DRAFT · OWNER REVIEW REQUIRED
Privacy information
Prepared for the BloodsFC workflows. Updated 4 October 2026.
Purpose and data
We record customer identity, non-secret account metadata, consent, quotes, order events, recipient profiles and security/audit activity to operate and reconcile the service. Credentials, when a verified vault is configured, go through dedicated encrypted intake with short job-scoped access. Payment PINs, card secrets, authenticator seeds and wallet private keys are not accepted.
Access and service providers
Private pages use scoped authorization and no third-party analytics. Only authorized operators may view necessary records; revealing a recipient destination requires financial permission and an audited reason. Any hosting, authentication or delivery provider must be approved and documented before activation. No credentials go to an unapproved checker service.
Retention and requests
Expired sessions and account drafts have configurable cleanup. Order, consent and accounting history is retained until approved legal and financial retention rules apply. Account owners can revoke future account execution and request access, correction or deletion review through support. Deletion may be limited by required accounting history; the responsible entity and applicable retention schedule require approval before launch.