Making shopping exciting - Blidz

Blidz Privacy Policy

Version 2026.3 | Effective Date: 2026-08-13 | Last Updated: 2026-08-13

Blidz Inc. ("Blidz," "we," "us," or "our") operates the Blidz mobile application (the "App"), the website at blidz.com (the "Site"), and related services (collectively, the "Service"). This Privacy Policy describes how we collect, use, disclose, and protect your personal information when you access or use the Service.

By creating a Blidz account or using the Service, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, do not use the Service.

Blidz Inc. 201 W. 5th Street, 16th Floor Austin, TX 78701 Email: support@blidz.com

1. Information We Collect

We collect information in the following categories:

1.1 Account and Identity Information

When you create an account, whether via email, Facebook, Google, or Apple sign-in, we collect:

Full name
Email address
Display name (username)
Profile photo or avatar
Password (for email-based accounts; stored in hashed form only)
Social sign-in tokens (we do not store your social media passwords)

1.2 Shipping and Delivery Information

To fulfill product orders, we collect:

Shipping address (street address, city, state/province, postal code, country)
Phone number (if required for delivery)

1.3 Payment and Transaction Information

We use Stripe as our payment processor. When you make a purchase or subscribe to a membership:

Your payment card details (card number, expiration, CVC) are collected and processed directly by Stripe. Blidz does not store your full card details on our servers.
If you pay via Apple Pay, Google Pay, or Cash App, Stripe receives a payment token and relevant transaction information from the respective provider on your behalf. Blidz does not receive or store your underlying card or bank details from these services. We receive only the tokenized payment confirmation and the transaction metadata provided by Stripe.
We receive and store from Stripe: a truncated card identifier (last four digits), card brand, billing address, transaction records, subscription status, and billing cycle information.

1.4 Blidz Bucks Redemption Information

To process your redemption of Blidz Bucks, we collect the information necessary for the redemption channel that you choose:

PayPal: Your PayPal email address
Gift Cards: Your email address for gift card delivery
Bank, debit, or other payout channels, where available: The account details and identity verification information required by the applicable payout provider

Redemption information is shared with the applicable provider only to process your redemption.

1.5 Product and Order Information

We collect information related to your activity on the platform:

Products browsed, purchased, and saved
Order details (items, prices, order status, shipping status)
Team-Up and Join deal participation (hosting, joining, deal status)
Blidz Bucks transactions (earnings, redemptions)
Blidz Points activity (earning, conversion, expiration)
Season Level progression
Membership tier and subscription history

1.6 Communications and AI Companion Data

Support communications: Emails, in-app messages, and other correspondence you send to us
AI Companions chat: When you use the AI Companions feature, we collect your typed messages and display name. This data is stored on our servers and transmitted to Google Cloud (Vertex AI) for processing. See Section 6 for full details.

1.7 Device and Technical Information

We automatically collect:

Device identifiers (device ID, and advertising ID only if you have granted consent via your device's tracking permission prompt, such as Apple's App Tracking Transparency)
Device type, model, operating system, and version
App version
IP address
Approximate geolocation (derived from IP address)
Browser type and version (for web access)
Cookie and local storage identifiers (for web access)
The page or screen you viewed, the address of the page that referred you to our Site, and the actions you took on that page
Language and timezone settings
Network information (Wi-Fi vs. cellular)

On the Site, we collect the items in this section through the technologies described in Section 5. We collect the non-essential items only after you consent.

1.8 Usage and Analytics Information

We collect information about how you interact with the Service:

Pages and screens viewed, time spent on each
Features used, taps, clicks, and navigation paths
Search queries within the App
Referral sources (how you arrived at the Service)
Session duration and frequency
Crash logs and performance data

This information is collected in part through third-party analytics, advertising, and attribution tools. Section 5 names each provider and describes your choices.

