Privacy Policy

This Privacy Policy explains how BLAQ CARDS INC. ("BLAQ CARDS," "CLIQ," "we," "us," or "our") collects, uses, discloses, retains, and protects personal information when you use the CLIQ mobile application, cliq.blaqcards.com, CLIQ Profiles, CLIQ Cards, CLIQ Exchange, and related services (collectively, the "Services").

BLAQ CARDS INC. is located at 315 W Verdugo Ave, Suite C, Burbank, California 91502. Privacy questions and requests may be sent to cliq@blaqcards.com.

• Account and identity information, such as your name, email address, password credential or OAuth identity, authentication-provider information, session information, and account-security information.
• CLIQ Profile information, such as display name, title, company, biography, profile slug, phone number, email address, website, social links, custom links, and other information you choose to publish.
• Uploaded media, such as a profile photo, wallpaper, or custom payment QR image.
• Payment identifiers that you choose to display, such as a PayPal, Venmo, or Cash App username or link, or a Zelle email address or phone number. CLIQ does not use these profile features to collect your bank-account or payment-card number.
• CLIQ Card information, including card identifiers, public card tokens, status, mode, activation information, assigned profile, and provisioning information.
• Lead and contact-exchange information submitted by visitors through CLIQ Exchange, such as name, email, phone number, company, title, and message.
• First-party analytics and usage information, such as card taps, profile views, link clicks, referrer information, campaign parameters, general device category, approximate region where available, and an opaque rotating session reference.
• Billing and subscription records, such as subscription status, invoice references, and related billing metadata when a paid CLIQ plan is used.
• Physical-product order and fulfillment information associated with CLIQ Card purchases.
• Communications and transactional-email records, including support communications, password-reset messages, security messages, and account-deletion confirmation messages.
• Audit, security, and fraud-prevention records reasonably necessary to operate and protect the Services.

CLIQ's first-party analytics are designed not to store visitors' raw IP addresses as analytics-event fields and do not use device fingerprinting. The CLIQ mobile app does not request precise location, contacts-list, camera, or microphone access for its current product features.

We obtain personal information from:

• you directly when you create or manage an account or profile;
• visitors who voluntarily submit information through CLIQ Exchange;
• your use of the Services and CLIQ Cards;
• authentication providers such as Google or Apple when you choose those sign-in methods;
• service providers involved in billing, commerce, fulfillment, hosting, storage, and email delivery; and
• security and operational systems used to maintain the Services.

• provide, operate, authenticate, and secure the Services;
• create, publish, and manage CLIQ Profiles and CLIQ Cards;
• provide CLIQ Exchange, leads, analytics, links, and payment-identifier features;
• process subscriptions and support physical-product orders;
• send transactional, authentication, security, and support communications;
• detect, prevent, investigate, and respond to fraud, abuse, security incidents, or violations of our Terms;
• maintain, troubleshoot, and improve the Services;
• comply with legal obligations and respond to lawful requests; and
• establish, exercise, or defend legal claims.

CLIQ is designed to let you share selected professional and contact information. Information you publish on a CLIQ Profile may be accessible to anyone who has the profile URL or taps a CLIQ Card associated with that profile. You should not publish information you do not want made public.

When a visitor voluntarily submits information through CLIQ Exchange, the submitted information is made available to the owner of the CLIQ Profile that received it.

We may disclose personal information to service providers and processors that help us operate the Services. Depending on the feature used, these include:

• Supabase, for database and file-storage infrastructure;
• Vercel, for web hosting and deployment infrastructure;
• Stripe, for subscription billing and payment processing;
• Shopify, for physical-product commerce and order fulfillment;
• Resend, for transactional email delivery;
• Google and Apple, for optional authentication; and
• other vendors we may use to provide security, hosting, support, or infrastructure functions consistent with this Policy.

We may also disclose information when required by law, legal process, or a valid government request; to protect rights, safety, and security; to investigate fraud or abuse; or as part of a merger, financing, acquisition, reorganization, bankruptcy, or sale of assets, subject to applicable law.

We do not sell personal information for monetary consideration. We do not currently share personal information for cross-context behavioral advertising or process personal information for targeted advertising as those terms are defined under applicable U.S. state privacy laws.

We do not currently use personal information to make decisions that produce legal or similarly significant effects through automated profiling. If our practices change, we will update this Policy and provide any opt-out mechanisms required by applicable law.

Where applicable law requires recognition of a browser- or device-based universal opt-out preference signal, such as Global Privacy Control, we will process that signal for any legally covered sale, sharing, or targeted-advertising activity. Because CLIQ does not currently engage in those activities, there is presently no such activity to opt out of.

Certain information used for account security, such as account credentials, may be considered sensitive personal information under some laws. We use sensitive personal information only for purposes reasonably necessary to provide, secure, and maintain the Services, comply with law, or as otherwise permitted by applicable law. We do not use sensitive personal information to infer characteristics about you for advertising.

We retain personal information for as long as reasonably necessary to provide the Services, fulfill the purposes described in this Policy, maintain security, resolve disputes, enforce agreements, and comply with legal, tax, accounting, and recordkeeping obligations. Retention periods vary by data type and context. We consider the amount, nature, and sensitivity of the information, the purposes for processing it, legal requirements, and security needs when determining how long to retain it.

