Data Privacy Policy
Blockzo.io (“Blockzo,” “we,” “us,” or “our”) is committed to protecting privacy and personal data. This Data Privacy Policy explains how we collect, use, store, share, safeguard, retain, and delete personal data when individuals or organizations access or use our website, applications, products, and services (collectively, the “Services”).
This policy applies to:
-
Visitors to blockzo.io
-
Users of the Services
-
Customers and business clients (“Clients”)
-
End-users whose data is processed through a Client’s use of the Services (“End-Clients”)
1. Definitions
For purposes of this Policy:
-
Personal Data means information that identifies, relates to, describes, or could reasonably be linked to an individual.
-
Client means a business or organization that uses Blockzo Services.
-
End-Client means an individual whose Personal Data is processed through a Client’s use of Blockzo Services.
-
Processing means collecting, storing, using, sharing, transmitting, deleting, or otherwise handling data.
2. What Data We Collect
Blockzo may collect the following categories of data depending on how you interact with the Services.
2.1 Data You Provide Directly
We may collect:
-
Identity and contact information
-
Name
-
Email address
-
Phone number
-
Company name
-
Job title
-
-
Account information
-
Username
-
Account preferences
-
Authentication details (stored securely)
-
-
Billing and payment-related information
-
Billing address
-
Payment status and invoice history
(Note: payment card information is typically processed by third-party payment processors and not stored directly by Blockzo.)
-
-
Support and communications
-
Messages you send via forms, chat, or email
-
Support tickets
-
Feedback submissions
-
2.2 Data Collected Automatically (Website and Service Usage)
When you use blockzo.io or the Services, we may automatically collect:
-
Device and technical data
-
Device type
-
Operating system
-
Browser type
-
Language settings
-
-
Log and usage data
-
IP address
-
Approximate location (derived from IP)
-
Date/time of access
-
Pages visited and interactions
-
Referring URLs
-
-
Cookie and tracking data
-
Cookie identifiers
-
Analytics signals
-
Session activity
-
2.3 Data Processed on Behalf of Clients (End-Client Data)
If a Client uses Blockzo to manage or process information relating to End-Clients, we may process:
-
Names and contact details
-
Customer or end-user identifiers
-
Transaction records (as uploaded by the Client)
-
Communications records (if used within the Client’s workflow)
-
Any other data uploaded or submitted by the Client to the Services
Blockzo processes this data as a service provider / processor on behalf of the Client.
2.4 Sensitive Data
Blockzo does not intentionally collect sensitive personal data (such as government ID numbers, biometric data, health data, or precise geolocation), unless a Client uploads such information into the Services. Clients are responsible for ensuring they have lawful grounds to upload and process such data.
3. Purposes for Which We Use Data
We process personal data for the following purposes:
3.1 To Provide and Operate the Services
-
Creating and managing accounts
-
Enabling platform functionality
-
Providing access to features and tools
-
Authenticating users
-
Processing transactions and subscriptions
3.2 To Improve the Services
-
Monitoring performance and reliability
-
Diagnosing bugs and errors
-
Understanding usage trends and feature engagement
-
Developing new functionality
3.3 Customer Support and Communications
-
Responding to inquiries
-
Troubleshooting issues
-
Providing service announcements
-
Sending updates relating to account status
3.4 Security and Fraud Prevention
-
Preventing unauthorized access
-
Monitoring for suspicious activity
-
Securing infrastructure
-
Enforcing policies and agreements
3.5 Legal and Compliance Purposes
-
Meeting legal obligations
-
Responding to lawful requests
-
Maintaining records required for auditing or compliance
-
Resolving disputes
4. How Data Is Stored
Blockzo stores personal data in secure systems including:
-
Cloud-hosted servers and databases
-
Encrypted storage services
-
Access-controlled internal administrative systems
We take reasonable steps to ensure that personal data is stored:
-
In environments protected by access controls
-
With encryption where appropriate
-
With monitoring and audit logging
5. How Data Is Shared
Blockzo does not sell personal data.
We may share data only in the following cases:
5.1 With Service Providers (Subprocessors)
We may share personal data with trusted third-party vendors that help us operate the Services, such as:
-
Cloud hosting providers
-
Analytics providers
-
Customer support platforms
-
Email delivery services
-
Payment processors
-
Security monitoring providers
These providers are authorized to process data only as necessary to provide services to Blockzo and are contractually required to protect the data.
5.2 With Clients (For End-Client Data)
If you are an End-Client, your data may be visible to and controlled by the Client that collected it and used Blockzo to process it.
