Cookie Policy

01What Cookies Are

What cookies are, how they work, and the rules that govern their use.

1.1 A cookie is a small text file placed on your device — computer, tablet, or mobile — when you visit a website or use a web application. Cookies allow the website to recognise your device and remember information about your visit.

1.2 Cookies may be session cookies, which are deleted automatically when you close your browser, or persistent cookies, which remain on your device for a defined period or until you delete them. They may be set by us (first-party cookies) or by third-party services we use (third-party cookies).

1.3 In addition to cookies, we may use similar technologies including local storage, which allows data to be stored in your browser beyond a single session. References in this Policy to cookies include these similar technologies.

1.4 Under the Privacy and Electronic Communications Regulations (PECR) and the UK General Data Protection Regulation, a cookie that is strictly necessary to provide a service you have requested is exempt from the requirement to obtain consent. Any cookie that is not strictly necessary requires your consent before it is set. This distinction governs how we treat each category of cookie described in section 02.

1.5 You can control cookies through your browser settings at any time. See section 04 for details of how to manage your preferences.

02How We Use Cookies

The categories of cookie we may use and the basis on which each is set.

2.1 We set the minimum number of cookies necessary to operate the Service and to deliver the features you have asked for. Where we use cookies, we do so in accordance with the following.

2.2 Strictly necessary cookies.

2.2.1 These cookies are essential for the platform to function. They enable core capabilities including secure sign-in, session management, security protections, and giving effect to any cookie preferences you have set.

2.2.2 Strictly necessary cookies are set on the lawful basis of contract performance. They do not require your consent and cannot be declined while you are using the Service — without them, we cannot provide the Service to you.

2.3 Functional cookies.

2.3.1 Where we set functional cookies, they enable enhanced functionality and personalisation. They remember choices you have made within the platform, such as display settings and recent navigation, so that the platform behaves consistently between sessions.

2.3.2 Functional cookies are not strictly necessary. Where we set them, we do so on the lawful basis of consent, and you may decline them without affecting your ability to use the core features of the Service.

2.4 Analytics cookies.

2.4.1 Where we set analytics cookies, they collect information about how the Service is used — which features are accessed, how long sessions last, and where errors occur — in order to help us understand usage patterns, measure performance, and improve the Service.

2.4.2 Analytics cookies are set on the lawful basis of consent. Where we use analytics, we select tools that anonymise IP addresses and do not share individual-level data with advertising networks. You may accept or decline analytics cookies at any time — see section 04.

2.5 Advertising and cross-site tracking.

2.5.1 We do not use cookies for advertising, retargeting, or profiling, and we do not permit third parties to set cookies on our website or within the platform in order to track you across other websites.

2.5.2 Should this position change, we would update this Policy and obtain your consent before any such cookie is set.

2.6 We do not use cookies to collect or process the substantive content of Customer Content, including financial models, pitch decks, cap table data, or business plans.

03Cookies We Set

Every cookie set on your device as at the date of this version.

3.1 The table below lists every cookie we set, its purpose, its category, and how long it persists. This list reflects our cookie usage as at the effective date of this version of the Policy. It is reviewed whenever our cookie usage changes, and the change log at the foot of this page records each update.

3.2 The final entry above is a naming pattern rather than a single cookie. Cookies recording your preferences are named with the prefix bluto- followed by the name of the preference concerned. The number of such cookies depends on the preferences available at the time and may change as the platform develops. Each records a choice you have made; none records anything about you or how you use the Service.

3.3 Every cookie listed above is a first-party cookie set by Bluto. No third party sets cookies on bluto.ai or within the Bluto platform.

3.4 As at the effective date of this version, every cookie we set is strictly necessary. We set no functional, analytics, advertising or tracking cookies. The categories described in section 02 set out how we would treat those cookies if we introduced them, and section 05 explains how we would notify you.

04Managing Your Preferences

How to control which cookies are set on your device.

4.1 Cookie preference tool. Where we set cookies that require your consent, you may accept or decline them by category using our cookie preference tool. You may change your choice at any time.

4.2 Withdrawing consent is as straightforward as giving it. Where you have consented to a category of cookie, you may withdraw that consent through the same tool, without having to contact us.

4.3 Strictly necessary cookies cannot be declined, because the Service cannot be provided without them. As set out in clause 3.4, every cookie we currently set falls into this category.

4.4 Browser settings. All modern browsers allow you to view, block, or delete cookies through their privacy or security settings. Blocking cookies for bluto.ai through your browser will prevent you from signing in and using the Service, because the cookies required for authentication are strictly necessary. Browser-level controls apply to all cookies on your device and are not specific to Bluto.

4.5 Deleting cookies for bluto.ai will sign you out of the platform and clear any preferences you have set. You will need to sign in again on your next visit.

4.6 Effect of declining non-essential cookies. Where we set cookies that are not strictly necessary and you decline a category:

• core features of the Service will continue to work normally
• any preference that would have been remembered by a functional cookie may not persist between sessions
• we will not collect the usage data we would otherwise use to improve the Service

Declining non-essential cookies does not affect the legal protections that apply to your personal data. Our Privacy Policy at bluto.ai/legal/privacy continues to apply in full regardless of your cookie preferences.

05Changes to This Policy

How we notify you when this Cookie Policy is updated.

5.1 We may update this Cookie Policy from time to time to reflect changes in the cookies or similar technologies we use, changes in our operating practices, or changes in applicable law.

5.2 Where we introduce a cookie that is not strictly necessary, we will update the table in section 03 and obtain your consent before that cookie is set. Introducing a category of cookie that we do not currently use is treated as a material change to this Policy.

5.3 When we make material changes, we will update the version number and effective date at the top of this page and record the change in the change log below. Where a change affects the basis on which we set cookies, we will present the updated preference notice to you on your next visit so that you can review and confirm your choices.

5.4 The current version of this Policy is always available at bluto.ai/legal/cookies.

5.5 If you have questions about our use of cookies or this Policy, please contact us at [email protected].