Privacy Policy

Information you give us.

• Contact details: your name, business name, email address and phone number when you request a savings review, start an application, ask a question, or ask about becoming an agent.
• Processing statements: if you upload a statement for a savings review, we receive the file and the information in it (such as card volume, fees and your current provider).
• Application details: business information (legal and DBA names, address, ownership type, business type, sales volumes) and owner and contact information (names, titles, ownership percentages, home addresses, email and phone).
• Sensitive identifiers: Social Security numbers, dates of birth, federal tax ID numbers, bank routing and account numbers, and voided check images are entered on a secure page and sent directly to our processing partners for underwriting. BlkFin keeps only the last four digits and a note that the information was provided.
• Account and portal information: login email, password (stored only as a secure hash), two-step verification settings, user permissions, and the preferences and settings you choose.
• Payment and customer information merchants enter: when merchants use the Virtual Terminal, invoices, payment links or recurring billing, they may enter their customers’ names, email addresses, phone numbers and billing details. Card numbers are captured by our processing partner’s secure fields and replaced with a token; BlkFin stores only the token, card brand and last four digits.
• Communications: support requests and messages you send us.

Information we receive from our processing partners. For merchants we serve, our processing partners provide account and reporting information, including transactions, batches, deposits, chargebacks, disputes, statements and account status.

Information collected automatically. When you use the Services we receive technical information such as your IP address, browser type, the page that referred you, and campaign tags in links (for example, utm parameters). On our public forms we store a one-way hashed version of your IP address to prevent abuse and spam. For signatures on applications, we record the IP address, time and browser used, as evidence of the signature.

• To prepare savings reviews and pricing proposals, including analyzing uploaded statements.
• To evaluate, prepare and submit merchant applications, and to open, configure and support merchant accounts.
• To provide the portals: reporting, the Virtual Terminal, invoices, payment links, receipts, statements, recurring billing and support.
• To send service messages, such as application status, receipts, statements, security notices and responses to your requests.
• To contact you about the products or services you asked about. You can ask us to stop at any time.
• To protect the Services and our users: verifying identity, preventing fraud and spam, enforcing limits, and keeping audit records of administrative and account changes.
• To meet legal, regulatory and card network requirements, and to improve the Services.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We share information only as described here:

• Processing partners and sponsor banks that underwrite, board and process merchant accounts, as required to provide merchant services.
• Your account team: the independent sales organization and agent who manage your account see the information needed to serve it. If you reach us through an agent’s referral link, that agent receives your request.
• Service providers that operate parts of the Services for us under confidentiality obligations, such as cloud hosting and databases, email delivery, and document analysis (including AI services used to read uploaded statements). They may use the information only to provide their services to us.
• Merchants’ customers: receipts, invoices and payment links show the merchant’s business details to the customers the merchant sends them to.
• Legal and safety: when required by law, legal process or card network rules, or to protect the rights, property or safety of BlkFin, our users or others.
• Business transfers: in connection with a merger, acquisition or sale of assets, subject to this policy.

If you connect QuickBooks Online, we access, with your authorization through Intuit, your company name; your customers’ names, email addresses, phone numbers and billing addresses; your invoices; and your account names. We use this only to provide the QuickBooks features you turn on: sending your invoices and reminders, taking payments, and recording payments and deposits in your QuickBooks company.

• Your QuickBooks connection credentials are encrypted, never shown in a browser and never shared.
• We don’t sell QuickBooks data, use it for advertising, or use it to train AI models.
• Your customers’ contact details are used only to send them your invoices, reminders and receipts. They can turn off reminders from any invoice.
• When you disconnect, we stop accessing your company and delete our access credentials. We keep the invoices, payments and deposit records the Services created, as part of your account’s payment history. To have the other QuickBooks data we hold for you deleted, email us; we’ll delete it within 30 days, except records we must keep by law or card network rules.

Family Money is our private portal for budgeting, net worth and bookkeeping. If you connect a bank, credit card, loan or investment account to it, we use Plaid Inc. (“Plaid”) to make the connection. You sign in to your financial institution through Plaid; we never see or store your bank username or password. Plaid’s handling of your information is described in the Plaid End User Privacy Policy.

With your authorization, we receive from Plaid: account names and types, the last four digits of account numbers, balances, transactions (date, amount, description and merchant), investment holdings and investment transactions, and loan balances. We do not receive full account numbers. The connection is read-only: we never move money or make payments from connected accounts.

• We use this information only to provide Family Money to you: categorizing spending, tracking budgets and net worth, keeping your business books, and producing the reports and summaries you ask for.
• We don’t sell it, use it for advertising, or share it with anyone except the service providers who host and run Family Money for us. Where Family Money uses an AI service to write a summary or suggestion, the provider processes the information only to return that result and may not use it to train its models.
• Plaid access credentials are encrypted, never shown in a browser and never shared. Signing in to Family Money always requires two-step verification.
• You can disconnect an account at any time. We then revoke the connection with Plaid and delete its access credentials. To have the financial data we hold deleted, email us; we’ll delete it within 30 days, except records we must keep by law.

We use a small number of cookies that are needed for the Services to work: a session cookie that keeps you signed in to a portal, and preference cookies such as the location you last used in the Virtual Terminal. We do not use advertising cookies, and we do not allow third-party ad networks to track you on our Services. You can block cookies in your browser, but the portals will not work without the sign-in cookie.

We use safeguards designed for payments data, including:

• Encryption in transit (HTTPS) on every page, and encryption of stored credentials and keys.
• Card numbers captured by our processing partner’s secure fields and tokenized, so they never touch BlkFin’s servers.
• Sensitive identifiers and bank numbers passed straight through to our processing partners, never stored by BlkFin.
• Two-step verification for all administrators (and available to every user), role-based access limited to what each person needs, and an audit log of administrative actions and account changes.

No system is perfectly secure. If we learn of a security incident that affects your information, we will notify you as required by law.

• Transaction detail in the merchant portal is kept for the current month and the previous six full months. Statements stay available for many years.
• Applications, signatures and account records are kept for as long as the account is open and afterward as required by law, card network rules and our processing partners.
• Website requests and uploaded statements from businesses that do not open an account are kept only as long as needed to respond and follow up, then deleted on request or in our regular clean-up.
• Audit records are kept as long as needed for security and compliance.

• Access, correction and deletion: you can ask to see, correct or delete personal information we hold about you. Some information must be kept for legal, regulatory or card network reasons; we will tell you if that applies.
• Marketing: you can ask us to stop contacting you about our services at any time; service messages about your account will continue while it is open.
• Portal users can update their profile and notification settings in the portal, and merchants can manage which of their team members have access.
• State privacy rights: depending on where you live, you may have additional rights (for example, under the California Consumer Privacy Act). We will honor them as the law requires and will not discriminate against you for using them.

To make a request, email support@blkfinintel.com. We may need to verify your identity before acting on it.

When you give us your phone number on a form, we may call you about the request you made. We send emails about your requests and accounts. We do not send marketing text messages without your consent; if we offer text messages (for example, receipts or payment links), we will explain what you will receive and how to opt out, and you can reply STOP at any time.

The Services are for businesses and are not directed to children under 13. We do not knowingly collect information from children.

We may update this policy as the Services change. We will post the new version here with a new effective date, and for significant changes we will give notice through the Services or by email.

Questions about this policy or your information: support@blkfinintel.com, or write to us at:

BlkFin Merchant Intelligence, LLC
1001 S. Main St. #12973
Kalispell, MT 59901, USA