Privacy Notice

Last Updated: August 11, 2026

This Privacy Notice (“Privacy Notice” or “Notice”) for Blanc Tech, Inc., dba Blanc (“Blanc,” “we,” “us,” or “our”), describes how we collect, use, disclose, retain, and otherwise process personal information when Blanc determines the purposes and means of that processing (“Blanc-Controlled Data”). This includes personal information relating to website visitors, prospects, business contacts, account administrators and users, and people who communicate directly with Blanc.

This Notice applies when you:

• visit https://blanchq.com or another website operated by Blanc that links to this Notice;
• create or administer a Blanc account;
• communicate with Blanc for sales, support, security, billing, marketing, or other business purposes; or
• otherwise interact directly with Blanc in a context where Blanc determines how and why your personal information is processed.

Enterprise Customer Data

This Notice does not govern personal information contained in data, communications, recordings, transcripts, files, or other information that an enterprise customer imports, submits, connects, or otherwise makes available to Blanc for processing on that customer’s behalf (“Customer Data”). Blanc processes Customer Data as a service provider or processor on behalf of the applicable enterprise customer and in accordance with the customer’s instructions, Master Service Agreement (“MSA”), Data Processing Addendum (“DPA”), Order Form, and other applicable customer agreements.

If your personal information appears in Customer Data processed by Blanc on behalf of one of our customers, the applicable customer is generally responsible for determining the purposes and means of that processing and for responding to privacy-rights requests concerning that Customer Data. Where appropriate and required by our customer agreement or applicable law, Blanc will assist the customer in responding to such requests.

Questions or concerns? If you have questions about this Notice or Blanc-Controlled Data, please contact us at security@blancHQ.com.

---

Summary of Key Points

This summary provides key points from our Privacy Notice. Additional details are provided in the sections below.

• What personal information do we process? We process limited personal information that you provide directly to Blanc and limited technical and security information generated when you use our websites or Services.
• What about enterprise Customer Data? Customer Data is processed on behalf of enterprise customers under the applicable MSA, DPA, Order Form, and customer instructions. It is not treated as Blanc-Controlled Data under this Notice.
• How do we use personal information? We use Blanc-Controlled Data to provide and administer our Services, manage accounts and billing, communicate with you, support security and fraud prevention, conduct product research and development, and comply with applicable law.
• Do we use personal information to train AI models? No. We do not use user data or Customer Data to train Blanc AI models or third-party AI models.
• Do we use advertising or retargeting trackers? No. We do not use third-party advertising or retargeting technologies. We may use necessary cookies and limited analytics technologies as described below.
• How do we protect personal information? We use reasonable technical and organizational measures designed to protect personal information. No electronic transmission or storage system can be guaranteed to be completely secure.
• How do you exercise privacy rights? Email security@blancHQ.com. We will process verified requests as required by applicable law.

---

Table of Contents

1. What Information Do We Collect?
2. How Do We Process Your Information?
3. When and With Whom Do We Disclose Personal Information?
4. Do We Use Cookies and Other Tracking Technologies?
5. Do We Offer Artificial Intelligence-Based Products?
6. How Long Do We Keep Your Information?
7. How Do We Keep Your Information Safe?
8. Do We Collect Information From Minors?
9. What Are Your Privacy Rights?
10. Controls for Do-Not-Track and Global Privacy Control
11. Do United States Residents Have Specific Privacy Rights?
12. Do We Make Updates to This Notice?
13. How Can You Contact Us About This Notice?
14. How Can You Review, Update, or Delete Personal Information?

---

1. What Information Do We Collect?

Personal information you provide directly to Blanc

In Short: We collect limited personal information that you voluntarily provide to Blanc.

The personal information we collect depends on how you interact directly with Blanc. It may include:

• name;
• business or personal email address;
• phone number;
• mailing or business address;
• billing contact information;
• account credentials or authentication information;
• contact and communication preferences;
• communications you send directly to Blanc; and
• limited subscription, invoice, and account-billing information.