1.9 Information from Third Parties

We may receive information about you from:

Social sign-in providers (Facebook, Google, Apple): Name, email, and profile photo, as authorized by you during sign-in
Stripe: Payment verification results, billing address, and fraud signals
PayPal: Redemption confirmation status
AppsFlyer: Attribution and install data for marketing campaigns

2. How We Use Your Information

We use the information we collect for the following purposes:

2.1 Providing and Operating the Service

Creating and maintaining your account
Processing purchases, subscriptions, and Team-Up/Join deals
Processing redemptions via PayPal, gift cards, or other available channels
Managing Blidz Points, Season Levels, and Blidz Bucks
Facilitating order fulfillment and shipping (by transmitting your shipping address to the merchant fulfilling your order)
Providing customer support

2.2 Personalization and Improvement

Customizing your experience (e.g., recommended deals, relevant content)
Analyzing usage patterns to improve features and performance
Conducting A/B testing and product development
Debugging and fixing technical issues

2.3 Safety, Security, and Compliance

Detecting and preventing fraud, abuse, and unauthorized access
Verifying identity for redemption eligibility
Enforcing our Terms of Service and other policies
Complying with legal obligations, including tax reporting, anti-money-laundering requirements, and law enforcement requests
Administering the geo-targeting of jurisdiction-specific features (e.g., subscription disclosures required by New York or California law), using your Stripe billing address as the primary signal and IP geolocation as a fallback

2.4 Communications

Sending transactional messages (order confirmations, shipping updates, payment receipts, subscription reminders, membership renewal notices)
Sending service alerts (policy updates, security notifications, account-related notices)
Sending marketing and promotional communications (deal notifications, feature announcements), subject to your opt-out preferences
Sending push notifications (transactional and, with your consent, promotional)

2.5 Advertising

Measuring the performance of our advertising campaigns
Showing you advertising for Blidz on other websites and platforms, where you have consented to Tracking technologies as described in Section 5

We do not sell your personal information for money. When you consent to Tracking technologies on our Site, we allow advertising partners to collect information about your visit and to use it to measure and target advertising. Under the California Consumer Privacy Act and similar state laws, that activity is treated as "sharing" for cross-context behavioral advertising, and it may also be treated as a "sale". Section 15.2 explains this and describes how to opt out. We share information in the following circumstances:

3.1 Service Providers and Partners

We share information with third parties who perform services for us, or who collect information directly through the technologies described in Section 5. Service providers act under contractual obligations to use your data only for the purposes we specify. Advertising partners are described in Section 15.2.

Stripe: Payment information, billing address, identity verification data. Purpose: payment processing, subscription management, fraud prevention.
PayPal: PayPal email, redemption amount. Purpose: redemption processing.
Tremendous: Email address, gift card value. Purpose: gift card redemption delivery.
Google Cloud (Vertex AI): AI Companion chat messages, display name. Purpose: AI response generation (see Section 6).
Google Analytics: Cookie and device identifiers, usage events, IP address. Purpose: analytics.
Google Tag Manager: Delivery and control of the technologies listed in this section.
Amplitude: Cookie and device identifiers, user ID, usage events, IP address. Purpose: product analytics.
PostHog: Cookie and device identifiers, user ID, usage events, IP address. Purpose: product analytics.
AppsFlyer: Device identifiers, advertising ID, install and campaign data, IP address. Purpose: marketing attribution.
Meta Platforms: Cookie and device identifiers, page and event data, IP address. Purpose: advertising measurement and targeting.
TikTok: Cookie and device identifiers, page and event data, IP address. Purpose: advertising measurement and targeting.
Our consent management provider: Consent choice, device identifier, truncated IP address, timestamp. Purpose: recording and enforcing your tracking choices.
Merchant partners: Shipping name, shipping address, order details. Purpose: order fulfillment and delivery.
Email service provider: Email address, name. Purpose: transactional and marketing emails.

3.2 Legal and Safety Disclosures

We may disclose your information if we believe in good faith that disclosure is necessary to:

Comply with applicable law, regulation, legal process, or enforceable governmental request
Enforce our Terms of Service, including investigation of potential violations
Detect, prevent, or address fraud, security issues, or technical problems
Protect the rights, property, or safety of Blidz, our users, or the public

3.3 Aggregated or De-Identified Data

We may share aggregated or de-identified information that cannot reasonably be used to identify you. Such data may include anonymized usage statistics and market trends. Aggregated data may include hashed identifiers or device-level identifiers but will not include your name, email, or other directly identifying information.

We may share your information with third parties when you have given us explicit consent to do so.

4. Publicly Visible Information

Certain information is visible to other users of the Service by design:

4.1 Team-Up Deals (Public Hosting)

When you host a Team-Up deal and set it to public, the following information is displayed in the in-app Join Feed to all users:

Your display name and avatar
The product you are purchasing and its price
Deal status (active, completed, expired)

If you share a Team-Up link externally (e.g., to social media), the shared page will display your display name, the product, and the price. You choose whether to share this link. It is not shared automatically.

