1. Introduction
BlessRun Services LLC ("BlessRun," "we," "our," or "us") operates the platform available at blessrun.com and related mobile and web applications (collectively, the "Platform"). We connect customers with independent service providers for errand running, grocery shopping, senior support, companion visits, and other personal services.
This Privacy Policy describes how we collect, use, disclose, and safeguard your personal information when you use the Platform. It also describes the rights you have under applicable law, including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), and other applicable U.S. state privacy laws.
By using the Platform you agree to the practices described in this policy. If you do not agree, please do not use the Platform.
2. Personal Data We Collect
We collect personal information you provide directly, information generated by your use of the Platform, and information from third-party partners. The categories below reflect what we have collected in the past 12 months.
| Category | Examples | Source |
|---|---|---|
| Name | First name, last name, display name | You (registration, booking) |
| Email address | Account email, notification email | You (registration) |
| Phone number | Mobile or landline number | You (registration, booking) |
| Payment information | Card type, last 4 digits, billing address, Stripe customer ID, payment intent ID | Stripe (we do not store raw card numbers) |
| Government-issued ID | Driver's license, passport scan, ID number | Persona SDK (identity verification) |
| Biometric data | Facial geometry extracted during Persona identity verification | Persona SDK |
| Geolocation | Approximate location derived from IP; precise location if you grant permission | Your device / browser |
| Device ID & IP address | Browser fingerprint, device type, operating system, IP address | Automatically collected |
| Booking history | Services booked, provider selected, dates, hours, amounts, booking status | Platform activity |
| AI chat logs | Messages sent to and received from the BlessRun Concierge chatbot (Baskey) | OpenAI API (Baskey) |
| Account credentials | Hashed password, OAuth tokens (Google Sign-In) | You / Google OAuth |
| Provider application data | Work history, service offerings, Persona verification status, Stripe setup intent | You (provider application) |
We do not collect Social Security numbers, financial account numbers beyond what Stripe processes, or health/medical records unless you voluntarily provide them in a message or booking note.
3. Why We Collect Each Category
| Data Category | Purpose |
|---|---|
| Name & email | Create and manage your account; send booking confirmations, receipts, and service notifications |
| Phone number | Two-factor authentication; provider/customer coordination; urgent service updates |
| Payment information (via Stripe) | Process booking payments; authorize and capture payment holds; issue refunds; prevent fraud |
| Government-issued ID (via Persona) | Verify provider identity as required for background checks and platform trust; comply with applicable regulations |
| Biometric data (via Persona) | Confirm that the person submitting an ID matches the ID document during provider verification |
| Geolocation | Match customers with nearby providers; display relevant service areas; improve search results |
| Device ID & IP address | Fraud detection; security monitoring; analytics; enforce Terms of Service |
| Booking history | Display past bookings in your dashboard; calculate membership discounts; generate provider earnings reports; resolve disputes |
| AI chat logs (Baskey) | Provide real-time AI-assisted answers about services, pricing, and bookings; improve chatbot accuracy |
| Account credentials | Authenticate your identity when you log in; enable password reset |
| Provider application data | Evaluate provider applications; set up provider Stripe accounts; onboard approved providers |
We process your personal information on the following legal bases: (a) performance of a contract — to provide the services you request; (b) legitimate interests — fraud prevention, platform security, and service improvement; (c) your consent — where required by law (e.g., biometric data collection); and (d) legal obligation — to comply with applicable laws.
4. Who We Share Your Data With
We do not sell your personal information to data brokers. We share data only as described below.
Data shared: Name, email, billing address, payment card details, booking amounts
Purpose: Process payments, authorize holds, capture charges, issue refunds
Data shared: Chat messages you send to the BlessRun Concierge widget
Purpose: Generate AI responses to your questions about services and bookings
Data shared: Government-issued ID images, selfie/facial geometry, verification status
Purpose: Verify provider identity and perform background check eligibility screening
Data shared: Name, email address, booking details included in email content
Purpose: Deliver booking confirmations, receipts, password resets, and platform notifications
Data shared: Mobile phone number and the content of the text message sent to you
Purpose: Send booking updates, identity-verification links, and other texts you have consented to receive
Data shared: As necessary for each service
Purpose: Hosting, database, analytics, customer support tooling — all bound by data processing agreements
Data shared: Your name, contact information, service address, booking details
Purpose: Enable the provider you booked to fulfill your requested service
Data shared: As required by valid legal process
Purpose: Comply with court orders, subpoenas, or other legal obligations; protect rights and safety
In the event of a merger, acquisition, or sale of all or substantially all of our assets, your personal information may be transferred to the acquiring entity. We will notify you via email and/or a prominent notice on the Platform before your information becomes subject to a different privacy policy.
