Last Revised On: October 29, 2026
Last Reviewed On: October 29, 2026
This Notice at Collection and Privacy Policy (“Privacy Notice”) describes how Backblaze, Inc. (“Backblaze,” the “Company,” “we,” “our,” or “us”) collects, uses, discloses, processes, and retains personal information (“Information Practices”). This Privacy Notice explains the privacy rights available to you under applicable privacy laws and how you can exercise those rights. We respect your privacy and are committed to providing a transparent notice of our privacy practices.
Backblaze is headquartered in the United States and is a data storage company that provides two primary services. The first, Computer Backup, offers unlimited cloud backup solutions for individuals and organizations using Mac or PC devices, including laptops and desktops. The second, B2 Cloud Storage, provides scalable cloud storage solutions designed to meet the needs of individuals and organizations.
This Privacy Notice explains how Backblaze collects, uses, and shares your personal information when Backblaze acts as a data controller, meaning Backblaze determines the purposes and methods of processing your personal information unless otherwise specified in a separate agreement or required by applicable law. Click here to learn more about the controller-processor distinction.
This Privacy Notice applies when you visit our website (www.Backblaze.com), use the Backblaze App, and all features, applications, social media channels, browser plugins, content, downloads, and other online services that we make available or that link to this Privacy Notice (together, the “Platform”). It also applies to personal information we collect directly from you when you interact with us, including when you communicate with us through emails, phone calls, texts, or other channels; use our products, services, and applications; engage in commercial transactions with us; or register for and participate in webinars, events, programs, marketing, and promotional activities. In addition, this Privacy Notice covers information we collect offline and information collected indirectly through third parties, including our partners, in the course of our business.
The terms used in the Privacy Notice have the same or similar meaning as those terms under applicable privacy laws, or the closest approximation of such terms.
We recognize that privacy and data protection requirements vary across jurisdictions, and we are committed to meeting our obligations under each applicable legal framework. Accordingly, this Privacy Notice sets forth our privacy practices on an organization-wide basis, and jurisdiction-specific components, obligations, and rights that may apply to individuals in particular states, regions or countries are described in specific sections below. In the event of any conflict between the general provisions of this Privacy Notice and a jurisdiction-specific section, the jurisdiction-specific section shall control to the extent of such conflict.
We encourage you to read this Privacy Notice in its entirety, including the jurisdiction-specific sections that may be relevant to you based on your location or residency, so that you understand the full scope of our data processing activities and the rights available to you under applicable law.
The following notice identifies the categories of personal information to be collected from you and the purposes for which the personal information will be used, including whether that information is sold or shared for the purposes of cross-context behavioral advertising (e.g., targeted advertising).
Most U.S. state comprehensive privacy laws apply only to personal information processed about individuals acting in an individual or household context and exclude personal information processed about individuals acting in a commercial or employment context. Where applicable state law excludes such information from the scope of consumer rights, those rights are not available through this Privacy Notice for that information. The California Consumer Privacy Act (“CCPA”) differs in that it extends certain rights to California employees and job applicants. If you are a Backblaze employee or job applicant, please refer to our separate Employee Privacy Notice here for information about how we collect, use, and protect your personal information in that context.
| Categories of Personal Information | Purposes for Collection, Use, or Processing | Sold or Shared for Targeted Advertising |
|---|---|---|
| Identifiers: For example, a name, address, Internet Protocol address, email address, or other similar identifiers. |
|
Yes |
| (Pursuant to California Law) Personal Information Categories from Cal. Civ. Code § 1798.80(e): For example, name, signature, telephone number, bank account number, credit card number, debit card number, or any other financial information. | No | |
| Characteristics of CA or Federal Protected Classifications: For example, race, age, or gender. | No | |
| Commercial Information: For example, records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies. | Yes | |
| Internet or Other Similar Network Activity: For example, browsing history, search history, and information regarding a consumer’s interaction with an Internet Web site, application, or advertisement. | Yes | |
| Geolocation Data: For example, information that can be used to determine a device’s physical location. | Yes | |
| Sensory or Surveillance Data: For example, call recordings or other audio, electronic, or visual monitoring or surveillance. | No |
Note: We do not collect Biometric Information, Inferences and Profile Data, Professional or Employment-Related Information, or Education Information in the consumer context.