To avoid appearing in the public Join Feed, you may set your Team-Up deal to private (invite-only).

4.2 Profile Information

Your display name and avatar are visible to other users within the Service.

4.3 Your Responsibility

Any information you voluntarily share in public areas of the Service or through shared links becomes publicly available. Exercise caution when deciding what to disclose.

5. Cookies and Tracking Technologies

5.1 Technologies we use

Cookies and local storage: Small data files placed on your device. We use them to keep your session active, to remember your preferences, and to record your tracking choice.
Pixel tags and web beacons: Small files or code that record that a page was opened or that an action was taken. We use them on the Site and in emails.
Software development kits (SDKs): Code from third parties that is built into the App. SDKs collect usage data, device identifiers, and attribution information.

The Site and the App use different technologies and different controls. Section 5.4 describes the Site. Section 5.5 describes the App.

5.2 Categories and providers

We group technologies into three categories.

Essential. These are always active. Without them the Site does not work. They support sign-in, session security, fraud prevention, load balancing, and the record of your tracking choice. These are first-party technologies. We do not use them for analytics or advertising.

Functional. These remember your settings, such as language, display preference, and dismissed messages. They are optional. If you reject them, the Site still works, but it does not remember these settings.

Tracking. These measure how the Site is used, attribute marketing campaigns, and support advertising. They are optional and are blocked until you consent. The providers are:

Provider	Purpose	Information collected
Google Analytics	Website analytics	Cookie and device identifiers, pages viewed, actions taken, IP address
Amplitude	Product analytics	Cookie and device identifiers, user ID, product events, IP address
PostHog	Product analytics	Cookie and device identifiers, user ID, product events, IP address
AppsFlyer	Marketing attribution	Device and advertising identifiers, campaign and install data, IP address
Meta Platforms	Advertising measurement and targeting	Cookie and device identifiers, pages viewed, actions taken, IP address
TikTok	Advertising measurement and targeting	Cookie and device identifiers, pages viewed, actions taken, IP address

The consent banner shows the current list of providers and the cookies that each one sets. The list is versioned. We record which version you saw when you made your choice.

5.3 Information received by third parties

When you use the Site, the third parties named in Section 5.2 may receive information about your visit and your interactions. They collect this information directly through the technologies that they operate. Non-essential technologies do not operate until you give consent through the consent banner. If you accept a category, you consent to the collection of that information by Blidz and by the providers listed for that category. If you reject a category, those providers do not receive information about your visit.

5.4 Your choices on the Site

When you first visit the Site, we show a consent banner. The banner offers Accept and Reject options of equal prominence. It also lets you choose each optional category separately.

No non-essential technology loads or sends any information before you make a choice.

If you reject a category, the technologies in that category do not run. Rejecting is as simple as accepting.

You can change your choice at any time. Use the cookie settings link in the footer of the Site. Your new choice applies from the moment you save it.

5.5 Your choices in the App

The App does not use website cookies. It uses SDKs.

You can opt out of analytics and advertising tracking at any time in the App, at Profile > Settings > Privacy. When you opt out, we configure the SDKs to stop collecting analytics and advertising data.

Your device also provides controls. On iOS, the App Tracking Transparency prompt controls access to the advertising identifier. On Android, you can use "Opt out of Ads Personalization". We honor these settings.

5.6 Global Privacy Control and Do Not Track

We detect the Global Privacy Control (GPC) signal on the Site. When we detect it, we apply it as an opt-out of the sale and sharing of personal information, and we do not load advertising technologies. The Site shows a confirmation that we have applied the signal.

We do not respond to the older Do Not Track (DNT) browser signal, because there is no agreed standard for interpreting it.

5.7 Records of your choice

Each time you make or change a tracking choice, we write a record. The record contains the choice, the category settings, the date and time, the version of the notice and of the provider list that you saw, the version of this Privacy Policy that was in force, whether a GPC signal was present, your browser type, and a truncated form of your IP address. We keep these records so that we can show what you chose and when. Section 7 states the retention period.

5.8 Data minimization

We use session technologies where they are sufficient. Where a persistent technology is necessary, we set an expiry period that is no longer than the purpose requires. The consent banner shows the expiry period for each item.

