BIG BLUE PRIVACY POLICY

Big Blue Technologies LLC Version 1.0 Effective Date: July 19, 2026 Last Updated: July 19, 2026

1. Who we are

Big Blue Technologies LLC ("Big Blue," "we," "us," or "our") operates a peer-to-peer parking marketplace that connects people who have parking space ("Hosts") with people who need it ("Parkers"), through our mobile apps and the website at thebigblue.app (together, the "Platform").

This Privacy Policy explains what personal information we collect, how we use and share it, and the choices and rights you have. It is incorporated into our Terms of Service.

For any privacy question or request, contact us at admin@thebigblue.app or Big Blue Technologies LLC, ATTN: Privacy, 1817 Viola Pl, Costa Mesa, CA 92627.

2. A note on what we do and do not collect

We try to keep the personal information we hold to what the service actually needs. Two points worth stating up front:

• We do not collect or store your payment card numbers, bank account details, or government ID. Payments and identity verification are handled by our payment processor, Stripe, through Stripe Connect Express. When you add a payout method or verify your identity, you provide that information directly to Stripe under Stripe's own privacy policy. We receive only limited confirmation and status information from Stripe, not the underlying documents or numbers.
• We use your device location only if you choose to see what is nearby, and only with your permission. If you allow it, we use your device's location to show nearby parking spaces. This is entirely optional: you can decline location permission and still use every feature of the app by searching for a location yourself. We use your location to return nearby results at the time you ask. We do not store it, and we do not use it to build a history of your movements. You can change this permission at any time in your device settings.

3. Information we collect

We collect the following categories of personal information.

Information you provide:

• Account information: name, email address, phone number, and password. If you add a profile photo, we collect that too.
• Listing information (Hosts): the address and description of the parking space, photos, availability, pricing, and access instructions. Note that a space address is often a residential address.
• Booking information (Parkers): the spaces you book, dates and times, and vehicle details you enter, including make, model, and license plate.
• Communications: messages you send through the Platform, reviews and ratings, and messages you send to our support.

Information created through your use of the Platform:

• Device location: if you grant permission, your device's location at the moment you ask to see nearby spaces, used to return those results. We do not store it.
• Transaction records: bookings, cancellations, refunds, service fees, and payout status (received from Stripe).
• Device and usage information: collected through Firebase, including approximate location derived from IP address, device type, operating system, app version, identifiers, pages and screens viewed, and crash and diagnostic data.

Information handled by Stripe, not stored by us:

• Payment card and bank account details, and identity-verification documents and numbers. These are collected and held by Stripe. We receive confirmation and status only.

We do not knowingly collect Social Security numbers, driver's license or passport images, biometric data, or health data, because identity documents are handled by Stripe and we do not request them.

4. Sensitive personal information

California law treats certain data as "sensitive personal information." Two categories may apply to what we hold:

• Precise geolocation, only if you grant permission and only when you ask to see nearby spaces. We use it at that moment to return nearby results. We do not store it, and we do not use it to track where you go. Location is optional; you can decline it and use the app fully by searching. You can turn the permission off at any time in your device settings.
• Account log-in credentials (your email and password combination that allows access to your account), which we use only to provide and secure your account.

We use sensitive personal information only for these service purposes. We do not use it to infer characteristics about you, and we do not sell or share it. Because we use it only as necessary to provide the service you request, we are not required to offer a separate right to limit its use, but you can decline location permission and delete your account at any time.

5. How we use your information

We use personal information to:

• create and manage your account and verify eligibility;
• operate the marketplace: publish listings, process bookings, enable Host and Parker communication, and calculate and process fees, refunds, and payouts through Stripe;
• provide customer support and resolve disputes;
• send transactional messages (booking confirmations, receipts, cancellations, service and policy notices);
• send marketing email where permitted, subject to your opt-out choices (see Section 8);
• measure and improve the Platform using analytics;
• detect, prevent, and address fraud, abuse, safety issues, and technical problems; and
• comply with law and enforce our Terms.

6. How we share your information

We do not sell your personal information. We share it only as described here.