| Categories of Sensitive Personal Information | Purposes for Collection, Use, or Processing | Sold or Shared for Targeted Advertising |
|---|---|---|
| Social Security Number, Driver’s License, State Identification Card, or Passport Number |
|
No |
| Account log-in, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account, or other financial information as defined under applicable state law | No | |
| Financial information (e.g., payment card data, billing information) | No | |
| Precise geolocation | No | |
| Status as a victim of a crime | We may collect this information in limited circumstances, such as in connection with a law enforcement subpoena or similar legal process. | No |
Note: We do not collect other sensitive personal information under applicable state laws.
The period of time for which we retain personal information depends on the purposes for which we collect and use it. We will delete or de-identify personal information when it is no longer needed to fulfill the purposes listed for each category, unless a longer retention period is required or permitted to: (a) comply with applicable laws, including tax, accounting, and recordkeeping laws; (b) establish, exercise, or defend legal claims; (c) prevent fraud and ensure the security of our services; or (d) fulfill another legitimate business purpose permitted by applicable state law. Where technical or operational limitations prevent complete deletion or de-identification, we will take reasonable measures to prevent further processing.
Our use of tracking technologies may be considered a “sale” or “sharing” of personal information with third parties for cross-context behavioral advertising (e.g., targeted advertising) under applicable state law. You can opt out of such tracking by clicking the “Do Not Sell or Share My Personal Information” link in the footer of our website, which will allow you to access our cookie and tracking preference center and select or modify your preferences. Please note that this mechanism provides opt-out rights under applicable state privacy laws. You may also opt out by enabling a recognized opt-out preference signal, such as the Global Privacy Control (“GPC”), on your browser or device. See “Making Requests to Opt-Out; Opt-Out Preference Signals and Universal Opt-Out Mechanisms” below for additional details.
The purpose of this Privacy Policy is to provide you with a comprehensive description of our online and offline practices regarding our Information Practices. You have certain rights to control the use of your personal information. This privacy policy describes your rights as it relates to our Information Practices as to your personal information and how you can exercise those rights.
The following table includes disclosures for the preceding 12 months of: categories of personal information we have collected about consumers, the categories we have disclosed for a business purpose, and categories of third parties with whom we shared the personal information during that period.
| Category | Business or Commercial Purpose for Collection & Disclosure | Categories of Service Providers / Contractors to Whom Disclosed |
|---|---|---|
| Identifiers |
|
|
| Personal Information Categories from Cal. Civ. Code § 1798.80(e) | ||
| Characteristics of CA or Federal Protected Classifications | ||
| Commercial Information | ||
| Internet or Other Similar Network Activity | ||
| Geolocation Data | ||
| Sensory Data |
Unless otherwise allowed by applicable state law, we will only collect certain types of sensitive personal information with your consent. We will only collect, process, or disclose sensitive personal data where it is strictly necessary to provide or maintain a specific product or service you have requested, and we will not sell sensitive personal data. We do not use or disclose the below sensitive personal information for purposes other than those business purposes specifically enumerated under applicable state law.
| Category | Business or Commercial Purpose for Collection & Disclosure | Categories of Service Providers / Contractors to Whom Disclosed |
|---|---|---|
| Social Security Number, Driver’s License, State Identification Card, or Passport Number |
|
Compliance and legal support providers; cloud hosting providers. |
| Account log-in, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account, or other financial information as defined under applicable state law | Payment processors; billing providers; cloud hosting providers; security and fraud prevention providers. | |
| Precise geolocation | Analytics providers; cloud hosting providers; security providers. | |
| Status as a victim of a crime | We may collect this information in limited circumstances, such as in connection with a law enforcement subpoena or similar legal process. | None. |
In the previous 12 months, we did not collect any other sensitive personal information under applicable state laws.
