Privacy Policy

1. Who We Are

Blackbook is operated by Dobry Consulting, LLC (“we,” “us,” or “our”). For personal data you provide in connection with your Blackbook account and deal data, Dobry Consulting, LLC is the data controller.

2. Information We Collect

We collect the following categories of personal data:

• Account data: name, email address, login credentials, and profile details.
• Deal data: the company, contact, product, deal size, commission, close date, employer at the time, and other information you choose to enter.
• Support data: messages, attachments, and correspondence you send us.
• Technical and usage data: IP address, device and browser identifiers, log data, and usage telemetry.
• Payment data: collected and processed by our payment provider (see Section 5). We receive limited transaction metadata, not full card details.

3. How and Why We Use Your Information

We use your personal data for the following purposes and legal bases (GDPR Article 6):

• To provide the Service (create your account, store your deals, deliver features) — legal basis: performance of a contract.
• To secure the Service (fraud prevention, abuse detection, access control) — legal basis: our legitimate interests in operating a safe service.
• To improve the product (aggregate analytics, debugging) — legal basis: our legitimate interests.
• To communicate with you (transactional and account emails) — legal basis: performance of a contract; marketing emails only with your consent.
• To comply with law (tax, accounting, legal requests) — legal basis: legal obligation.

We do not sell your personal data.

4. Data Storage and Security

Your data is stored with encrypted cloud infrastructure and protected by row-level security so that only you can access the deals you create. We use appropriate technical and organizational measures including encryption in transit, access controls, and least-privilege authentication. No system is 100% secure.

5. Sharing and Recipients

We do not share your deal data with employers, third-party advertisers, or data brokers. We share limited personal data with the following categories of recipients:

• Paddle.com Market Limited (“Paddle”) — our Merchant of Record and payment processor. When you purchase or manage a subscription, Paddle receives your name, email, billing address, payment details, and transaction information in order to process the sale, manage the subscription, calculate and remit sales tax and VAT, issue invoices, and handle refunds and chargebacks. Paddle acts as an independent controller for payment processing. See Paddle’s Privacy Notice.
• Infrastructure and service providers — hosting, database, authentication, analytics, and email delivery providers acting as our processors under contract.
• Professional advisers — legal, accounting, and compliance advisers where necessary.
• Authorities — where required by law, court order, or to protect our rights.

6. Data Retention

We retain account and deal data for as long as your account is active. If you delete your account, we delete or anonymize your personal data within 30 days, except where retention is required for legitimate business purposes (for example, security investigations) or by law (for example, tax and accounting records, typically retained for up to 7 years). Backups may persist for a limited period until they are rotated out.

7. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, export, delete, or restrict processing of your personal data, to object to processing, to withdraw consent, and to lodge a complaint with your local data protection authority. To exercise these rights, contact us at the address in Section 10. We will respond within the timeframe required by applicable law (typically one month under GDPR).

8. International Transfers

We and our service providers may process personal data in the United States and other countries. Where personal data is transferred out of the UK or EEA, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

9. Cookies

We use strictly necessary cookies and similar technologies to keep you signed in and secure the Service. We do not currently use advertising cookies.

10. Contact and Changes

For privacy questions or to exercise your rights, contact Dobry Consulting, LLC through the support channel available in your account. We may update this Privacy Policy from time to time and will post the updated version in the Service.