Privacy Policy

1. Introduction

ARM Digital Publishing LLC ("we", "us", or "our") operates BlackGlobalCitizen (the "Platform"). This Privacy Policy explains how we collect, use, disclose, and protect your personal information.

We comply with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), the UK GDPR, and other applicable international privacy laws. By using the Platform, you consent to the practices described in this Policy.

2. Information We Collect

Information you provide directly:

• Newsletter subscriptions: name and email address
• Creator submissions: name, email, YouTube channel handle, video URL, and content metadata
• Contact form submissions: name, email, and message content

Information collected automatically:

• Usage data: pages visited, time spent, links clicked
• Device information: browser type, operating system, device type
• IP address and approximate geographic location at country/region level
• Referring URLs

3. How We Use Your Information

• To provide, operate, and improve the Platform
• To send newsletters and platform updates with your consent
• To review and process creator video submissions
• To respond to your inquiries
• To analyze Platform usage and improve user experience
• To detect and prevent fraud and security incidents
• To comply with legal obligations

4. Legal Basis for Processing (GDPR)

For users in the EEA, UK, and Switzerland, we process your data on the following legal bases:

• Consent: where you have given explicit consent such as newsletter subscription
• Legitimate interests: to operate and improve the Platform and prevent fraud
• Contract performance: to process creator submissions and respond to inquiries
• Legal obligation: where required by applicable law

5. Data Sharing

We do not sell your personal data. We may share information with:

• Service providers: Supabase (database), Beehiiv (newsletter), Vercel (hosting) under data processing agreements
• Legal requirements: if required by law, court order, or governmental authority
• Business transfers: in the event of a merger or acquisition
• With your explicit consent for other purposes

6. Your Rights (GDPR - EEA/UK Users)

• Right of access: request a copy of your personal data
• Right to rectification: request correction of inaccurate data
• Right to erasure: request deletion of your personal data
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent at any time
• Right to lodge a complaint with your local data protection authority

7. Your Rights (CCPA - California Users)

• Right to know what personal information is collected
• Right to delete personal information
• Right to opt-out of sale (we do not sell personal information)
• Right to non-discrimination for exercising privacy rights

8. Data Retention

• Newsletter subscriber data: until you unsubscribe or request deletion
• Creator submission data: duration of content on Platform plus 2 years
• Contact form data: 1 year from submission
• Usage and analytics data: 2 years in aggregated form

9. International Data Transfers

The Platform is operated from the United States. If you are in the EEA or UK, your data may be transferred to the US. We ensure appropriate safeguards including Standard Contractual Clauses where required by GDPR.

10. Third-Party Services

• YouTube (Google LLC): video embedding — policies.google.com/privacy
• Supabase: database — supabase.com/privacy
• Beehiiv: newsletter — beehiiv.com/privacy
• Vercel: hosting — vercel.com/legal/privacy-policy

11. Children's Privacy

The Platform is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us immediately.

12. Contact

To exercise your rights or for any privacy questions, contact us at hello@blackglobalcitizen.com. We respond within 30 days (GDPR) or 45 days (CCPA). Data controller: ARM Digital Publishing LLC.