Blackjay Privacy Policy

1. Two roles

We handle personal information in two distinct roles:

Our own operations: we decide how data is used. Site visitors, leads, Mail Audit requests, client and vendor contacts, and our own marketing. Sections 2 and 5–10 cover this.

On behalf of clients: they decide; we follow instructions. Mailing lists and recipient information clients give us so we can produce and mail their campaigns (“Client Mailing Data”). Section 3 covers this; our use is limited by our Terms of Service.

2. Information we collect for our own operations

Information you provide: your name, work email, phone number, company, and role when you fill out a form, request a Mail Audit, book a call, or write to us; Mail Audit materials you choose to share (invoices, quotes, mail samples, campaign statistics; please don’t send consumer mailing lists or customer files at the audit stage; audits don’t need them, and we may delete unsolicited personal data without review); client account and billing details (card payments are handled by our payment processor; we do not store full card numbers); and your communications and marketing preferences.

Collected automatically: device and browser type, IP address, pages viewed, referring links, and similar usage data, via cookies (Section 7).

From other sources: business contact information from public and professional sources (company websites, professional profiles, press coverage, and business-contact data providers), used for business-to-business outreach about our services.

We do not seek sensitive personal information (health, financial account numbers, precise geolocation, government IDs) through the Site; please don’t submit it.

3. Client Mailing Data: our service-provider role

When clients provide mailing lists and recipient information, we act as their service provider (in some states, “processor”):

• We use Client Mailing Data solely to provide the contracted services for that client: address hygiene (including USPS-licensed CASS and NCOA processing), production, mailing, suppression, and campaign reporting. We use it for no other purpose.
• We never sell or share Client Mailing Data, never use it for our own or anyone else’s marketing, and never use it to build, enrich, or rent lists.
• We disclose it only to the printer partners and service providers needed to produce that client’s mailings, under contractual protections consistent with our own.
• When a client asks us to find mailing addresses for email addresses it provides, we send those email addresses to third-party data providers for matching and use the results only for that client’s mailings.
• We protect it with commercially reasonable safeguards, notify the client without undue delay of any confirmed unauthorized access, and delete or return it on request or within 60 days after the client’s campaign ends (except limited copies retained by law or in routine backups, and de-identified aggregates).
• Where a privacy law requires service-provider or processor terms, our data processing addendum is available to clients.

The client (the advertiser named on the mail piece) is responsible for the list and for recipient-facing privacy compliance. The advertiser’s privacy policy, not this one, governs the personal information they collect and use.

4. If you received mail from one of our clients

We print and mail campaigns on behalf of advertiser clients. The advertiser chose and sourced the mailing list; the piece you received identifies the advertiser (the brand, the offer, and the return address).

• To stop that advertiser’s mail: contact the advertiser using the contact information on the piece. That reaches the owner of the list and is the fastest route.
• Or contact us at legal@blackjay.ai: we will forward your request to the advertiser and add your address to our suppression records so we exclude it from future mailings we produce for that advertiser and, if you ask, from all mail we produce for any client.

We do not use recipient information for any purpose other than producing our clients’ mailings, and we do not build profiles of mail recipients.

5. How we use information (our own operations)

We use the information in Section 2 to: provide and improve the Site and our services; prepare Mail Audits, quotes, and proposals; communicate about inquiries, campaigns, invoices, and support; market our services to businesses (subject to Section 8); maintain security, prevent fraud, and debug; comply with law and enforce agreements; and create de-identified, aggregated data (for example, industry benchmark statistics). Where we hold de-identified data, we keep it de-identified and do not try to re-identify it.

6. How we share information

We share personal information from Section 2 only with: service providers that support our operations (hosting, analytics, email, CRM, payment processing), limited to using it on our behalf; printer partners as needed to deliver services; professional advisors (lawyers, accountants, insurers); authorities where required by law or to protect rights and safety; a successor in a merger, financing, or sale of assets (this Policy would continue to apply, or you would be notified of changes); or at your direction.

We do not sell personal information, and we do not use it for targeted advertising.

7. Cookies and analytics

The Site uses essential cookies (to make the Site work) and analytics cookies (to understand usage and improve the Site). You can control cookies in your browser; blocking essential cookies may impair the Site. Where a legal opt-out right applies to cookie-based processing, we honor recognized universal opt-out signals such as Global Privacy Control (GPC). The Site does not respond to legacy “Do Not Track” signals.

8. Your communication choices

Marketing email: unsubscribe via the link in any marketing email; we honor opt-outs promptly. Transactional emails (proofs, invoices, campaign updates) continue while we work together. Texts: we text only numbers you provide, about your inquiry or account; reply STOP to opt out (message and data rates may apply). Consent to marketing texts is never a condition of doing business with us. Calls: ask us to stop and we will.

9. Your privacy rights

Depending on your state, you may have legal rights to access, correct, delete, or obtain a portable copy of your personal information, and to opt out of targeted advertising, sales, or certain profiling. We extend the core rights to all U.S. residents regardless of state: you may request access to, correction of, deletion of, or a copy of the personal information we hold about you in our own operations, and you may opt out of our marketing at any time.

To exercise rights: email legal@blackjay.ai with your name, contact information, and request. We verify requests against the information we hold (and may ask for more, solely to verify identity), respond within 45 days (with extensions where the law allows), and never discriminate against you for exercising your rights. Authorized agents may submit requests with proof of authorization. If we decline a request, you may appeal by replying to our decision; if you remain unsatisfied, you may contact your state Attorney General.

Requests about mailing lists: if your request concerns data we process for a client (Sections 3–4), we forward it to the responsible advertiser and assist them as their service provider; under applicable privacy laws, the decision on such requests belongs to the advertiser.

10. Retention

We keep: inquiry and lead information while it stays relevant to a potential relationship, up to 2 years after last meaningful contact; client records for the relationship plus the period needed for legal, tax, and accounting purposes; Client Mailing Data per Section 3; suppression records for as long as needed to honor them (deleting a suppression record would defeat its purpose); and Site analytics in identifiable form no longer than needed for the purposes above. When information is no longer needed, we delete or de-identify it.

11. Security

We use commercially reasonable administrative, technical, and physical safeguards appropriate to the data we handle. No method of transmission or storage is completely secure, and we cannot guarantee absolute security; we will provide legally required notifications if a breach affects your information.

12. Children

The Site and our services are for businesses and are not directed to anyone under 18. We do not knowingly collect personal information from children under 13; if you believe a child has provided us information, contact us and we will delete it.

13. United States only

We operate from the United States and direct the Site and our services to U.S. businesses. If you access the Site from outside the U.S., your information is processed in the U.S. under this Policy and U.S. law.

14. Changes to this Policy

We may update this Policy by posting a revised version with an updated date, with reasonable notice of material changes. Continued use of the Site after the effective date means you accept it.

15. Contact

Blackjay, LLC · Washington, D.C. · legal@blackjay.ai