For each category of personal information identified above, we also disclose such personal information to the following categories of third parties:
Mobile information. We do not share mobile information with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent are excluded from all categories of information we disclose and will not be shared with any third parties, excluding aggregators and providers of the Text Message services.
De-identified and aggregated information. We may disclose aggregated information about our users and de-identified data or information that does not identify an individual, without restriction.
Where we maintain de-identified data (data that cannot reasonably be used to infer information about, or otherwise be linked to, an identified or identifiable individual), we commit to the following: (1) we take reasonable measures to ensure the data cannot be associated with an individual; (2) we publicly commit to maintaining and using the data in de-identified form and will not attempt to re-identify the data, except for the purpose of determining whether our de-identification processes comply with applicable law; and (3) we contractually obligate any recipients of the de-identified data to comply with all applicable requirements regarding de-identified data. Data used for usage analytics and business intelligence may be anonymized or aggregated so that resulting insights do not constitute Personal Information.
Sources of Personal Information. The categories of personal information identified above were collected from the following categories of sources: you directly; your devices when you interact with our websites, platforms, and applications; service providers acting on our behalf; third parties such as data aggregators, social media companies, and publicly available sources; your employer or organization in connection with business customer relationships; and business partners, such as event or conference organizers.
AI Processing Disclosure: We may employ artificial intelligence (AI) technologies to support and enhance our operations; any such processing is conducted in compliance with applicable laws and governed by data processing agreements.
We have sold or shared with third parties for cross-context behavioral advertising (e.g., targeted advertising) the following categories of personal information to advertising networks and analytics providers in the preceding 12 months: Identifiers; Internet or Other Similar Network Activity; Commercial Information; Geolocation Data. We do not sell or share sensitive personal information.
You have the right to direct us to stop selling or sharing your personal information for cross-context behavioral advertising (the “Right to Opt-Out”). You may exercise this right by: (1) Clicking the “Do Not Sell or Share My Personal Information” link to manage your preferences; or (2) Submitting your request through an Opt-Out Preference Signal/Universal Opt-Out Mechanism, such as the Global Privacy Control (“GPC”), as described further below.
We do not have actual knowledge that we sell the personal information of minors under 18 years of age.
You may opt out of marketing communications at any time:
The Platform may contain links to other websites or applications. Please be aware that we are not responsible for the content or privacy practices of such other websites or applications. We encourage our users to be aware when they leave our Platform and to read the privacy statements of any other website or application that collects personal information.
Right to Know/Access: Certain states provide the right to request our disclosure of any of the following:
Right to Correct: You have the right to request that we correct inaccurate personal information we maintain about you, taking into account the nature of the personal information and the purposes of our processing. We may request documentation from you to help assess accuracy. If we determine the contested information is more likely than not accurate based on the totality of circumstances, we may deny the request and will explain the basis for our decision.
Right to Delete: You have the right to request that we delete personal information we have collected from or about you, subject to certain exceptions permitted by law. If we cannot fully comply with a deletion request, we will explain why and delete the information that is not subject to an exception.
Right to Opt-Out of Sale/Sharing; Targeted Advertising: You may have the right to “opt out” of the “sale” or “sharing” of your personal information for cross-context behavioral advertising, or processing of your personal data for purposes of targeted advertising (as those terms are defined by applicable state law).
Right to Withdraw Consent: Where we have collected or used your personal information based on your consent, you have the right to withdraw your consent at any time.
Right to Appeal: If we deny your request to exercise any of the rights described above, you may have the right to appeal that decision by submitting a request to appeal to us.
Right to Non-Discrimination: We will not discriminate against you for exercising any of your state privacy rights. However, we may still offer you certain financial incentives permitted under applicable state law, such as discounts, rewards, premium features, loyalty accounts, or club card programs that can result in different prices, rates, or quality levels.
Making Requests to Know/Access, Delete, or Correct: You may exercise your rights, as applicable by state law, by submitting a verified consumer request to know information (and to receive your personal information in a portable format), to correct information, or for deletion.
The response to a request to know will provide the personal information we have collected and maintained about you, in a portable format, unless an exception under applicable state law applies. Please note that, depending on the applicable state law, we may not be required to provide personal information to you if you make multiple requests in a certain time period.