Payment information

Where payment information is required, payment card or bank-account details are handled directly by the applicable payment provider rather than collected by Blanc. Blanc may receive limited billing, invoice, payment-status, and transaction-reference information needed to administer the customer account and reconcile payments.

Sensitive information and Customer Data

Blanc does not ask website visitors, prospects, account users, or other individuals to provide Social Security numbers, government identification numbers, or similar sensitive identifiers directly to Blanc as part of ordinary account registration or use.

Enterprise Customer Data may, however, contain personal or sensitive information supplied by a customer, including financial information, government identifiers, personally identifiable information (“PII”), call recordings, audio, transcripts, or other communications. Such information is processed on the enterprise customer’s behalf under the applicable MSA, DPA, Order Form, and customer instructions rather than as Blanc-Controlled Data under this Notice.

Blanc offers an optional PII data-scrubbing capability that can be configured to identify and redact certain PII found in Customer Data imported or connected by the customer. The availability or use of that capability does not change the customer’s responsibility for determining what Customer Data it submits to Blanc and ensuring that its submission and use of that Customer Data are lawful.

Information automatically collected

In Short: We collect limited technical, diagnostic, and security information when you use our websites or Services.

When you visit or use our websites or Services, Blanc may automatically collect limited technical information needed to operate, secure, troubleshoot, and administer them. This may include:

• Internet Protocol (IP) address;
• browser type and basic browser characteristics;
• device type and operating system;
• date and time of access;
• referring URL;
• authentication and security events;
• error, diagnostic, and performance information; and
• approximate geographic location inferred from an IP address.

Blanc does not collect precise GPS or device location through the website for the purposes described in this Notice. We do not use technical logs to build interest profiles or browsing-history profiles for targeted advertising.

2. How Do We Process Your Information?

In Short: We process Blanc-Controlled Data to operate our business and Services, communicate with you, maintain security, improve our products, and comply with applicable law.

Depending on how you interact with Blanc, we may process Blanc-Controlled Data for the following purposes:

• Account creation and administration. To create, authenticate, secure, maintain, and administer user accounts.
• Providing and supporting Services. To provide requested Services, respond to support requests, troubleshoot problems, and communicate about Service functionality.
• Billing and commercial administration. To manage subscriptions, invoices, payment status, account records, and related commercial communications.
• Security and fraud prevention. To authenticate users, detect or investigate suspicious activity, protect accounts and systems, maintain audit and security logs, and prevent abuse.
• Communications and marketing. To respond to inquiries and, where permitted, send product, company, or marketing communications. You may opt out of marketing communications at any time.
• Product research and development. We may use limited personal information to understand product performance, improve functionality, develop features, conduct testing, and support internal technological research and demonstration. We do not use user data or Customer Data to train Blanc AI models or third-party AI models.
• Legal and regulatory obligations. To comply with applicable law, respond to lawful requests, protect legal rights, and establish, exercise, or defend legal claims.

Customer Data processed on behalf of enterprise customers is processed for the purposes specified in the applicable customer agreement and documented customer instructions.

3. When and With Whom Do We Disclose Personal Information?

In Short: We limit disclosures of Blanc-Controlled Data and do not sell it or use it for targeted advertising.

We may disclose Blanc-Controlled Data in the following circumstances:

• Business Transfers. We may disclose or transfer information in connection with an actual or proposed merger, financing, acquisition, reorganization, sale of assets, or similar corporate transaction, subject to appropriate confidentiality and legal requirements.
• Affiliates. We may disclose information to affiliates under common control with Blanc where reasonably necessary for internal administration, security, legal compliance, or provision of the Services, subject to appropriate confidentiality obligations.
• Service Providers and Vendors. For analytics, product research, and similar vendor-supported activities under this Notice, Blanc provides only anonymized or deidentified information to the vendor. Where a third party needs identifiable information to perform a service directly requested by you, such as payment processing, that provider may collect the relevant information directly from you rather than receiving it from Blanc. Customer Data processed by Blanc subprocessors, if any, is governed separately by the applicable customer agreement and DPA.
• Legal Requirements and Protection of Rights. We may access, preserve, or disclose information where reasonably necessary to comply with applicable law or valid legal process; enforce our agreements; investigate fraud, abuse, or security incidents; protect the rights, property, or safety of Blanc, our customers, users, or others; or establish, exercise, or defend legal claims.

