Privacy Policy

1. Information We Collect

Account Information

When you create an account, we collect your name, email address, and phone number. This information is used for authentication, account management, and customer support.

Payment Information

Payments are processed through our third-party payment provider. We do not store your full credit card number, CVV, or banking details on our servers. We retain transaction records (amounts, dates, subscription status) for billing and accounting purposes.

Usage Data

We collect information about how you interact with the platform, including pages visited, features used, session duration, device type, browser, and IP address. This data helps us improve performance and user experience.

2. Cookies & Tracking

BlackOut uses cookies for:

• Authentication: Session cookies to keep you logged in securely
• Analytics: Understanding how features are used so we can improve the platform
• Preferences: Remembering your settings and display preferences

We do not use cookies for third-party advertising. You can manage cookie preferences through your browser settings, though disabling essential cookies may affect functionality.

3. Analytics

We use analytics tools to understand usage patterns, diagnose performance issues, and improve the platform. Analytics data is aggregated and does not identify you personally. We do not sell analytics data to third parties.

4. How We Use Your Information

• Providing and maintaining the BlackOut platform
• Processing payments and managing subscriptions
• Sending service-related communications (billing, security, updates)
• Improving platform performance and features
• Responding to support requests
• Enforcing our Terms of Service

We do not sell your personal information to third parties.

5. Third-Party Providers

We share limited data with trusted third parties that help operate the platform:

• Authentication: Clerk (account management, login)
• Payments: Whop (subscription billing)
• Hosting: Amazon Web Services (infrastructure)
• CDN: Cloudflare (performance, security)

Each provider operates under its own privacy policy and processes data only as necessary to provide their services.

6. Data Retention

We retain your account data for as long as your account is active. If you cancel your account, we delete personal data within 90 days, except where retention is required by law (e.g., billing records). Usage analytics are retained in aggregated, anonymized form indefinitely.

7. Data Security

We use industry-standard security measures including encrypted connections (TLS), secure authentication, and access controls. No system is 100% secure, but we take reasonable steps to protect your information.

8. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Export your data in a portable format

To exercise any of these rights, contact us at [email protected].

9. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

• The right to know what personal information we collect, use, and disclose
• The right to request deletion of your personal information
• The right to opt out of the sale or sharing of your personal information
• The right to non-discrimination for exercising your privacy rights

BlackOut does not sell your personal information. To exercise any of these rights, contact us at [email protected].

10. International Users (GDPR)

If you are located in the European Economic Area (EEA) or the United Kingdom, we process your personal data under the following lawful bases: performance of our contract with you (providing the platform), our legitimate interests (improving the service, preventing fraud), and your consent (where applicable, such as marketing communications).

In addition to the rights listed above, you may also:

• Request restriction of processing of your personal data
• Object to processing based on our legitimate interests
• Lodge a complaint with your local data protection authority

We transfer data outside the EEA using standard contractual clauses approved by the European Commission. For questions about international data transfers, contact us at [email protected].

11. Children's Privacy

BlackOut is not intended for users under 18. We do not knowingly collect data from minors. If we learn that a user is under 18, we will promptly delete their account.

12. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be communicated via email or platform notification. Continued use after changes constitutes acceptance.

13. Contact

Privacy questions? Contact us at [email protected].