6. Third-Party AI Services (Companions)

6.1 How It Works

The Blidz App includes an AI-powered chat feature ("Companions") that uses Google Gemini via Google Cloud's Vertex AI platform. When you use this feature:

Your typed messages and display name are sent to Google Cloud (Vertex AI) to generate AI responses.
Your conversation history is stored on Blidz servers to enable continuity and personalization of your Companion interactions.

6.2 Google Cloud's Data Handling

Under our agreement with Google Cloud (Vertex AI), your data:

Is processed in accordance with the Google Cloud Privacy Notice and our data processing agreement with Google
Is not used by Google to train its general AI models
Is not used by Google for advertising purposes
Is not retained by Google beyond what is necessary to generate a response, subject to Google Cloud's standard data processing commitments

Opt-in consent: Before any data is transmitted to Google Cloud, you will be asked to explicitly grant permission within the App.
Withdraw consent: You may withdraw your consent at any time via Settings > AI Features. Upon withdrawal, your messages will no longer be sent to Google Cloud, and you will lose access to the Companions feature.
Deletion: You may request deletion of your stored conversation history by contacting legal@blidz.com.

7. Data Retention

We retain your personal information only as long as reasonably necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

Account information: Duration of your account, plus up to 30 days after deletion request
Transaction and order records: 7 years from transaction date (for tax, legal, and dispute resolution purposes)
Payment information (stored by Stripe): Per Stripe's retention policies; truncated card data retained by Blidz for the duration of your account
Redemption records: 7 years from redemption date (tax and regulatory compliance)
AI Companion conversations: Duration of your account, or until you request deletion
Analytics and usage data: Up to 24 months from collection, then aggregated or deleted
Device and technical data: Up to 24 months from collection
Tracking consent records: 5 years from the date of the choice
Marketing communication preferences: Duration of your account
Support communications: 3 years from resolution of the inquiry

Upon account deletion, we will delete or de-identify your personal information within the timeframes described in Section 8, except where retention is required by law (e.g., tax records, fraud investigations, ongoing legal proceedings).

8. Your Privacy Rights

Depending on your jurisdiction, you may have certain rights regarding your personal information. We respond to all verifiable requests in accordance with applicable law.

8.1 Rights Available to All Users

Regardless of where you reside, you may:

Access the personal information we hold about you
Correct inaccurate personal information
Delete your account and data via in-app settings (Profile > Settings > Account Deletion) or by contacting support@blidz.com
Opt out of marketing emails by using the "unsubscribe" link in any marketing email or adjusting your notification settings in the App
Withdraw consent for AI Companions via Settings > AI Features
Manage your tracking choices on the Site, via the cookie settings link in the Site footer, and in the App, at Profile > Settings > Privacy

Account deletion is expected to be completed within 30 days after the request is received. Upon deletion:

Your Blidz account will be permanently deleted and cannot be recovered
All personal data associated with the account will be deleted, except as required by law (see retention schedule above)
All ongoing orders will be cancelled and refunded
All accumulated rewards, Blidz Bucks, and monetary benefits will be forfeited and cannot be retrieved
Blidz Points and Season Level progress will be forfeited

8.2 Additional Rights by Jurisdiction

See Sections 15 (U.S. State-Specific), 16 (UK/EEA), 17 (Australia), and 18 (Canada) for additional rights that may apply based on your location.

9. International Data Transfers

Blidz is based in the United States. Your personal information may be transferred to, stored, and processed in the United States and other countries where our service providers operate, which may have different data protection laws than your country of residence.

9.1 Transfer Mechanisms

When we transfer personal data from the UK or European Economic Area (EEA) to the United States or other countries outside the UK/EEA, we apply appropriate safeguards, including:

EU Standard Contractual Clauses (SCCs) approved by the European Commission
UK International Data Transfer Agreement (IDTA) or UK Addendum to the EU SCCs, as applicable
Other lawful transfer mechanisms as required

9.2 Sub-processors

Our key sub-processors and their locations:

Stripe: United States. Payment processing, redemptions.
PayPal: United States. Redemption processing.
Tremendous: United States. Gift card redemptions.
Google Cloud (Vertex AI): United States. AI Companion processing.
Amplitude: United States. Analytics.
PostHog: [CONFIRM REGION]. Analytics.
AppsFlyer: United States and Israel. Marketing attribution.
Meta Platforms: United States. Advertising measurement and targeting.
TikTok: [CONFIRM REGION]. Advertising measurement and targeting.
Our consent management provider: [CONFIRM REGION]. Consent recording and enforcement.