Blanc does not sell Blanc-Controlled Data. Blanc does not disclose Blanc-Controlled Data to third parties for cross-context behavioral advertising, targeted advertising, or retargeting.

4. Do We Use Cookies and Other Tracking Technologies?

In Short: We use cookies and similar technologies for necessary site functions and limited analytics, not for third-party advertising or retargeting.

Blanc may use cookies and similar technologies to:

• enable essential website and account functionality;
• maintain sessions and authentication;
• remember basic preferences;
• help detect fraud, abuse, or security incidents;
• diagnose crashes, errors, and performance issues; and
• measure website and product performance using limited analytics.

We do not use third-party advertising pixels or retargeting technologies to build advertising profiles or serve targeted advertisements based on your activity across unrelated websites or services.

You can control or remove cookies through your browser settings. Blocking strictly necessary cookies may prevent certain website or account features from functioning correctly.

Where applicable law requires recognition of a qualifying universal opt-out preference signal, including Global Privacy Control (“GPC”), Blanc will process that signal as required. Because Blanc does not currently sell Blanc-Controlled Data or use it for targeted advertising or retargeting, such a signal may not result in a visible change to your experience.

5. Do We Offer Artificial Intelligence-Based Products?

In Short: Yes. Blanc provides features powered by artificial intelligence, machine learning, and related technologies.

Our Services include artificial intelligence, machine-learning, and related capabilities (“AI Products”) that support enterprise compliance and complaint-management workflows.

Our AI Products

Depending on the Services and configuration used by the customer, AI Products may support functions such as:

• document generation;
• complaint identification and detection;
• complaint classification and categorization;
• communication and interaction analysis;
• risk and compliance-issue detection;
• summarization;
• root-cause analysis;
• quality-assurance and review workflows; and
• related analysis, prioritization, and workflow-support functions.

How We Process Data Using AI

Personal information processed through AI Products is handled in accordance with this Notice where it is Blanc-Controlled Data and in accordance with the applicable MSA, DPA, Order Form, and customer instructions where it is Customer Data.

Blanc does not use user data or Customer Data to train Blanc AI models or third-party AI models. Blanc may use limited personal information for general product research and development as described in Section 2, but not for AI model training.

Where third-party AI providers process data on Blanc’s behalf, Blanc requires those providers to process the data only for the requested service and maintains zero-retention contractual arrangements for data submitted for AI processing, so that the provider does not retain that submitted data after the applicable processing request is completed.

6. How Long Do We Keep Your Information?

In Short: We retain Blanc-Controlled Data only for as long as reasonably necessary for the purposes described in this Notice or as required or permitted by law.

We retain Blanc-Controlled Data for as long as reasonably necessary to provide and administer the Services, maintain our business relationship, satisfy contractual obligations, comply with legal, tax, accounting, security, and regulatory requirements, resolve disputes, and enforce our agreements.

When Blanc no longer has a legitimate business or legal need to retain Blanc-Controlled Data, we will delete or anonymize it or, where immediate deletion is not technically feasible, securely isolate it from further active processing until deletion is possible.

Retention of Customer Data is governed by the applicable MSA, DPA, Order Form, customer instructions, and Blanc’s contractual data-retention and deletion obligations.

7. How Do We Keep Your Information Safe?

In Short: We use reasonable technical and organizational measures designed to protect personal information.

Blanc maintains technical and organizational measures designed to protect personal information against unauthorized access, disclosure, alteration, loss, or misuse. No electronic transmission over the Internet or information-storage system can be guaranteed to be completely secure.

You are responsible for maintaining the confidentiality and security of your account credentials. Where two-factor authentication is available for your account, we encourage you to enable and use it. You should promptly notify Blanc if you believe your account or credentials have been compromised.

8. Do We Collect Information From Minors?

In Short: Blanc is intended for business use by adults, and we do not knowingly collect or process personal information relating to individuals under 18.

