Privacy Policy

1. Who we are and what this covers

Blinkz LLC ("Blinkz," "we," "us") is a software engineering company organized in North Carolina, United States. This policy explains how we handle personal information when you:

visit blinkz.ai (blinkz.org redirects to it) or load media from cdn.blinkz.org;
fill in a form, request a free kit, or open a kit we email you;
book a call, email us, or message us on social media.

Work we do for clients is different. When a client gives us access to their app, code, systems or their users' data, we handle that information under our Client Terms and the agreement for that engagement. In that work we act on the client's behalf and follow their instructions.

2. What we collect

What you give us

Free kit forms. Your email address, which kit you asked for, and the topic of the page you were on.
The homepage form. Your email address, then what you need help with and a link to your app, if you add them.
The contact form. What you are reaching out about, your name, email address, phone number if you give it, your app or company, your situation, and your message.
Booking a call. Cal.com collects your name, email, time zone and any answers you type. See section 5.
Emails and messages. Whatever you write to us by email or in a direct message on Instagram, TikTok or another platform, plus your public username there.

What we collect automatically

Country. When you submit a form or open a kit, we record your country as reported by our hosting provider, Cloudflare. We do not store your IP address with your record.
Kit activity. When you open a kit, we record which kit, when, and your country, so we can keep your access working and see which kits are useful.
Security data. To stop spam and abuse, our servers briefly use your IP address and a scrambled (hashed) copy of your email address to limit how often forms can be sent. This data expires within an hour.
Basic page context. The contact form also sends the page you came from, the page you were on, your browser language, time zone and browser type.
Analytics and advertising tools. On blinkz.ai we use Google Analytics, the Meta Pixel and Leadsy, unless you have turned them off (see section 6). They collect the pages you view, your device and browser type, your approximate location, and events such as "submitted a form." We never send them your email address. Leadsy is a visitor identification tool: it tries to match your visit to a business or person using your IP address and browser data, which can tell us the company or contact behind a visit.

We do not knowingly collect sensitive information such as health, financial account, biometric or government ID information through the website. Please do not send it to us.

3. How we use it

To send you the kit you asked for and keep your access link working.
To reply to you, understand your app, scope work and send a quote.
To follow up about what you asked for, and occasionally to email you related free resources. You can opt out at any time (see section 6).
To run, secure and improve the website, and to stop spam and abuse.
To understand which pages and videos are useful, and to measure and show our own ads, including to people who have visited the site.
To keep business records, meet legal duties, and protect our rights in a dispute.

We keep our lead records in our own database and in a private Google Sheet that only Blinkz can open.

We do not sell your personal information for money. We share it only with:

Service providers that run parts of our business for us (listed in section 5), under their terms.
Advertising and analytics providers (Google, Meta and Leadsy) as described above. Under some US state laws, using these tools can count as "selling" or "sharing" personal information. You can opt out at any time, and we honor Global Privacy Control.
Professional advisers such as our lawyers and accountants, when they need it.
Authorities, when the law requires it or to protect our rights, our clients, or anyone's safety.
A buyer or successor, if Blinkz is ever sold, merged or reorganized. This policy would still apply to your information.

5. Service providers we use

Cloudflare: website hosting, our database, file storage and CDN, email routing, and security.
Resend: sends the emails our website sends you, from hello@blinkzai.org or admin@blinkzai.org.
Google: our business email (Google Workspace, behind hello@blinkz.ai), the private lead sheet, and Google Analytics.
Meta: the Meta Pixel, and Instagram if you message us there.
Leadsy: visitor identification.
Cal.com: call booking. Its booking widget loads on our contact page.
YouTube: videos on some posts. They use YouTube's privacy-enhanced mode and load only when you press play.
TikTok and ManyChat: if you message us or comment for a link, those platforms process your messages under their own policies.
Payment providers: when you pay an invoice, the provider named on it processes your payment details. We never see or store full card numbers.

Each provider has its own privacy policy. We choose providers that keep data secure.

6. Your choices

Emails. Reply "unsubscribe" to any email from us, or write to hello@blinkz.ai, and we will stop marketing emails within 10 business days. We may still send messages about a project or request you have open with us.
Analytics and advertising tools. Use the switch on our Cookie Policy page to turn off Google Analytics, the Meta Pixel and Leadsy in your browser.
Global Privacy Control. If your browser sends a Global Privacy Control signal, these tools never load for you.
Visitors in Europe. If your browser is set to a European time zone, these tools never load for you.
Your browser. You can also block or delete cookies in your browser settings.

7. How long we keep it

Leads and messages: for as long as they help us reply or work with you, and no longer than 3 years after our last contact, unless you become a client.
Kit access: email links stop working after 7 days or 5 opens. A kit session in your browser lasts 90 days. We keep a record of which kits you were sent so they keep working when you ask for a new link.
Spam and rate-limit data: up to 1 hour.
Google Analytics: up to 14 months.
Client records, invoices and contracts: as long as tax and business law requires, usually up to 7 years.

When you ask us to delete your information, we delete it unless the law requires us to keep it.

8. Your rights

Wherever you live, you can ask us to:

tell you what personal information we hold about you and give you a copy;
correct it;
delete it;
stop using it for marketing, analytics or advertising.

To make a request, email hello@blinkz.ai with the subject "Privacy request." We may ask you to confirm your identity first. We answer within 30 days, or 45 days for a complex request, and we tell you if we need longer. You can use an authorized agent; we may ask for proof that they act for you. If we say no to a request, you can appeal by replying to our answer, and we will review it within 45 days. We will never treat you differently for using these rights.

If you are in the European Economic Area, the United Kingdom or Switzerland, you also have the rights given by data protection law there, including the right to object and to complain to your local data protection authority. Our legal bases are: steps you ask for before a contract and the contract itself, your consent when you ask for a kit or emails, our legitimate interest in running and securing our business, and legal obligations.

9. Security

We protect your information with encrypted connections (HTTPS), access limited to the people who need it, scrambled (hashed) access tokens, and security controls from our providers. No system is perfectly secure. If a security breach affects your personal information, we will notify you and the authorities as the law requires. Our Security page has more detail.

10. International visitors

Blinkz is based in the United States, and our providers process data in the United States and other countries. By using the site from outside the United States, you understand that your information will be processed in the United States, where the law may give less protection than at home.

11. Children

Our website and services are for adults and businesses. We do not knowingly collect personal information from anyone under 16. If you think a child has given us information, email us and we will delete it.

12. Changes to this policy

We update this policy when our practices change. The date at the top shows when it last changed. If we make a big change, we will say so on this page.

13. Contact

Email hello@blinkz.ai with any question or request about your privacy.

Blinkz LLC, Morrisville, North Carolina, United States.