Privacy Policy

1. Scope

This Privacy Policy describes how Blinkz LLC ("Blinkz," "we," "us") handles personal information collected through blinkz.ai and blinkz.org (both operated by Blinkz; blinkz.org redirects to blinkz.ai), the forms on those sites, and the Cloudflare Worker that processes form submissions.

It does not cover how we handle client or engagement data inside the systems we build, the audits we run, or the services we deliver. That data is governed by the separate written agreement signed with each client, not by this website policy. For how we approach security and regulatory compliance on engagements, see our Security and Compliance page at /legal/security.

2. Information We Collect

When you fill out the contact form on /contact, we collect: your name, email address, your role, your team size, a short description of your situation, whether you have seen our pricing, and the message you write.

When you request the free teardown or otherwise submit your email through a capture form on the site, we collect your email address and which form you used.

When you book a free Health Check through the Cal.com widget on /contact, Cal.com collects the booking details directly (name, email, time zone, and any fields you enter). Cal.com is the controller for that booking data; see cal.com/privacy.

When you visit the site, we collect privacy-respecting analytics through Plausible Analytics. Plausible is cookieless and does not track you across sites or build a profile of you. It records aggregate usage (page views, referrer, approximate country, device or browser type) and does not store your IP address. We use this only in aggregate to understand site usage.

We do not collect special-category data (health, biometric, political, and similar) through the website, and we do not intentionally collect information from anyone under 16.

3. How We Use the Information

To respond to your inquiry, scope a project, or follow up on a conversation you started.

To send you a confirmation or reply email after you submit a form. These are handled by our Cloudflare Worker through Resend and are sent from hello@blinkz.ai, with a copy to our team.

To operate, secure, and improve the website and our services.

To comply with legal obligations (tax, accounting, dispute resolution).

We do not sell personal information. We do not use it for targeted advertising. We do not share it with data brokers.

4. Legal Basis (GDPR / UK GDPR)

If you are in the European Economic Area, the United Kingdom, or Switzerland, we rely on the following lawful bases under the General Data Protection Regulation:

• Consent: for the optional fields you choose to fill in.
• Legitimate interests: for responding to inquiries, understanding aggregate site usage, and preventing abuse. Our interests are balanced against your rights.
• Performance of a contract or steps before one: when you contact us to scope or enter an engagement.
• Legal obligation: when we are required to retain or disclose data.

5. Sub-processors and Third Parties

We use the following service providers, each of whom may process personal information on our behalf or independently as the case requires:

• Cloudflare, Inc.: website hosting, edge Workers, R2 storage, CDN, and DNS. Data flows through Cloudflare's global network.
• Resend: transactional email delivery from our Worker (confirmations and replies).
• Google LLC (Google Workspace): the business email behind hello@blinkz.ai and admin@blinkzai.org, where form notifications and correspondence are received and sent.
• Cal.com: the scheduling widget embedded on /contact for booking a Health Check.
• Plausible Analytics: cookieless, EU-hosted website analytics.
• Stripe, Inc.: payment processing when you purchase a service. Stripe collects payment details directly; we do not store card numbers.
• Discord, Inc.: our community platform, if you choose to join it.

Each provider has its own privacy policy. We select vendors that offer reasonable security and, where required, data processing terms and Standard Contractual Clauses for international transfers.

6. International Data Transfers

Blinkz is based in the United States. If you access the site from outside the US, your information may be transferred to, stored, and processed in the US or other countries where our sub-processors operate. Our analytics provider, Plausible, hosts its data in the European Union.

For transfers of personal data from the EEA, UK, or Switzerland to the US, we rely on Standard Contractual Clauses or other lawful transfer mechanisms provided by our sub-processors.

7. Your Rights

Depending on where you live, you have some or all of the following rights regarding your personal information: the right to know what we hold, correct inaccuracies, delete it, restrict or object to processing, receive a portable copy, and withdraw consent where we rely on it.

Residents of California (CCPA/CPRA), Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), Texas (TDPSA), Oregon (OCPA), and Montana (MCDPA) have statutory privacy rights which we honor on equivalent terms regardless of the specific thresholds in each law.

To exercise any right, email hello@blinkz.ai with the subject "Privacy Request." We will verify your identity before acting and respond within the timelines required by applicable law (typically 30 to 45 days).

We will not discriminate against you for exercising a privacy right.

8. Data Retention

Contact form submissions: retained for 24 months after the last interaction, then deleted or anonymized.

Email-capture submissions (such as the free teardown): retained until you unsubscribe or ask us to delete them, and then removed.

Analytics data: Plausible stores only aggregate, non-identifying data, so there is no personal analytics record to retain about you.

Email correspondence: retained as long as needed for the business relationship, then archived and eventually deleted.

9. Security

We use reasonable administrative, technical, and organizational measures appropriate to the nature of the data we hold: TLS for data in transit, access controls, provider-managed encryption at rest, and periodic review of who has access to what.

No system is perfectly secure. If a breach affects your personal information, we will notify you and applicable regulators as required by law.

10. Children

The site and our services are directed at adults and businesses. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us with data, email us and we will delete it.

11. Cookies

The website does not set first-party tracking or advertising cookies, and our analytics are cookieless. See our Cookie Policy at /legal/cookies for the full detail and for the third-party tools that may set their own cookies when you use them.

12. Changes

We may update this Privacy Policy when our practices change. The effective date at the top will be updated. Material changes will be highlighted at the top for a reasonable period.

13. Contact

Questions, complaints, or requests: email hello@blinkz.ai.

Blinkz LLC is organized under the laws of the State of North Carolina, United States.