Effective date: October 14, 2019

This Privacy Policy ("Policy") describes how Blend Labs, Inc. and its affiliates ("Blend," "we," "us," or "our") collect, use, and disclose the information that we collect from and about users of the Blend Chrome Extensions. We also describe the rights and choices you have regarding our use of your information. For purposes of these Terms, "you" and "your" means individuals with Blend email addresses that use our Blend Chrome Extensions. Your use of our Blend Chrome Extensions is subject to this Policy.

PLEASE READ THIS PRIVACY POLICY CAREFULLY TO UNDERSTAND HOW WE HANDLE YOUR INFORMATION. ONLY INDIVIDUALS WITH BLEND EMAIL ADDRESSES ARE PERMITTED TO DOWNLOAD AND USE THE BLEND CHROME EXTENSIONS. IF YOU DO NOT AGREE TO THIS PRIVACY POLICY AND/OR YOU DO NOT HAVE A BLEND EMAIL ADDRESS, PLEASE DO NOT USE THE BLEND CHROME EXTENSIONS. By using any part of the Blend Chrome Extensions, you consent to the collection, use, and disclosure of the information you provide as further outlined in this Policy.

What Information Does Blend Collect?

We collect information in multiple ways, including when you provide information directly to us, and when we passively collect information from you, such as from your browser or device that you use to access our Blend Chrome Extensions.

Information You Provide to Us

We may collect information from you during your use of or access to the Blend Chrome Extensions, such as when you:

• Attempt to initiate SSH connections to Blend’s servers

We will collect any information that you choose to provide to us. The information we collect generally includes credentials (such as an SSH key) that allow you to interact with Blend internal services online.

Information Collected Automatically

• User/Usage Information

  We may automatically collect certain information related to your browser activity. As described further below, we may collect and analyze information such as IP addresses (including city and state information), Blend email username, data entered in text fields, including passwords, files uploaded to your browser, or information related to your Browser’s outgoing traffic. As described further below, we may use third-party analytics providers and technologies, including cookies and similar tools, to assist in collecting this information.

• Cookies and Other Electronic Technologies

  We may also collect data about your use of the Blend Chrome Extensions through the use of internet server logs or cookies. A web server log is a file where website activity is stored. A cookie is a small text file that is placed on your computer when you visit a website that enables us to: (i) recognize your computer; (ii) store your preferences and settings; (iii) perform analytics; and (iv) assist with security administrative functions. Some cookies are placed in your browser cache. We may update this Policy from time to time as we adopt new technologies to gather additional information through other methods.

  Please note that you can change your settings to notify you when a cookie is being set or updated, or to block cookies altogether. Please consult the "Help" section of your browser for more information (e.g., Internet Explorer; Google Chrome; Mozilla Firefox; or Apple Safari). Please note that by blocking any or all cookies, you may not have access to certain features or offerings of the Blend Chrome Extensions.

How Will Blend Use My Information?

We and our service providers may use the information we collect from and about you for the following purposes:

• To ensure the security of Blend systems, including to provide alerts to you and Blend related to security issues;
• To conduct internal research, analytics, reporting, and testing;
• To comply with laws, regulations, and other legal process and procedure;
• To establish, exercise, or defend our legal rights; and
• To take steps that we reasonably believe to be necessary to protect the safety, security, and rights of Blend, its employees, service providers, and others.

Notice Concerning Do Not Track Signals

Do Not Track ("DNT") is a privacy preference that users can set in certain web browsers. Blend does not currently recognize or respond to browser-initiated DNT signals. Learn more about Do Not Track.

How Will Blend Share My Information?

We and our service providers may share your information as described in this section.

• Affiliates and Subsidiaries. We may share information we collect from you to current and future affiliates and subsidiaries within the Blend family of companies.
• Service Providers and Other Third-Parties. We may provide access to or share your information with select third parties who perform services on our behalf, including without limitation data storage, analysis and processing, and legal services.
• Protection of Blend and Others. By using the Blend Chrome Extensions, you acknowledge, consent, and agree that we may access, preserve, and disclose your information if required to do so by law or in a good faith belief that such access, preservation, or disclosure is reasonably necessary to: (a) comply with legal process and/or (b) protect the rights, property, or personal safety of Blend, its agents and affiliates, and/or its users and/or the public. This includes exchanging information with other companies and organizations for fraud protection, spam/malware prevention, and similar purposes.
• Business Transfers. As we continue to develop our business, we may buy or merge with other companies. In such transactions (including in contemplation of such transactions, e.g., due diligence), your information may be among the transferred assets. If a portion or all of Blend’s assets are sold or transferred to a third party pursuant to a corporate purchase, sale, or merger, your information may be one of the transferred business assets.
• Consent. With your consent, we may also share your information with other third parties.

How Does Blend Secure My Data?

We take technical, administrative, and physical measures (including encryption of your data during transmission and at rest) to protect your information against accidental or unlawful destruction or accidental loss, alteration, unauthorized disclosure, or access. By using our Blend Chrome Extensions, you acknowledge and accept that we cannot guarantee the security of your information transmitted to, through, or on our Blend Chrome Extensions and that any such transmission is at your own risk.

What Choices Do I Have?

1. Accessing, Updating, and Deleting Your Information. You may be able to access, update, or delete certain information we hold about you in accordance with applicable legal requirements. If you wish to request access or deletion of your information, please contact us via your existing relationship with Blend. We will respond to your request within a reasonable timeframe.

1. California Residents. Under the California "Shine the Light" law, Civil Code Sections 1798.83-1798.84, California residents are entitled to ask for a notice (a) identifying the categories of personal information (as defined by California law) that are shared with third parties for their own marketing purposes and (b) providing contact information for such third parties. Blend does not share such information for these purposes.

What Is Blend's Policy on Children

We do not knowingly collect or solicit personal information (as defined by the "Children’s Online Privacy Protection Act") from anyone under the age of 13. If we learn that we have collected personal information from a child under age 13, we will take reasonable steps to delete it as quickly as possible.

Retention of Your Information

We keep your information for no longer than necessary for the purposes for which it is processed and/or as required to comply with applicable laws. The length of time for which we retain information depends on the purposes for which we collected and use it.

Will Blend Change This Policy

We reserve the right to change this Policy at any time to reflect changes in the law, our data collection and use practices, the features of the Blend Chrome Extensions, or advances in technology. We will notify you via your Blend email address if there are any changes to this Policy. Your continued use of the Blend Chrome Extensions following the notification of changes to this Policy will mean you accept those changes. If we make any material changes, we will notify you in accordance with applicable legal requirements.

What If I Have Questions About This Privacy Policy?

If you have any questions or concerns regarding our Policy, please send a detailed message to the Blend Security team through your existing relationship with Blend, and we will try to resolve your concerns.

Blend Labs, Inc.
415 Kearny Street
San Francisco, CA 94108
(650) 550-4810