• Between users, to complete a booking. When a booking is made, we share the information needed to complete it. A Parker receives the space location and access details; a Host receives the Parker's name and relevant booking and vehicle details. Use what you learn about another user only to complete the booking.
• Stripe, to process payments, payouts, and identity verification.
• Google (Firebase), for authentication, hosting, database and storage, crash reporting, analytics, and notification delivery.
• For legal and safety reasons, when we believe disclosure is reasonably necessary to comply with law or legal process, enforce our Terms, or protect the rights, safety, or property of Big Blue, our users, or the public.
• In a business transfer, such as a financing, merger, acquisition, or sale of assets.

We do not sell or share your personal information. We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We do not use advertising cookies or advertising analytics features. If we adopt advertising analytics or similar features in the future, we will update this policy, add a "Do Not Sell or Share My Personal Information" option, and honor Global Privacy Control signals before doing so.

7. Cookies and tracking technologies

We and Firebase use cookies and similar technologies to operate the Platform, keep you signed in, remember your preferences, and understand usage. We do not use advertising cookies or cookies that track you across other websites. Because we use only essential and analytics cookies and do not sell or share personal information, we do not display a cookie consent banner. You can control cookies through your browser settings; disabling some cookies may affect how the Platform works.

8. Your communication choices

• Marketing email: you can opt out using the unsubscribe link in any marketing email. We will still send transactional messages about your account and bookings.
• Text messages: we send text messages only for transactional and service purposes, such as booking confirmations and account or security notices. We do not send marketing text messages.
• Push notifications: control these in your device settings.

9. Your privacy rights

If you are a California resident, the CCPA/CPRA gives you the right to:

• Know the categories and specific pieces of personal information we have collected, the sources, purposes, and categories of recipients;
• Delete personal information we have collected, subject to legal exceptions;
• Correct inaccurate personal information;
• Opt out of any "sale" or "sharing" of personal information and of targeted advertising; and
• Non-discrimination for exercising these rights.

We extend these same rights to all of our users, wherever you live.

To exercise these rights, contact admin@thebigblue.app or use the in-app account controls, including account deletion at thebigblue.app. We will verify your request against the information associated with your account. You may use an authorized agent. We will not discriminate against you for exercising your rights.

Note that some information is retained after account deletion where the law allows or requires it, including transaction, fraud-prevention, safety, and dispute records, and records of your acceptance of our Terms, as described in Section 10 and in our Terms of Service.

10. Data retention

We keep your account information (such as name, email, phone, listings, and bookings) for as long as your account is active, so we can provide the service. When you delete your account, we delete or de-identify your account information, except for what we are permitted or required to retain.

We do not store your payment card, bank account, government ID, or tax records. Those are held by Stripe, which is responsible for retaining and deleting them under its own policies and applicable law.

We keep individual transaction records (such as amounts paid, bookings completed or cancelled, spaces rented, and revenue) for a rolling two-year period, and aggregate business data derived from them for longer. This transaction and dashboard data is associated with your display name rather than your legal name or contact details. Data tied to a persistent display name is still "personal information" under California law; it is minimized, not fully anonymized. We also retain records needed for fraud prevention, safety, and dispute resolution, and records of your acceptance of our Terms, for as long as reasonably necessary or as required by law.

11. How we protect your information

We use administrative, technical, and organizational measures intended to protect personal information. We build on established providers, Stripe for payments and identity and Google Firebase for infrastructure, and we are responsible for configuring our own systems securely, including access controls and the rules that govern who can read and write data. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. Protect your account by keeping your password confidential and by notifying us at admin@thebigblue.app of any unauthorized use.

12. Children

The Platform is for adults. It is not directed to children, and we do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us information, contact admin@thebigblue.app and we will delete it.

13. Third-party services

The Platform relies on and links to third-party services, including Stripe and Google. Their handling of your information is governed by their own privacy policies, not this one. We encourage you to review Stripe's and Google's privacy policies.

14. Changes to this policy

We may update this policy from time to time. If we make material changes, we will notify you through the Platform or by email and update the "Last Updated" date. Your continued use after the effective date means you accept the updated policy.

15. Contact us

Big Blue Technologies LLC ATTN: Privacy 1817 Viola Pl, Costa Mesa, CA 92627 admin@thebigblue.app