Privacy Policy

Welcome to BlinkApp ("BlinkApp," "we," "us," or "our"). We take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform and services.

By creating an account or using BlinkApp, you agree to the terms described in this Privacy Policy. If you do not agree, please do not use our services.

Account Information. When you register, we collect your company name, email address, and a hashed version of your password. We never store your password in plain text.

Company Profile Data. Information you enter into BlinkApp — such as your company address, phone number, logo, and payment preferences — is stored to support your use of the platform.

Client & Business Data. Records you create within BlinkApp (clients, invoices, events, expenses, etc.) are stored securely and associated exclusively with your account.

Usage Data. We collect non-personal information about how you interact with the platform, such as pages viewed, features used, and session duration. This data is used to improve the product.

Communications. If you contact us for support, we retain correspondence to resolve your issue and improve our services.

We use the information we collect to:

• Provide, operate, and maintain the BlinkApp platform.

• Process transactions and send billing-related communications.

• Authenticate your identity and secure your account.

• Respond to your support requests and inquiries.

• Send important product updates, security notices, and service announcements (you may not opt out of critical notices).

• Analyze usage patterns to improve performance, features, and user experience.

• Comply with legal obligations.

We do not sell, rent, or lease your personal information to third parties for marketing purposes. Ever.

Service Providers. We may share data with trusted third-party vendors who help us operate BlinkApp (e.g., cloud hosting, payment processing). These vendors are contractually obligated to protect your data and may only use it to perform services on our behalf.

Legal Requirements. We may disclose your information if required to do so by law or in response to a valid subpoena, court order, or government request.

Business Transfers. In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you before your data is transferred and becomes subject to a different privacy policy.

With Your Consent. We may share information for any other purpose with your explicit consent.

We implement industry-standard security measures to protect your data:

• All data is encrypted in transit using TLS 1.3.

• All data is encrypted at rest using AES-256.

• Daily automated backups are stored in geographically separate locations.

• Each business account is logically isolated — your data is inaccessible to other tenants.

• Passwords are hashed using bcrypt with a high cost factor.

No method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security.

We retain your data for as long as your account is active or as needed to provide you services.

If you cancel your account, your data is retained for 30 days to allow you to export or recover it. After 30 days, all personally identifiable information is permanently deleted from our systems.

We may retain anonymized, aggregated data indefinitely for analytics purposes.

Depending on your location, you may have the following rights regarding your personal data:

• Access. Request a copy of the personal data we hold about you.

• Correction. Request that we correct inaccurate or incomplete data.

• Deletion. Request that we delete your personal data ("right to be forgotten").

• Portability. Request your data in a portable, machine-readable format.

• Objection. Object to our processing of your data in certain circumstances.

To exercise any of these rights, please contact us at the address below. We will respond within 30 days.

BlinkApp uses session cookies to maintain your logged-in state. These are essential for the platform to function and cannot be disabled.

We do not currently use tracking cookies, advertising cookies, or third-party analytics cookies.

BlinkApp is not intended for use by individuals under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us immediately and we will delete it.

We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date at the top of this page and, for material changes, notify you via email or an in-app notice.

Your continued use of BlinkApp after a change to this policy constitutes your acceptance of the revised terms.

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

BlinkApp, Inc. Privacy Team privacy@blinkapp.com