You may submit a request by using our Privacy Rights Request Form available here, or by contacting us at privacyrequest@backblaze.com. We will verify your request using the information you provide through the request form or in your communication. If you submit a request that is not through one of the above designated methods or is deficient in some manner unrelated to verification, we will provide you with information on how to submit the request or remedy any deficiencies with your request. We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request. We will only use personal information provided in a verifiable consumer request to verify the requestor’s identity or authority to make the request.
Once we receive your verifiable consumer request, we will confirm receipt within 10 business days, or as allowed under applicable law, and describe our verification process. We will confirm receipt of your request and respond, consistent with applicable law, if we can verify your identity. Requests for deletion will require separate confirmation that you want your information deleted. We do not knowingly collect information of minors under the age of 18.
Making Requests to Opt-Out; Opt-Out Preference Signals and Universal Opt-Out Mechanisms: Our use of tracking technologies may be considered a sale or sharing for targeted advertising under applicable state law. You may exercise your right to opt out of sale, sharing, or processing for targeted advertising by (1) clicking the “Do Not Sell or Share My Personal Information” link at the bottom of our website and selecting your preferences, or (2) broadcasting an opt-out preference signal or universal opt-out mechanism (“UOOM”) that we recognize, including the Global Privacy Control (GPC) (on browsers and/or browser extensions that support such a signal). We recognize and process opt-out preference signals and UOOMs as valid opt-out requests as required by applicable state law. If you do not have a Backblaze account or are not logged into your account, your request to opt out will be linked to your browser identifier only and not linked to any account information. Because the signal is browser-specific, you will need to broadcast subsequent signals if you access our website through different devices (e.g., computers, smartphones, or tablets). You may return to the preference center at any time to review or update your cookie and tracking selections by clicking the "Do Not Sell or Share My Personal Information" link in the footer of our website.
Withdrawing Consent: Where we have collected or used your personal information based on your consent, you may withdraw your consent at any time. If your request relates to cookies, online tracking, targeted advertising, or similar technologies, you may withdraw or modify your consent by clicking the “Do Not Sell or Share My Personal Information” link in the footer of our website and updating your preferences through the Cookie Settings link.
Appealing a Denial of a Request: If we deny or decline to take action on your verified consumer request, you have the right to appeal. To submit an appeal, please email us at privacyrequest@backblaze.com within 90 days of receiving our denial. Within 45 days after receipt of your appeal, we will inform you in writing of the action taken or not taken and provide a written explanation of the reasons for our decision. If we deny your appeal, we will also provide an online mechanism or other method through which you may contact your state Attorney General or applicable regulatory authority to submit a complaint.
California: Only you, or a natural person or a business entity registered with the Secretary of State to conduct business in California that you have authorized to act on your behalf, may make a verifiable consumer request related to your personal information, to opt-out of sale or sharing, or to limit the use or disclosure of your sensitive personal information. If you use an authorized agent, you may provide a power of attorney executed pursuant to California Probate Code sections 4000 to 4465. If a power of attorney that meets those provisions is not submitted, you will be required to provide the authorized agent signed permission to submit a request, verify your identity directly by submitting a verified consumer request according to the procedures in the section “How to Exercise Your Rights,” and directly confirm with us that you provided the authorized agent permission to submit the request. To submit authorized agent documentation, contact us at privacyrequest@backblaze.com.
Other States: If you use an authorized agent, you may provide a power of attorney executed pursuant to applicable state law. If a power of attorney is not submitted, you may be required to provide commercially reasonable identification of your identity and evidence of your authorized agent’s authority to act on your behalf. For example, you may need to provide the authorized agent signed permission to submit a request, verify your identity directly by submitting a verified consumer request according to the procedures in the section “How to Exercise Your Rights,” and directly confirm with us that you provided the authorized agent permission to submit the request, by contacting us at privacyrequest@backblaze.com.
This section of the Privacy Policy applies if you are in the European Economic Area (EEA) or the United Kingdom (U.K.) and supplements the Privacy Policy.