10. Security

We implement administrative, technical, and physical safeguards designed to protect your personal information, including:

Encryption of data in transit (TLS/SSL) and at rest
Hashing of passwords (we never store passwords in plain text)
Role-based access controls for internal systems
Regular security assessments and monitoring
Payment card data handled exclusively by PCI-DSS-compliant processors (Stripe)

No method of transmission or storage is completely secure. While we strive to use commercially reasonable means to protect your information, we cannot guarantee its absolute security. If you become aware of any unauthorized access to your account, please notify us immediately at support@blidz.com.

11. Children's Privacy

The Service is not intended for anyone under the age of 18. We do not knowingly collect personal information from individuals under 18.

If we learn that we have collected personal information from a person under 18, we will take steps to delete that information as promptly as possible. If you believe that a child under 18 has provided us with personal information, please contact us at support@blidz.com.

12. Communications and Notifications

By creating a Blidz account, you consent to receive the following communications from us:

Transactional communications: Order confirmations, shipping updates, payment receipts, subscription and renewal notices, redemption confirmations, failed payment alerts, and account security alerts. These are necessary for the operation of the Service and generally cannot be opted out of.
Service communications: Changes to our Terms of Service, Privacy Policy, or other policies; service interruptions or updates.
Marketing communications: Promotional offers, deal notifications, new feature announcements, and similar marketing messages. You may opt out of marketing communications at any time via your in-app notification settings or by using the "unsubscribe" link in any marketing email.
Push notifications: Transactional push notifications are enabled by default. Marketing push notifications require your consent. You may manage push notification preferences via your device settings or in-app settings.

13. Third-Party Links and Services

The Service may contain links to third-party websites, services, or content that are not operated or controlled by Blidz. This Privacy Policy does not apply to third-party services. We are not responsible for the privacy practices of any third parties. We encourage you to review the privacy policies of any third-party services you access through or from the Service.

14. Business Transfers

In connection with any merger, acquisition, reorganization, sale of assets, financing, or bankruptcy proceeding, your personal information may be transferred to, or shared with, a successor entity or prospective acquirer and their advisors. We will notify you of any such change in ownership or control of your personal information by posting a notice on our Service or sending you an email.

15. U.S. State-Specific Disclosures

This section provides additional disclosures required under state privacy laws, including the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), the Virginia Consumer Data Protection Act (VCDPA), the Colorado Privacy Act (CPA), the Connecticut Data Privacy Act (CTDPA), the Texas Data Privacy and Security Act (TDPSA), the Oregon Consumer Privacy Act (OCPA), the Montana Consumer Data Privacy Act (MCDPA), and other applicable state laws.

15.1 Categories of Personal Information Collected

In the preceding 12 months, we have collected the following categories of personal information:

A. Identifiers: Name, email, username, device ID, cookie ID, IP address, social sign-in ID. Sources: you, sign-in providers, automatic collection. Purpose: account operations, fraud prevention, analytics, advertising. Shared for cross-context behavioral advertising: yes, with your consent.
B. Personal Information (Cal. Civ. Code § 1798.80): Name, address, phone number, payment card (last 4 via Stripe). Sources: you, Stripe. Purpose: order fulfillment, payment processing. Shared for cross-context behavioral advertising: no.
C. Protected Classifications: Not intentionally collected.
D. Commercial Information: Purchase history, products browsed, membership tier, Blidz Bucks balance, Points activity. Sources: you, automatic collection. Purpose: service delivery, rewards program. Shared for cross-context behavioral advertising: purchase and browsing events only, with your consent.
F. Internet/Electronic Activity: Browsing history within the Service, search queries, interactions with features. Source: automatic collection. Purpose: analytics, product improvement, advertising. Shared for cross-context behavioral advertising: yes, with your consent.
G. Geolocation Data: Approximate location from IP address, billing address. Sources: automatic collection, Stripe. Purpose: compliance geo-targeting, analytics, advertising. Shared for cross-context behavioral advertising: approximate location only, with your consent.
H. Sensory Data: Not collected.
I. Professional/Employment: Not collected.
J. Education Information: Not collected.
K. Inferences: Usage preferences, engagement patterns. Source: derived from usage data. Purpose: personalization, product improvement, advertising. Shared for cross-context behavioral advertising: yes, with your consent.
L. Sensitive Personal Information: Account log-in credentials (email + password); financial account information (PayPal email, and account details for other redemption channels); precise geolocation (billing address via Stripe). Sources: you, Stripe. Purpose: account access, redemption processing, compliance. Shared for cross-context behavioral advertising: no.