5.3 For Legal Reasons
We may disclose data when required to:
-
Comply with law, regulation, subpoena, or court order
-
Respond to valid governmental requests
-
Protect the rights, safety, and security of Blockzo, our Clients, End-Clients, and others
5.4 Business Transfers
If Blockzo is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, personal data may be transferred as part of that transaction, subject to applicable law.
6. How Data Is Safeguarded
Blockzo uses administrative, technical, and organizational safeguards designed to protect personal data from unauthorized access, disclosure, alteration, or destruction.
Safeguards may include:
-
Encryption in transit (TLS/HTTPS)
-
Encryption at rest where feasible
-
Role-based access control (RBAC)
-
Multi-factor authentication for administrative access
-
Logging and monitoring
-
Vulnerability management and patching
-
Secure backups and recovery procedures
-
Least-privilege access policies
-
Vendor risk management and contractual protections
No system can be guaranteed 100% secure, but we maintain reasonable and industry-standard measures to reduce risk.
7. Data Retention (Five-Year Retention Period)
Blockzo retains personal data for five (5) years unless a longer retention period is required by law or necessary for legitimate business purposes (such as dispute resolution, enforcing agreements, or compliance obligations).
7.1 Retention Rules
-
Account data: retained for up to 5 years after account closure or last activity.
-
Client and End-Client data: retained for up to 5 years after termination of the Client’s contract, unless deleted earlier at the Client’s request.
-
Support communications: retained for up to 5 years after resolution.
-
Security logs: retained for up to 5 years unless legally required to retain longer.
7.2 Deletion Before the Retention Period Ends
We may delete data earlier if:
-
It is no longer needed for the purposes it was collected
-
The data subject requests deletion (and we are legally obligated to comply)
-
The Client requests deletion of End-Client data
-
Continued retention is not required for compliance or legitimate interests
7.3 Backups
Data may remain in encrypted backups for a limited period after deletion. Backup data is securely stored and isolated, and it is deleted according to the same five-year retention policy.
8. Your Rights: Correction, Deletion, and Access
Depending on your jurisdiction, you may have the right to:
-
Request access to personal data we hold about you
-
Request correction of inaccurate personal data
-
Request deletion of personal data
-
Object to or restrict processing in certain circumstances
-
Request portability of your personal data
9. End-Client Requests (Deletion or Correction)
If you are an End-Client, Blockzo typically acts as a data processor on behalf of the Client. This means the Client controls your personal data and is responsible for responding to most requests.
However, Blockzo will assist Clients and End-Clients with valid requests as required by law.
9.1 How an End-Client Can Request Deletion or Correction
An End-Client may request deletion or correction by:
-
Contacting the Client directly (recommended and fastest)
The organization that collected your data controls how it is used within Blockzo.
-
Contacting Blockzo directly
You may submit a request by emailing:
Subject line: “Privacy Request – End-Client Data”
Your request should include:
-
Your full name
-
The Client/organization you interacted with (if known)
-
The email address or identifier used
-
The specific request:
-
Delete my personal data, or
-
Correct my personal data
-
-
Any relevant details to help locate your records
9.2 Identity Verification
To protect your privacy, we may require verification before processing requests. This may include confirming control of an email address or providing additional identifying details.
9.3 Response Time
Blockzo will respond within a reasonable timeframe, typically within 30 days, unless the request is complex or requires additional verification.
9.4 Limits and Exceptions
We may deny or partially comply with a request if:
-
We are legally required to retain the data
-
Deleting the data would compromise security or fraud prevention
-
The request relates to data controlled by a Client and must be handled by that Client
10. Cookies and Tracking Technologies
Blockzo may use cookies and similar technologies for:
-
Website functionality
-
Analytics and performance monitoring
-
Session management
-
Security protections
You may control cookies through your browser settings. Disabling cookies may impact site functionality.
11. International Data Transfers
Blockzo may store or process personal data in countries other than your own, depending on where our infrastructure and service providers operate.
Where required by law, we use appropriate safeguards for international transfers, such as contractual protections and standard transfer mechanisms.
12. Children’s Privacy
The Services are not intended for children under 13 (or the minimum age required by local law). We do not knowingly collect personal data from children.
If you believe a child has provided personal data, contact us at info@blockzo.io.
13. Changes to This Policy
We may update this Data Privacy Policy from time to time. When we do, we will revise the “Last Updated” date and may provide additional notice where required.
Continued use of the Services after changes become effective constitutes acceptance of the updated policy.
14. Contact Us
For questions, concerns, or privacy requests, contact:
​
Email: info@blockzo.io