5. How Long We Retain Your Data
We retain personal information only as long as necessary for the purposes described in this policy, or as required by law. The specific timeframes below are our standard retention periods.
| Data Type | Retention Period | Reason |
|---|---|---|
| Account information (name, email, phone) | Duration of account + 3 years after deletion request | Dispute resolution, legal compliance |
| Booking records | 7 years from booking date | Tax records, financial compliance, dispute resolution |
| Payment records (Stripe transaction IDs) | 7 years | Financial and tax compliance (IRS requirements) |
| Government-issued ID images (Persona) | Deleted by Persona per their retention policy (typically 3 years) | Persona controls this data; see Persona privacy policy |
| Biometric data (facial geometry) | Deleted within 3 years of collection or upon account deletion, whichever is sooner | BIPA and applicable biometric privacy laws |
| AI chat logs (Baskey / OpenAI) | Not stored by BlessRun; OpenAI retains per their data retention policy (typically 30 days) | We do not log chat content on our servers |
| Geolocation data | Session-only; not stored beyond the active session | Used only for real-time provider matching |
| Device ID & IP address (logs) | 90 days in server logs | Security monitoring and fraud detection |
| Marketing email preferences | Until you unsubscribe or delete your account | Consent management |
| Provider application data | 5 years from application date | Compliance, re-application eligibility |
| Deleted account data | Anonymized within 30 days of verified deletion request | Aggregate analytics only |
After the applicable retention period, we securely delete or anonymize your personal information. You may request earlier deletion subject to the exceptions described in Section 6.
6. Your Consumer Rights
Depending on your state of residence, you may have some or all of the following rights regarding your personal information. California residents have rights under the CCPA/CPRA. Residents of Virginia, Colorado, Connecticut, Texas, and other states with comprehensive privacy laws have similar rights under those laws.
Right to Know
You may request that we disclose the categories and specific pieces of personal information we have collected about you, the sources, our business purpose for collecting it, and the categories of third parties with whom we share it.
Right to Delete
You may request that we delete personal information we have collected from you, subject to certain exceptions such as completing a transaction, legal obligations, or fraud prevention.
Right to Correct
You may request that we correct inaccurate personal information we maintain about you.
Right to Data Portability
You may request a copy of the personal information you provided to us in a portable, machine-readable format.
Right to Opt-Out of Sale/Sharing
You may direct us not to sell or share your personal information with third parties for cross-context behavioral advertising. See Section 7 for the opt-out mechanism.
Right to Limit Sensitive Data Use
You may direct us to limit our use and disclosure of sensitive personal information, including biometric data, to purposes necessary to provide the services you requested.
Right to Non-Discrimination
We will not discriminate against you for exercising any of your privacy rights. We will not deny services, charge different prices, or provide a different level of service because you exercised a privacy right.
Right to Appeal
If we deny your privacy request, you may appeal our decision by contacting us at info@blessrun.com. We will respond to your appeal within 60 days.
Submit a Privacy Request
Use our dedicated privacy request form to exercise any of the rights above. We will respond within 45 days, extendable by an additional 45 days with notice.
We may need to verify your identity before processing your request. We will not require you to create an account solely to submit a privacy request. You may designate an authorized agent to submit a request on your behalf by providing written authorization.
7. Do Not Sell or Share My Personal Information
Under the CCPA/CPRA, you have the right to opt out of the "sale" or "sharing" of your personal information. For purposes of this section, "sharing" includes disclosing personal information to third parties for cross-context behavioral advertising, even if no money changes hands.
What we do: We do not sell your personal information to data brokers or third-party advertisers. We do not share your personal information for cross-context behavioral advertising. We share data only with service providers who process it on our behalf under binding data processing agreements.
Your opt-out right: Even though we do not currently sell or share personal information for advertising, you may submit a formal opt-out request using the button below. We will honor your request and record your preference.
Opt Out of Sale / Sharing
Submit a formal opt-out request. We will record your preference and confirm within 15 business days.