We do not sell personal information for money.

We do share personal information for cross-context behavioral advertising, when you consent. When you accept Tracking technologies on our Site, Meta Platforms and TikTok collect identifiers and information about your activity on the Site. They use it to measure our advertising and to show you advertising elsewhere. Under the CCPA as amended by the CPRA, and under similar laws in other states, this activity is "sharing" for cross-context behavioral advertising. Some state laws may also treat it as a "sale", because we receive advertising services in return. We describe it as both, so that your rights are clear.

In the preceding 12 months, we have shared the following categories of personal information with advertising partners for this purpose: identifiers, commercial information relating to browsing and purchase events, internet and electronic activity information, approximate geolocation, and inferences.

Our analytics providers (Google Analytics, Amplitude, and PostHog) and our attribution provider (AppsFlyer) act on our behalf. We do not permit them to use your information for their own independent advertising purposes.

We do not share sensitive personal information with advertising partners.

How to stop this sharing. You can do any of the following, and each of them takes effect on its own:

Reject the Tracking category in the consent banner on our Site, or change your choice later using the cookie settings link in the Site footer.
Use the Do Not Sell or Share My Personal Information link in the Site footer.
Send a Global Privacy Control signal from your browser. We detect it and apply it automatically.
In the App, opt out at Profile > Settings > Privacy.

We do not share your information with advertising partners before you consent, and we do not share it after you opt out.

15.3 Sensitive Personal Information

We collect sensitive personal information (account credentials, financial information for redemptions, and billing address) solely as necessary to provide the Service. We do not use or disclose sensitive personal information for purposes other than those permitted under the CCPA. We do not disclose it to advertising partners. You have the right to limit the use and disclosure of your sensitive personal information to uses necessary to perform the Service.

15.4 Your Rights Under State Privacy Laws

If you are a resident of California, Virginia, Colorado, Connecticut, Texas, Oregon, Montana, or another state with an applicable consumer privacy law, you may have the following rights (subject to applicable law and exceptions):

Right to Know / Access: Request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources, the business purposes for collection, and the categories of third parties with whom we share it.
Right to Delete: Request that we delete personal information we have collected from you, subject to certain exceptions (e.g., legal retention requirements).
Right to Correct: Request that we correct inaccurate personal information.
Right to Opt Out of Sale/Sharing: You may opt out of the sharing of your personal information for cross-context behavioral advertising, and of any activity that a state law treats as a sale. Section 15.2 lists the ways to do this. We do not require you to create an account to exercise this right.
Right to Limit Sensitive Personal Information: Request that we limit the use and disclosure of your sensitive personal information to what is necessary to provide the Service.
Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.
Right to Data Portability: Request a copy of your personal information in a portable, readily usable format.
Right to Appeal: If we decline your privacy request, you may appeal our decision by contacting us at legal@blidz.com.

15.5 How to Exercise Your Rights

To submit a request, contact us at:

Email: legal@blidz.com
In-App: Profile > Settings > Privacy

We will verify your identity before processing your request. You may also designate an authorized agent to submit a request on your behalf. Authorized agents must provide written proof of authorization, and we may require you to verify your identity directly.

We will respond to verifiable requests within the timeframes required by applicable law (generally 45 days for CCPA, with a possible 45-day extension if necessary and communicated to you).

Use the Do Not Sell or Share My Personal Information link in the footer of our Site, or the cookie settings link in the same footer, to opt out of sharing for cross-context behavioral advertising.

We also honor Global Privacy Control (GPC) signals as a valid opt-out request. When we detect a GPC signal, we apply the opt-out and show you a confirmation.

15.7 Financial Incentive Programs

Our membership program (Blidz Plus, Premium, and Ultra) provides enhanced benefits in exchange for a recurring subscription fee. These benefits include access to member pricing on eligible deals and a higher monthly limit on Blidz Bucks redemption. The value of these benefits is reasonably related to the value of the membership fee. Membership is entirely voluntary. It is not conditioned on waiving any privacy right, and we do not collect additional personal information because you are a member.