Under the General Data Protection Regulation (“GDPR”) and/or the United Kingdom General Data Protection Regulation (“UK GDPR”), we are required to have a valid legal basis for processing your personal information, and we must inform you of that legal basis. Our legal basis for collecting and using the personal information described above will depend on the specific personal information concerned and the context in which it is collected. Generally, we will collect personal information from you only when you have consented to such collection, when we need the personal information to perform our obligations under a contract with you (for example, when you create an account or use our services), or where the processing is in our legitimate business interests (for example, to detect and prevent fraud and to analyze usage for analytics, modeling, and business intelligence). In some cases, we may also have a legal obligation to collect personal information from you (for example, to verify your identity when accessing your account or services).
Where we rely on legitimate interests, we balance our interests against your interests, rights, and freedoms and apply appropriate safeguards to protect your personal data.
If we ask you to provide personal information to comply with a legal requirement or to enter into a contract with us, we will make this clear at the time we request that personal information. We will also tell you whether providing that personal information is mandatory or not (as well as the possible consequences if you do not provide your personal information). Similarly, if we collect and use your personal information, we will provide you with our legitimate business interests for such collection and use.
If you have questions about or need further information concerning the legal basis for which we collect and use your personal information, please contact us as provided in the Contact for More Information section below.
We use industry-standard methods of securing electronic databases of personal information. However, you should know that no company can fully eliminate security risks associated with personal information. To help protect yourself, please use a strong password, do not use the same password to access your Backblaze account that you use with other accounts or services, and protect your usernames and passwords to help prevent others from accessing your accounts and services.
Your personal information may be transferred to and processed in the United States and other countries where Backblaze and its service providers operate, which may have data protection laws that differ from those in your jurisdiction.
Where required by law, we implement appropriate safeguards for such transfers, including contractual protections and other legally recognized mechanisms. While your information is outside of your country of residence, it is subject to the laws of the jurisdiction in which it is held and may be subject to disclosure to governments, courts, law enforcement, or regulatory agencies pursuant to applicable law.
If you reside within the EEA or in the U.K., you have the following rights under applicable law, which you can exercise at any time:
Please see the Exercising Your Privacy Rights section below to exercise your privacy rights.
We will respond to your request within 30 days of receipt. Where a request is complex, or we have received a large number of requests, we may extend this period by a further two months, as permitted under applicable law. If we extend the response period, we will inform you within 30 days of receiving your request and explain the reason for the delay. We will not charge a fee for responding to your request unless the request is manifestly unfounded or excessive, in which case we may charge a reasonable fee or decline to respond.
If you have an account, you may log in to access, update, or delete your personal information and associated data. If you are unable to access your account, you may contact us using the information provided in the Contact for More Information section below.
In cases where we rely on your consent to process personal information, you can revoke your consent by contacting us. Revoking your consent does not affect the lawfulness of any processing conducted prior to your withdrawal.
You may manage your cookie and tracking preferences through the cookie and tracking preference center, which may be accessed by clicking the Cookie Settings link in the footer of our website or through any other cookie settings mechanism made available on the Platform. Please note that cookie and tracking preferences are generally browser- and device-specific, and data collected before we can identify or authenticate you may not be able to be associated with your account.
Backblaze does not make decisions about you that produce legal effects or similarly significant effects based solely on automated processing, including profiling. In particular, we do not use automated decision-making to make decisions about your eligibility for services, pricing, or access to functionality. This does not prevent us from using personal information for ordinary business purposes, such as analytics, lead management, marketing segmentation, customer relationship management, fraud prevention, security, or service improvement, where such processing does not produce legal or similarly significant effects concerning you.
If you are not satisfied with how we handle your personal information, or with our response to a request you have made, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction. You may contact the applicable authority by clicking below:
We encourage you to contact us first using the information in the Contact for More Information section below, so that we may address your concerns directly.
Please read our Cookie Notice to learn about our practices regarding cookies and similar technologies.
You may access or modify your cookie and tracking preferences at any time by clicking the Cookie Settings link in the footer of our website. The exact choices available to you may depend on your location and the laws that apply to you.
