Privacy Policy

Welcome to Bleaum!

This Privacy Policy explains how Bleaum Inc. and its affiliates ("Bleaum", "we", "us", or "our") collect, use, and disclose your Personal Information when you access or use our products and services. These include our point-of-sale systems, mobile apps, eCommerce tools, payment processing services, hardware, APIs, customer accounts, and our websites (collectively, the "Services").

This Privacy Policy applies to the following categories of individuals:

• Retailers: Businesses that contract with Bleaum for the use of our Services.
• Retail Employees: Employees of businesses using our Services.
• Customers: Individuals making purchases or interacting with Retailers via Bleaum-powered Services.
• Website Visitors: Individuals visiting any Bleaum website or application.
• Business Partners: Third-party integration and service partners of Bleaum.

Unless a data subject interacts directly with Bleaum (e.g., requesting a demo or contacting us directly), we process personal information solely on behalf of our Retailer customers. Retailers are responsible for managing privacy requests from their own customers or users. If you are a Customer of a Retailer, please refer to the Retailer's privacy policy and contact them for questions or concerns.

This Privacy Policy may include additional location-specific information depending on applicable laws. Please refer to the appropriate schedule at the end of this document if you reside in California, Virginia, Colorado, Connecticut, or Canada.

By using our Services, you agree to the collection, use, and disclosure of your information as outlined in this Privacy Policy. If you do not agree with our policies, do not use our Services or submit your personal information.

Personal Information We Collect

We may collect and combine information that identifies, relates to, describes, or could be reasonably linked to you ("Personal Information") in the following ways:

Information You Provide

• Identification Details: Name, email, phone number, address, date of birth, and government-issued ID documents.
• Service-Specific Data: For example, business ownership and identification information required for underwriting or payment services.
• Financial Information: Payment details submitted during subscription or checkout, which are tokenized and handled via third-party processors.
• Communication Data: Information you provide when contacting us, completing surveys, or participating in market research.
• Location Data: IP address or entered location to find Retailers or enable deliveries.
• Transaction History: Products viewed or purchased through the Services.
• Health Information: Medical ID or cannabis medical card information, where applicable and legally permissible.
• Social Media Data: Interactions with Bleaum on Instagram, Twitter, Facebook, or other platforms.
• Internet Activity Data: Browser info, device type, usage patterns, cookies, and pixels for analytics and marketing.

How We Use Personal Information

We use your Personal Information for the following purposes:

• To operate, improve, and deliver our Services
• To evaluate eligibility to use certain features (e.g., payment processing)
• To respond to inquiries, support requests, or demo submissions
• To send you administrative, promotional, or product-related communications
• To analyze usage patterns and develop new features
• To prevent fraud, enforce security, and comply with legal obligations
• For research, analytics, and internal development
• For personalized advertising and marketing, where permitted

Sharing and Disclosure of Personal Information

We may share your Personal Information with:

• Retailers: To deliver Services and help them serve their customers.
• Service Providers: For hosting, analytics, payment processing, compliance, etc.
• Business Partners: For integration and enhancement of our platform.
• Legal Authorities: Where required to comply with the law or to protect rights.
• Affiliates and Successors: In the event of a business transaction like a merger or acquisition.

We do not sell your Personal Information.

Children

Our Services are not directed to individuals under the age of 18 (or the equivalent age of majority in your jurisdiction). We do not knowingly collect Personal Information from children.

Security

We use reasonable organizational, technical, and administrative measures to protect Personal Information within our organization.

Your Choices

You may opt out of marketing emails or texts by using the unsubscribe link or replying "STOP" where applicable. For questions about your data or to exercise rights under local law, please contact comms@bleaum.io.

Changes to This Privacy Policy

We may update this policy from time to time. When we do, we will revise the "Last Updated" date. We encourage you to review the Privacy Policy regularly.

Contact Us

If you have any questions about this Privacy Policy or your personal information, you may contact us at:

Location-Specific Schedules

Refer to the following schedules if you are located in:

• Schedule A – California Residents
• Schedule B – Virginia Residents
• Schedule C – Colorado Residents
• Schedule D – Connecticut Residents
• Schedule E – Canada Residents

Schedule A: For California Residents (CCPA Compliance)

This section applies to California residents and outlines rights under the California Consumer Privacy Act (CCPA), as amended by the CPRA.

1. Personal Information Collected

Below are the types of personal information Bleaum may collect, how we use it, and who we may share it with:

2. Sensitive Personal Information

Bleaum may process sensitive data as needed to deliver services—especially around payments. We do not sell or share this data for advertising.

3. No Selling of Personal Information

Bleaum does not sell your personal information.

4. Your Rights Under the CCPA

As a California resident, you have the right to:

• Know what data Bleaum collects and how it's used
• Access or delete your personal information
• Correct inaccurate information
• Limit use of sensitive information
• Opt out of data sharing (though Bleaum does not currently share for advertising)
• Not face discrimination for exercising your rights

Schedule B — Virginia Residents

This Schedule supplements our Privacy Policy and applies to residents of Virginia covered under the Virginia Consumer Data Protection Act (VCDPA). All references to "Personal Information" mean "personal data" as defined by the VCDPA.

Your rights under the VCDPA include:

• Right of Access: Confirm whether Bleaum is processing your Personal Information and access it.
• Right of Correction: Correct inaccuracies in your Personal Information.
• Right of Deletion: Request deletion of your Personal Information.
• Right of Portability: Obtain a copy of your Personal Information in a portable, readily usable format.
• Right to Opt Out: Opt out of targeted advertising, sale of Personal Information, and profiling for decisions with legal or similarly significant effects.

Schedule C — Colorado Residents

Under the Colorado Privacy Act (CPA), Colorado residents have similar rights:

• Right of Access
• Right of Correction
• Right of Deletion
• Right of Portability
• Right to Opt Out of targeted advertising, sale of Personal Information, and profiling.

Schedule D — Connecticut Residents

Connecticut residents under the Connecticut Data Privacy Act (CTDPA) have the right to:

• Access
• Correct
• Delete
• Port their Personal Information
• Opt Out of targeted advertising, sale of Personal Information, and profiling.

Schedule E — Canadian Residents

This Schedule applies to individuals in Canada under applicable Canadian privacy laws including PIPEDA.

Consent

By using Bleaum's services, you consent to the collection and use of your Personal Information as described. You may withdraw consent at any time, though this may impact our ability to provide services.

Access and Correction

You may request access to, or correction of, your Personal Information. To do so, email comms@bleaum.io. We will respond within applicable legal timeframes.