Privacy Policy

1. Operator

The operator of personal data is Blank Group LLC (163/8 Moskovskaya st., Pervomaysky district, Bishkek, Kyrgyz Republic). This Policy explains what data we process, why, and the rights of the data subject.

2. Data we process

Account data: email address, name, password (stored only as an irreversible hash).

Organization data: organization name, subdomain, industry, membership and roles.

Payment data: transaction amount, currency, status and payment-provider identifiers. Full card details are not stored by us and are processed by Stripe and ЮKassa.

Technical data: IP address, request metadata and usage counters needed for security and metering.

3. Purposes and legal basis

Data is processed to perform the agreement (provide the service), for account security, email verification, billing, and to comply with legal requirements. The basis is the conclusion and performance of the agreement and the User's consent given upon registration.

4. Third parties

We involve processors solely to provide the service: Stripe and ЮKassa (payment processing) and our own mail server (email delivery). We do not sell personal data and do not transfer it for third-party advertising purposes.

5. Storage and security

Data is stored in a PostgreSQL database with row-level isolation between organizations. Passwords are hashed, sessions use RS256 tokens, and traffic is encrypted with TLS. Data is retained for as long as the account exists and for the periods required by law.

6. Your rights

You may request access to, correction, or deletion of your data, and withdraw consent, by writing to support@blanq.tech. Account deletion leads to removal of associated personal data, except data that must be retained by law.

7. Cookies

We use strictly necessary cookies for authentication, session, and language preference. No advertising or third-party tracking cookies are used.