16. UK and EEA Residents

If you are located in the United Kingdom or the European Economic Area, the following additional provisions apply.

16.1 Data Controller

The data controller for your personal information is:

Blidz Inc. 201 W. 5th Street, 16th Floor Austin, TX 78701, United States Email: legal@blidz.com

16.2 Legal Bases for Processing

We process your personal data on the following legal bases under the UK GDPR and EU GDPR:

Account creation and service delivery: Performance of contract (Art. 6(1)(b))
Payment and redemption processing: Performance of contract (Art. 6(1)(b))
Order fulfillment (sharing address with merchants): Performance of contract (Art. 6(1)(b))
Fraud prevention and security: Legitimate interests (Art. 6(1)(f))
Analytics and product improvement: Consent (Art. 6(1)(a)) for technologies on the Site that require consent, and legitimate interests (Art. 6(1)(f)) for aggregate service measurement
Compliance with legal obligations (tax, AML): Legal obligation (Art. 6(1)(c))
Marketing communications: Consent (Art. 6(1)(a)) or legitimate interests, where permitted
AI Companions (data sent to Vertex AI): Consent (Art. 6(1)(a))
Non-essential cookies, tracking, and advertising: Consent (Art. 6(1)(a))

In addition to the rights in Section 8, you have the right to:

Access your personal data (Art. 15)
Rectify inaccurate data (Art. 16)
Erase your data ("right to be forgotten") (Art. 17), subject to legal retention obligations
Restrict processing of your data (Art. 18)
Data portability, to receive your data in a structured, machine-readable format (Art. 20)
Object to processing based on legitimate interests or for direct marketing (Art. 21)
Withdraw consent at any time, without affecting the lawfulness of processing before withdrawal (Art. 7(3))
Lodge a complaint with your local supervisory authority (e.g., the UK Information Commissioner's Office (ICO), or your EU Member State data protection authority)

To exercise these rights, contact us at legal@blidz.com. We will respond within one month as required by law, with the possibility of a two-month extension for complex requests.

16.4 International Transfers

See Section 9. We rely on EU Standard Contractual Clauses and the UK IDTA/Addendum for transfers outside the UK/EEA. You may request a copy of these safeguards by contacting us.

16.5 Data Protection Officer

For UK/EU privacy matters, you may contact our Data Protection Officer at legal@blidz.com.

17. Australian Residents

If you are located in Australia, the following additional provisions apply.

17.1 Applicability

We handle your personal information in accordance with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

17.2 Your Rights

Under the APPs, you have the right to:

Request access to the personal information we hold about you (APP 12)
Request correction of inaccurate, out-of-date, or misleading information (APP 13)
Complain about our handling of your personal information

17.3 Complaints

If you are not satisfied with our response to a privacy complaint, you may contact the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.

17.4 Overseas Disclosure

Your personal information may be disclosed to entities located outside Australia (primarily in the United States) as described in Section 9. By using the Service, you consent to this transfer, noting that the overseas recipients may not be subject to the APPs.

18. Canadian Residents

If you are located in Canada, the following additional provisions apply.

18.1 Applicability

We handle your personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation.

By using the Service, you consent to the collection, use, and disclosure of your personal information as described in this Privacy Policy. Where required by law, we will obtain your express consent before collecting, using, or disclosing sensitive personal information.

You may withdraw your consent at any time, subject to legal or contractual obligations and on reasonable notice. Withdrawal of consent may affect your ability to use certain features of the Service.

18.3 Your Rights

Under PIPEDA, you have the right to:

Access the personal information we hold about you
Challenge the accuracy and completeness of your personal information and request amendments
Withdraw consent for certain processing
File a complaint with the Office of the Privacy Commissioner of Canada at www.priv.gc.ca

18.4 Cross-Border Transfers

Your personal information may be transferred to and processed in the United States. We ensure that any such transfers are compliant with PIPEDA's requirements regarding cross-border data transfers, including ensuring a comparable level of protection.

19. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. If we make material changes, we will:

Update the version number, the "Effective Date", and the "Last Updated" date at the top of this Policy
Notify registered users via email
Post a notice within the App and on the Site

Your continued use of the Service following the posting of changes constitutes your acceptance of such changes. We encourage you to review this Privacy Policy periodically.

20. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Blidz Inc. 201 W. 5th Street, 16th Floor Austin, TX 78701

General inquiries: support@blidz.com Privacy and data requests: legal@blidz.com