Cookies: Cookies are small data files stored on your device when you visit. Cookies allow us to recognize your device during subsequent visits and personalize your experience based on your preferences. They may also provide information to our service providers to help us improve website functionality and usability.
The Platform may use first-party and third-party cookies, as well as other tracking technologies, for advertising and analytics purposes. First-party cookies are set directly by Backblaze and are used to make the Platform function properly, remember your preferences, and support our internal analytics. Third-party cookies are set by our partners and service providers, such as advertising networks and analytics providers, and may be used to track your activity across different websites to deliver targeted advertising and measure performance.
If you consent to the use of cookies by clicking “Accept All Cookies” when you first visit the website, we will collect certain information from you, including Internet Protocol (IP) addresses, browser types, operating systems, page requests, and average time spent on our website. This data helps us understand website activity, monitor performance, and improve the user experience.
You can set your browser to notify you when cookies are received or to block certain types of cookies. However, disabling cookies may limit your ability to access some features of the website. For additional details on how to opt out of the use of cookies, please review our Cookie Notice.
Analytics: We utilize tools like Google Analytics to collect data about website usage, including pages visited, time spent, search terms, and engagement metrics. This information helps us evaluate and enhance the user experience. For example, to opt out of Google Analytics, you can use the Google Analytics Opt-Out Browser Add-On. For more information about how Google uses your data, please visit “How Google uses data when you use our partners' sites or apps.” Please review our Cookie Notice for information on analytics tools used on the website.
Interest-Based Advertising: We work with third parties, such as advertisers, advertising networks, and data exchanges, to deliver tailored content and advertising based on your online activity. These third parties may use their own tracking technologies, including cookies and pixel tags, to collect information about your interactions with our website and other websites. This data helps deliver personalized advertisements for products or services that may interest you.
To opt out of interest-based advertising through cookies or similar technologies on our website, click the Cookie Settings link in the footer of our website and update your preferences in our cookie and tracking preference center. You may also use industry opt-out tools, such as Your Online Choices, where available. Please note that opting out does not mean you will no longer receive ads; instead, advertisements may no longer be tailored to your preferences based on online behavior. Cookie-based opt-outs are generally browser- and device-specific, so you may need to repeat the opt-out process if you use a different browser or device or clear your cookies.
Backblaze complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF) and the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce. Backblaze has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF Principles) with regard to the processing of personal data received from the European Union and the United Kingdom in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF. Backblaze has certified to the U.S. Department of Commerce that it adheres to the Swiss-U.S. Data Privacy Framework Principles (Swiss-U.S. DPF Principles) with regard to the processing of personal data received from Switzerland in reliance on the Swiss-U.S. DPF. If there is any conflict between the terms in this privacy policy and the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF Principles, the Principles shall govern. To learn more about the Data Privacy Framework (DPF) program and to view our certification, please visit https://www.dataprivacyframework.gov/.
In compliance with the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF, Backblaze commits to refer unresolved complaints concerning our handling of personal data received in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF to the International Division of the American Arbitration Association (ICDR-AAA), an alternative dispute resolution provider based in the United States.
If you do not receive timely acknowledgment of your DPF Principles-related complaint from us, or if we have not addressed your DPF Principles-related complaint to your satisfaction, please visit https://feature.adr.org/dpf_irm for more information or to file a complaint. The services of ICDR-AAA are provided at no cost to you.
Data subjects may contact the relevant independent recourse mechanism by clicking the links listed below:
Under the Personal Information Protection and Electronic Documents Act (“PIPEDA”), Lei Geral de Proteção de Dados (“LGPD”), and Quebec’s Act to Modernize Legislative Provisions as Regards the Protection of Personal Information ("Law 25"), we are required to have a valid legal basis for processing your personal information, and we must inform you of that legal basis. Our legal basis for collecting and using the personal information described below will depend on the personal information concerned and the specific context in which we collect it. Generally, we will collect personal information from you only when you have consented to such collection, when we need the personal information to perform our obligations under a contract with you, or where the processing is in our legitimate business interests (for example, to detect and prevent fraud). In some cases, we may also have a legal obligation to collect personal information from you (for example, to verify your identity when making a purchase).