When you delete your CLIQ account, information covered by the account-deletion process is deleted or disassociated as described below. Some information may be retained where required or permitted by law, including transaction, fraud-prevention, security, accounting, tax, dispute-resolution, or legal records.

You may permanently delete your CLIQ account through the self-service deletion feature. In the mobile app, go to Settings and choose Delete Account. On the web, sign in and go to Settings → Delete Account. Authentication and a confirmation step may be required.

The deletion process removes the account's CLIQ Profile and associated profile information, contact information, links, payment methods, leads, and analytics history according to the product's deletion workflow. A connected physical CLIQ Card may become unclaimed rather than being physically destroyed.

Depending on your state of residence and whether an applicable privacy law applies to BLAQ CARDS, you may have rights to request access to or confirmation of personal information we process about you, obtain a copy of certain information, correct inaccuracies, delete personal information, and receive certain information in a portable format. Some state laws also provide rights to opt out of sale, targeted advertising, or certain profiling, and to appeal a denied privacy request.

To simplify privacy administration, we accept access, correction, deletion, and portability requests from U.S. residents even when a particular state law does not require us to do so, subject to reasonable verification, legal exceptions, and technical feasibility.

Submit a privacy request by emailing cliq@blaqcards.com with the subject "Privacy Request." We may need to verify your identity before completing a request. If applicable law gives you a right to appeal a decision, email the same address with the subject "Privacy Appeal" and explain the decision you want reviewed. We will respond within the timeframe required by applicable law.

We will not unlawfully discriminate against you for exercising an applicable privacy right.

This section supplements the rest of this Policy for California residents and is intended to serve as our California notice at collection when presented at or before collection.

The categories of personal information we may collect include identifiers and account information; customer-record information; commercial information; internet or electronic network activity; professional or employment-related information that you or a visitor chooses to provide; user-generated content and uploaded media; and in limited contexts, sensitive personal information such as account-login credentials used for authentication and security.

We collect and use these categories for the business and commercial purposes described in Sections 4 and 6 above, including providing and securing the Services, operating profiles and cards, providing analytics and lead-management features, processing billing and orders, communicating with users, preventing fraud, and complying with law. We retain each category only as reasonably necessary for those purposes and legal obligations, as described in Section 9.

Subject to applicable California law and applicable thresholds and exceptions, California residents may have rights to know/access, delete, correct, opt out of sale or sharing, limit certain uses and disclosures of sensitive personal information, and receive non-discriminatory treatment. We do not currently sell personal information or share it for cross-context behavioral advertising, and we use sensitive personal information only for permitted service and security purposes. We therefore do not currently offer a "Do Not Sell or Share" or "Limit the Use of My Sensitive Personal Information" link because there is no covered activity for those controls to stop.

You may use an authorized agent to submit a request where California law permits. We may require proof that the agent is authorized and may verify your identity directly when permitted by law.

We do not offer financial incentives or price or service differences in exchange for the collection, sale, or sharing of personal information.

Residents of states with comprehensive privacy laws, including states that provide rights of access, correction, deletion, portability, opt-out, or appeal, may exercise those rights using the process in Section 11. This process is intended to cover rights that may apply under laws such as the Colorado Privacy Act, Connecticut Data Privacy Act, Virginia Consumer Data Protection Act, Utah Consumer Privacy Act, Texas Data Privacy and Security Act, Oregon Consumer Privacy Act, Montana Consumer Data Privacy Act, Delaware Personal Data Privacy Act, Iowa Consumer Data Protection Act, New Jersey Data Privacy Act, New Hampshire privacy law, Nebraska Data Privacy Act, Tennessee Information Protection Act, Indiana Consumer Data Protection Act, Kentucky Consumer Data Protection Act, Maryland Online Data Privacy Act, Minnesota Consumer Data Privacy Act, Rhode Island Data Transparency and Privacy Protection Act, and other U.S. state privacy laws that become applicable to us.

State privacy laws differ in scope, thresholds, exceptions, and terminology. Nothing in this section limits rights you may have under a law that applies to you.

The web Services may use cookies or similar technologies that are necessary for authentication, security, preferences, attribution, and operation of the Services. CLIQ does not currently use third-party advertising SDKs in its mobile app. If we later introduce advertising or cross-site tracking technologies, we will update this Policy and provide legally required choices before relying on them.

We use administrative, technical, and organizational safeguards designed to protect personal information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your credentials and for using appropriate security protections for your account.

The Services are intended for adults age 18 and older and are not directed to children. We do not knowingly collect personal information from children under 13. If we learn that we collected personal information from a child under 13 in circumstances requiring parental consent, we will take appropriate steps to delete it. If you believe a child has provided us personal information, contact us at cliq@blaqcards.com.

CLIQ is operated from the United States. If you access the Services from outside the United States, your information may be processed in the United States and in other locations where our service providers operate. This Privacy Policy is primarily written for U.S. operations. Additional rights may apply under non-U.S. law.

CLIQ Profiles may link to websites, social networks, payment services, and other third-party services. Those services operate independently and are governed by their own terms and privacy policies. We are not responsible for their privacy or security practices.

We may update this Policy from time to time. We will post the updated version here, update the "last updated" date, and provide additional notice when required by law. We review this Policy periodically and at least as often as required by applicable law.

BLAQ CARDS INC.
CLIQ by BLAQ CARDS
315 W Verdugo Ave, Suite C
Burbank, California 91502
Email: cliq@blaqcards.com