California residents may also use the Global Privacy Control (GPC) browser signal. If we detect a GPC signal from your browser, we will treat it as an opt-out of sale/sharing for that browser session.
8. Sensitive Personal Information
Important disclosure: BlessRun collects certain categories of sensitive personal information as defined under the CCPA/CPRA and other applicable privacy laws. This section describes what sensitive data we collect and how we use it.
| Sensitive Data Category | How Collected | Purpose | Retention |
|---|---|---|---|
| Biometric identifiers (facial geometry) | Persona SDK during provider identity verification | Confirm that the person submitting a government ID matches the ID document; prevent identity fraud | Deleted within 3 years of collection or upon account deletion, whichever is sooner |
| Government-issued ID (driver's license, passport) | Persona SDK during provider verification | Verify provider identity; comply with background check requirements | Controlled by Persona; typically deleted within 3 years per Persona's retention policy |
| Precise geolocation (if granted) | Your device/browser with your explicit permission | Match you with nearby providers; display accurate service areas | Session-only; not stored after session ends |
Biometric data notice (Illinois BIPA and similar laws): If you are a resident of Illinois or another state with a biometric privacy law, you have the right to receive written notice before we collect your biometric information and to provide written consent. By submitting to Persona identity verification, you consent to the collection and use of your biometric data as described above. You may withdraw consent and request deletion by contacting us at info@blessrun.com.
We do not use sensitive personal information for any purpose other than those listed above. We do not use sensitive data to infer characteristics about you, for advertising, or for any purpose not reasonably necessary to provide the Platform.
Right to limit: You may direct us to limit our use of sensitive personal information to what is necessary to provide the services you requested. Submit a request at /privacy-request.
9. Children's Privacy (COPPA)
BlessRun does not knowingly collect, use, or disclose personal information from children under the age of 13.
The Platform is intended for users who are 18 years of age or older. We do not direct the Platform to children, and we do not knowingly allow children under 13 to register for an account or use the Platform.
In compliance with the Children's Online Privacy Protection Act (COPPA), if we learn that we have inadvertently collected personal information from a child under 13 without verifiable parental consent, we will take immediate steps to delete that information from our records.
If you are a parent or guardian and believe your child under 13 has provided personal information to BlessRun, please contact us immediately at info@blessrun.com or call (775) 245-9655. We will investigate and delete the information promptly.
Users between the ages of 13 and 17 may use the Platform only with verifiable parental or guardian consent. If you are between 13 and 17, please have a parent or guardian review this Privacy Policy with you before using the Platform.
10. AI and Automated Decision-Making
BlessRun uses artificial intelligence and automated processing in the following ways:
BlessRun Concierge Chatbot (Baskey)
The chat widget on the Platform is powered by OpenAI's GPT-4o Mini model. When you send a message to the chatbot, your message is transmitted to OpenAI's API servers and processed to generate a response. We do not store your chat messages on BlessRun servers. OpenAI processes your messages in accordance with its privacy policy and API data usage policies. Chat logs are not used to make decisions that produce legal or similarly significant effects on you.
No significant automated decisionsProvider Matching
When you search for a service, the Platform uses automated logic to rank and display providers based on availability, service area, ratings, and verification status. This ranking does not produce legal or similarly significant effects.
No significant automated decisionsFraud Detection
We use automated systems to detect potentially fraudulent activity, such as unusual login patterns or suspicious payment behavior. Automated flags are reviewed by our team before any account action is taken.
May result in account review; human review required before actionIdentity Verification (Persona SDK)
Persona uses automated image analysis to compare a submitted government ID with a selfie. The result is used to determine provider eligibility. You may request human review of a failed verification.
Affects provider eligibility; human review available on requestWe do not use fully automated decision-making (without human involvement) to make decisions that produce legal effects or similarly significant effects on you. Where automated processing is used in a way that could significantly affect you, you have the right to request human review by contacting us at info@blessrun.com.
12. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us using any of the methods below. We take privacy inquiries seriously and will respond promptly.
For privacy requests (access, deletion, correction, portability, opt-out), please use our dedicated Privacy Request Form at blessrun.com/privacy-request. This ensures your request is routed correctly and processed within the required timeframes.
If you are a California resident and believe we have not adequately responded to your privacy request, you may contact the California Privacy Protection Agency (CPPA) at cppa.ca.gov.