BBlockwalk

Draft: counsel review pending

This is a working draft. A lawyer has not reviewed it yet, it is not in force, and the items in [square brackets] are still to be filled in. It describes what we plan to do and what the product does today.

Leer en español

In plain words

Booking details (name, phone, email and note) and contact-form messages are deleted 90 days after the visit or the message.

To ask for them to be deleted sooner, use the privacy link under the business's booking form (no account needed) or write to privacy contact pending.

Blockwalk Privacy Policy

Who we are: [COMPANY], a [STATE] limited liability company ("Blockwalk", "we"). [MAILING ADDRESS]. Privacy questions: privacy contact pending.
Effective date: [EFFECTIVE DATE]

This policy covers three groups of people:

  • Sellers, who use Blockwalk to build and sell websites.
  • Business owners, who buy a website from a Seller.
  • Visitors to the websites we host, including people who fill in a contact form.

1. What we collect

Sellers

  • Account details: name, email, phone, password or sign-in provider.
  • Payment details for your plan. Card numbers go straight to Stripe; we never see or store them.
  • Payout details: Stripe collects your ID and bank details to pay you. We receive your Stripe account status, not your bank number.
  • What you do in the app: sites built, leads viewed, pitches marked, messages to business owners sent through Blockwalk.
  • Device and usage data: IP address, browser, pages viewed, errors. [CONFIRM tools: Sentry, PostHog or Vercel Analytics.]

Business owners

  • Public business details: name, address, phone, opening hours, category and social links. We get these from public map data (OpenStreetMap, and Google Places [CONFIRM: live or not]) before you've ever heard of us, so a Seller can build you a preview. Details that come from Google are shown with Google's attribution and are handled under Google's terms.
  • What you give your Seller: your name, email, phone, photos, logo, and the words you want on the site.
  • Billing: Stripe handles your card. We receive your payment status and the last four digits.
  • Change requests and other messages you send from your owner page.

Visitors to hosted sites

  • Anything typed into a site's contact form: usually a name, a phone number or email, and a message.
  • If a site takes appointments: the name, phone number, optional email and note a visitor types into the booking section, and the day and time they pick. The language they chose is kept on their own device, not on our servers.
  • Basic server logs: IP address, browser, page requested and time. [PLACEHOLDER: whether client sites run analytics; if they do, cookie/consent handling per section 6.]
  • A page-view count for the site owner: when a page loads, our own script adds one to that site's count for the day. It sets no cookie, stores no IP address or device identifier, uses no third-party service, and is skipped when the browser sends Do Not Track or Global Privacy Control. (Order #1101.)

2. How we use it

  • To run the service: build and host sites, deliver contact-form messages, process payments and payouts, handle change requests.
  • To write site copy. We send a business's public details (never visitor messages or payment data) to our AI provider, Anthropic, to draft the words for a site. [CONFIRM Anthropic's data-retention terms on our API plan.]
  • To keep things secure and fix bugs.
  • To email you about your account, your sites and payments. Marketing emails only to Sellers who opt in, with an unsubscribe link in each one.
  • To meet legal and tax duties.

We don't sell personal information. We don't share it for cross-context behavioural advertising.

3. Who we share it with

  • Your Seller or your client. A business owner's details and messages are shared with the Seller who built their site, and the other way round.
  • Service providers who run parts of Blockwalk for us, under contract:
    • Stripe (payments, payouts, identity checks)
    • Vercel (hosting) [CONFIRM]
    • [Neon / Supabase] (database) [CONFIRM]
    • Anthropic (writing site copy)
    • Resend (email delivery: sign-in links, and the email to a business when someone books or cancels, which carries the visitor's name, phone number, any email and note they gave) [CONFIRM, pending lawyer review]
    • [Sentry, PostHog] (errors and usage) [CONFIRM]
    • [Domain registrar] (only if a domain is bought for a business) [CONFIRM]
  • The law. When required by law, or to protect someone's safety or our rights.
  • A buyer of the company, if Blockwalk is sold or merged. They'd be bound by this policy.

4. Contact-form messages

When a visitor fills in the contact form on a business's site, or books a time, the message or booking is for that business. Blockwalk stores and delivers it on the business's behalf. The business decides what to do with it. A booking is a request until the business confirms it. When a visitor books or cancels, Blockwalk emails the business the booking details through our email provider, Resend (section 3) [pending lawyer review]. Blockwalk does not message the visitor for the business [until alerts launch]. If you sent a message or booked a time and want it deleted, contact the business or email privacy contact pending.

5. How long we keep it

  • Seller accounts: while the account is open, then [PLACEHOLDER] months, except records we must keep for tax (usually [7] years).
  • Preview sites that weren't bought: deleted [PLACEHOLDER] days after the 7-day preview ends.
  • Live sites: while the site is paid for, then [PLACEHOLDER] days after cancellation so it can come back if the owner returns. If the owner asks us to delete their site, it is marked and removed 30 days after the request; they can withdraw the request during those 30 days.
  • Contact-form messages: [PLACEHOLDER].
  • Bookings: [Pending lawyer review: the 90 days is not confirmed by counsel, see question 9.] If you book a time on a business's site, the details you give (name, phone number, email and notes) are deleted 90 days after the appointment date. The site shows the same line under the booking form.
    • Español: [Pendiente de revisión legal.] Si reservas una hora en el sitio de un negocio, los datos que das (nombre, número de teléfono, correo electrónico y notas) se borran 90 días después de la fecha de la cita.
  • Lead data from map providers: [PLACEHOLDER; Google Places data may not be cached more than 30 days except place IDs].
  • Abuse reports: [Pending lawyer review: the 90 days is not confirmed by counsel.] If you report a site through our report form, the details you give (your message, name and email) are deleted 90 days after we receive the report. We keep the case number, the address reported and what we did about it, which hold none of your details.

6. Cookies

The Blockwalk app uses cookies to keep you signed in and [for analytics, if enabled]. Hosted client sites use [no cookies / PLACEHOLDER]. If we add analytics to client sites, we'll show a consent banner where the law requires it.

7. Your choices and rights

  • See, correct or delete your data: email privacy contact pending. Business owners can also download their site's text and photos from the owner page, and ask for their site to be deleted. If you booked a time, the business can delete your booking, or you can ask us at privacy contact pending.
  • Depending on where you live (for example California, Colorado, Virginia, or the EU/UK), you may have more rights, including to know what we hold, to delete it, to correct it, and to appeal our decision. We won't treat you differently for using them. [Counsel to confirm which laws apply at our size.]
  • We'll answer within [45] days.

8. Security

Data is encrypted in transit. Access is limited to the people who need it. Card data never touches our servers. No system is perfectly secure; if a breach affects your data, we'll tell you as the law requires.

9. Children

Blockwalk is for businesses and adults. We don't knowingly collect data from anyone under 16.

10. Changes

We'll post changes here and email Sellers and business owners about material ones at least [30] days before they take effect.