layer)
• Browser type and version
• Pages visited and time spent
• Referring URL
• Device type and operating system

This site does not currently use cookies for tracking or analytics, and does not deploy advertising pixels or third-party analytics scripts. If that changes, this policy will be updated and visitors will be notified.

How we use it

Data	Purpose	Legal basis
Demo request details	Schedule and prepare a product demonstration; follow up on your request	Your consent (form submission)
Name & email	Send requested information about 8AI; respond to enquiries	Legitimate interest / consent
Agency name	Tailor the demo to your program type and caseload	Legitimate interest
Server logs	Security monitoring, error diagnosis, uptime reporting	Legitimate interest

We do not sell, rent, or trade your personal information. We do not use it for advertising targeting or profiling unrelated to your enquiry.

Third-party services

This website uses the following third-party services. Each has its own privacy policy governing how it handles data:

Service	Purpose	Data shared
Formspree	Form submission delivery	Name, email, agency, message — transmitted to deliver your request to us
Google Fonts	Typography (Montserrat typeface)	IP address sent to Google servers to load font files
Google Maps	Office location map on the About page	IP address and browser data per Google's privacy policy
Microsoft Azure	Website hosting (Azure Static Web Apps)	Standard web traffic data per Microsoft's privacy statement

We select third-party providers with documented security and privacy practices and limit the data shared to what is necessary for each service to function.

PHA & participant data

This section applies to public housing authorities that use the 8AI platform under a software agreement with Blue Flame Group.

When a PHA uses 8AI to process eligibility determinations, recertifications, or other housing operations, the PHA is the data controller for its participants' personal information. Blue Flame Group acts as a data processor — processing that data only on the PHA's instructions and under the terms of your agency's data processing agreement (DPA).

Participant data processed through 8AI may include:

• Names, addresses, and household composition
• Income, employment, and asset information
• Government-issued identification numbers
• Immigration or citizenship status (where required by HUD regulations)
• Case history, recertification records, and inspection results

Blue Flame Group does not use participant data for any purpose other than operating and improving the 8AI platform under the applicable agreement. Participant data is never sold, shared with advertisers, or used for profiling outside the platform.

HUD alignment: 8AI is designed to support PHA compliance with HUD's data security requirements under 24 CFR and applicable PIH Notices. PHAs retain responsibility for their own regulatory obligations. Contact us to request a copy of our standard Data Processing Agreement or security documentation.

How long we keep it

• Demo request data — retained for 24 months from submission, or until you ask us to delete it
• Sales correspondence — retained for the duration of the business relationship plus 3 years
• Server logs — retained for 90 days for security and diagnostic purposes, then deleted
• PHA platform data — governed by your agency's data processing agreement; typically retained for the term of the agreement plus a transition period

Your rights

Depending on where you are located, you may have the following rights regarding your personal information:

• Access — request a copy of the personal data we hold about you
• Correction — ask us to correct inaccurate information
• Deletion — ask us to delete your data (subject to legal retention obligations)
• Opt-out — unsubscribe from any marketing communications at any time
• Portability — receive your data in a structured, machine-readable format
• Objection — object to processing based on legitimate interest

Residents of California have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what categories of personal information we collect and to opt out of any sale of personal information. We do not sell personal information.

To exercise any of these rights, contact us at info@blueflamegroup.ai. We will respond within 30 days.

Security

Blue Flame Group implements technical and organizational measures appropriate to the nature of the data we handle:

• This website is served over HTTPS with TLS encryption
• Form data is transmitted encrypted to Formspree and delivered to us over secure channels
• The 8AI platform runs on Microsoft Azure infrastructure with enterprise-grade access controls, audit logging, and data encryption at rest and in transit
• Internal access to personal data is limited to staff who need it to respond to your enquiry or support your account

No transmission over the internet is 100% secure. If you have reason to believe your interaction with us has been compromised, contact us immediately at info@blueflamegroup.ai.

Children's privacy

This website is not directed at children under 13 and we do not knowingly collect personal information from children. If you believe a child has submitted information through this site, please contact us and we will delete it promptly.

Note: 8AI processes household data for PHAs that may include minors as household members. That data is handled under the applicable DPA and HUD regulatory framework, not under this general privacy policy.

Changes to this policy

We may update this policy as our practices evolve or as required by law. When we make material changes, we will update the effective date at the top of this page. Continued use of this website after a change constitutes acceptance of the revised policy.

For significant changes affecting how we handle 8AI platform data, we will notify affected PHAs directly through the platform or by email.

Contact us

For any privacy-related questions, requests, or concerns, please reach us at:

We aim to respond to all privacy requests within 5 business days and to resolve them within 30 days.