The Services are intended for users who are at least 18 years old. We do not knowingly permit individuals under 18 to create or use Blanc accounts, and customers must not intentionally submit personal information relating to individuals under 18 as Customer Data.

If we become aware that we have collected or received personal information relating to an individual under 18, including within Customer Data, we will take reasonable steps to delete, remove, or return that information as appropriate and, where relevant, notify the applicable enterprise customer. If you believe Blanc may have received personal information relating to an individual under 18, please contact security@blancHQ.com.

9. What Are Your Privacy Rights?

In Short: Depending on where you live and the circumstances of the processing, you may have rights regarding Blanc-Controlled Data.

Depending on applicable law, you may have rights to request access to, correction of, deletion of, or a copy of personal information Blanc maintains about you, as well as other rights described in Section 11.

• Withdrawing consent. Where Blanc relies on your consent, you may withdraw that consent at any time by contacting us. Withdrawal does not affect processing that was lawful before withdrawal or processing supported by another lawful basis where applicable.
• Marketing communications. You may unsubscribe from marketing emails by using the unsubscribe link in the message or by contacting us. We may still send non-marketing communications relating to your account, security, transactions, support requests, or other Services you use.
• Account information. Where account settings permit, you may update certain account information directly. You may also contact us to request correction, deletion, or account closure, subject to applicable contractual, security, and legal retention requirements.
• Cookies. You may manage cookies through your browser settings as described in Section 4.

To exercise a privacy right relating to Blanc-Controlled Data, email security@blancHQ.com.

If your request concerns personal information contained in Customer Data that Blanc processes on behalf of an enterprise customer, please contact that enterprise customer directly. Where appropriate, Blanc will assist the customer in responding to your request.

10. Controls for Do-Not-Track and Global Privacy Control

Some browsers include a Do-Not-Track (“DNT”) setting. Because DNT has not developed into a single uniform signal that indicates the same request in every context, Blanc does not currently respond to ordinary DNT browser signals.

Blanc distinguishes DNT from universal opt-out preference signals designed to communicate legally recognized opt-out requests. Where applicable law requires Blanc to recognize a qualifying signal, including Global Privacy Control (“GPC”), Blanc will process that signal as required.

Blanc does not currently sell Blanc-Controlled Data or use it for cross-context behavioral advertising, targeted advertising, or retargeting. Accordingly, a GPC or similar signal may not result in a visible change to your experience.

11. Do United States Residents Have Specific Privacy Rights?

In Short: Residents of certain U.S. states may have additional privacy rights under applicable state privacy laws.

Depending on your state of residence, whether Blanc is subject to the applicable law, and the nature of the personal information and processing involved, you may have additional rights. These rights may be subject to exceptions, exemptions, verification requirements, and other limitations under applicable law.

Categories of Blanc-Controlled Personal Information

Category	Examples / Scope	Collected
A. Identifiers	Name, postal or business address, telephone number, email address, online identifier, IP address, and account identifier	YES
B. Personal information (including categories identified in applicable customer-records laws)	Name, contact information, address information, limited billing information, and account information	YES
C. Protected classification characteristics	Age, race, ethnicity, national origin, marital status, and similar demographic characteristics	NO
D. Commercial information	Subscription, order, invoice, payment-status, and limited transaction-reference information; payment-card and bank-account details are handled directly by the applicable payment provider	YES — LIMITED
E. Biometric information	Fingerprints, voiceprints, facial geometry, and similar biometric identifiers used to establish identity	NO
F. Internet or similar network activity	Limited technical, diagnostic, authentication, and security logs such as IP address, browser/device characteristics, timestamps, referring URL, and error or security events. Blanc does not use this information to create interest or browsing profiles for targeted advertising.	YES — LIMITED
G. Geolocation data	Approximate geographic location inferred from IP address; not precise GPS or device location	YES — APPROXIMATE ONLY
H. Audio, electronic, sensory, or similar information	Not collected as Blanc-Controlled Data for the purposes described in this Notice. Customer Data may include call recordings, audio, transcripts, or other communications processed on behalf of enterprise customers.	NO*
I. Professional or employment-related information	Employment history, professional qualifications, and similar employment records	NO
J. Education information	Education records, student records, and directory information	NO
K. Inferences drawn from personal information	Profiles or inferences about a person’s preferences or characteristics created for Blanc’s own purposes. AI-derived classifications or analyses performed on Customer Data are processed on behalf of the enterprise customer and are outside the scope of this table.	NO*
L. Sensitive personal information	Account credentials and authentication information. Blanc does not ask individuals to provide SSNs or government IDs directly. Customer Data may contain sensitive information supplied by enterprise customers and is outside the scope of this table.	YES — LIMITED