If we ask you to provide personal information to comply with a legal requirement or to enter into a contract with us, we will make this clear at the time we request that personal information. We will also tell you whether providing that personal information is mandatory or not (as well as the possible consequences if you do not provide your personal information). Similarly, if we collect and use your Personal Information, we will provide you with our legitimate business interests for such collection and use.
If you have questions about or need further information concerning the legal basis for which we collect and use your personal information, please contact us as provided in the "Contact for More Information" section below.
If you are a resident of Canada, you have the right to be informed, the right to access, the right to correction, the right to withdraw consent, the right to erasure, and the right to lodge a complaint. We will respond to your access request within 30 days and to the rest of your requests within 45 days. To opt out of interest-based advertising, visit the Digital Advertising Alliance of Canada (DAAC). Please note that opting out does not mean you will no longer receive ads; instead, advertisements will no longer be tailored to your preferences based on online behavior.
If you are a resident of Quebec, you have the following rights in addition to those in Canada: the right to rectification, the right to restrict processing, and the right to data portability. We will respond to your request within 30 days. The Personal Information of Quebec residents may be transferred and stored outside of Canada.
If you are a resident of Brazil, you have the right to access, the right to data portability, the right to rectification, the right to anonymization, the right to blocking, the right to deletion, the right to erasure, the right to withdraw consent, the right to object, and the right to lodge a complaint. We will respond to your access request within 15 days and to the rest of your requests within 30 days. To opt out of interest-based advertising, visit the Network Advertising Initiative for Brazil. Please note that opting out does not mean you will no longer receive ads; instead, advertisements will no longer be tailored to your preferences based on online behavior.
If you have an account with Backblaze, you can log in to your account to access, update, and delete certain account information and your uploaded files. If your request relates to cookies, online tracking, targeted advertising, or similar technologies, you may access or modify your preferences by clicking the Cookie Settings link in the footer of our website, which will open or direct you to our cookie and tracking preference center. You can also email us your request at privacyrequest@backblaze.com.
You can find more information on objecting to or restricting certain processing here.
You can find more information on requesting portability here.
You can withdraw your consent at any time. For cookies, online tracking, targeted advertising, or similar technologies, you may withdraw or modify your consent by clicking the Cookie Settings link in the footer of our website and updating your preferences in the cookie and tracking preference center. For other consent-based processing, you may submit a request through our Privacy Rights Request Form or contact us at privacyrequest@backblaze.com. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing conducted in reliance on lawful processing grounds other than consent.
To ensure the security of your Personal Information, we may request certain details to verify your identity before processing your request.
In the EEA and the U.K., you can lodge a complaint directly with the relevant data protection authority. For contact details of the data protection authorities, see the Data Protection Authorities section above.
In Canada, you can lodge a complaint directly with the Office of the Privacy Commissioner of Canada. In Quebec, you can file a complaint with the Quebec Access to Information Commission.
In Brazil, you can lodge a complaint directly with the National Data Protection Authority.
You have the right to opt out of marketing communications we send you at any time. You can exercise this right here or by using the unsubscribe link provided in each email. It may take up to three business days to remove you from our marketing lists. Please note that even after you opt out, you will still receive Service Emails from us. You can learn more about our Email communications here. Please allow up to 10 days to process your request.
We reserve the right to amend this privacy notice at our discretion and at any time. When we make changes to this privacy notice, we will update the notice’s “Last Revised/Reviewed” date. If we make material changes, we will notify you through a method by which we regularly interact with you, such as by email.
If you have any questions or comments about this notice, how we collect and use your information, your choices and rights regarding such use, or wish to exercise your rights under applicable state law, please do not hesitate to contact us at:
Phone: +1 650-352-3738
Email: privacyrequest@backblaze.com
Postal Address:
Backblaze, Inc.
Attn: Privacy Office
2261 Market Street, STE 81006
San Francisco, CA 94114
United
States