*Customer Data processed on behalf of enterprise customers is excluded from this Blanc-Controlled Data table and may contain these categories.

How We Use and Disclose Blanc-Controlled Data

We use Blanc-Controlled Data for the purposes described in Sections 2 and 3. Blanc does not sell Blanc-Controlled Data and does not disclose it for cross-context behavioral advertising, targeted advertising, or retargeting.

For vendor-supported analytics and product-research activities described in this Notice, Blanc provides anonymized or deidentified information. Where a third-party provider collects information directly from you to perform a requested service, such as payment processing, that provider’s collection is governed by its own applicable privacy terms. Customer Data processed by Blanc or its approved subprocessors is governed separately by the applicable enterprise customer agreement and DPA.

Your Rights

Depending on applicable law, you may have rights including:

• the right to know whether Blanc is processing your personal information;
• the right to access personal information;
• the right to correct inaccuracies;
• the right to request deletion;
• the right to obtain a copy of certain personal information;
• the right to non-discrimination for exercising applicable privacy rights;
• the right to withdraw consent where processing is based on consent;
• the right to limit certain uses or disclosures of sensitive personal information where applicable; and
• the right to opt out of sale, targeted advertising, or certain profiling where those activities occur and applicable law provides such a right.

Blanc does not currently sell Blanc-Controlled Data or process it for targeted advertising or retargeting.

How to Exercise Your Rights

To exercise an applicable privacy right concerning Blanc-Controlled Data, email security@blancHQ.com. Please describe the right you wish to exercise and provide enough information for us to identify the relevant records and verify your request where required.

If permitted by applicable law, you may designate an authorized agent to submit a request on your behalf. We may require information reasonably necessary to verify the agent’s authority and your identity.

Request Verification

We may need to verify your identity or authority before fulfilling certain requests. We will use information provided for verification only as reasonably necessary to verify and process the request and to protect against fraud or unauthorized access.

Appeals

Where applicable law provides a right to appeal our decision concerning a privacy request, you may submit an appeal by emailing security@blancHQ.com. We will respond in accordance with applicable law and, where required, provide information about additional complaint options.

California Direct-Marketing Disclosure Requests

Where applicable California law provides a right to request information about certain disclosures of personal information for third parties’ direct-marketing purposes, eligible California residents may submit such a request by emailing security@blancHQ.com. Blanc does not disclose Blanc-Controlled Data to third parties for their own direct-marketing purposes.

12. Do We Make Updates to This Notice?

In Short: Yes. We may update this Notice as our Services, practices, or legal obligations change.

We may update this Privacy Notice from time to time. The current version will be identified by the “Last Updated” date at the top of this Notice. If we make material changes, we may provide additional notice where appropriate or required, such as by posting a prominent notice or sending a direct communication.

13. How Can You Contact Us About This Notice?

If you have questions or comments about this Notice or Blanc-Controlled Data, please email security@blancHQ.com or contact us by post at:

Blanc Tech, Inc.
25 Kent Ave, Ste 401
Brooklyn, NY 11249
United States

14. How Can You Review, Update, or Delete Personal Information?

Depending on applicable law, you may have the right to request access to, correction of, deletion of, or information about Blanc-Controlled Data maintained about you. To submit a request, email security@blancHQ.com.

If your request relates to Customer Data processed by Blanc on behalf of an enterprise customer, please direct your request to that enterprise customer. Blanc will assist the customer where required by the applicable customer agreement or applicable law.