Privacy Policy

Before you start

BEFORE YOU START · 01

Who runs Bliss Way and who it is for

Bliss Way: AI Video Generator is operated by PAKFRANCO EXPORTS ( SMC-PRIVATE ) LIMITED (developer name Pakfranco Exports), at Canal Colony, Faisalabad - 38000, Pakistan. In this policy, “we”, “our” and “us” mean that company. We determine the purposes and means of the personal information processing described here and act as its controller where that term applies. Our privacy contact is support@blissway.org.

This notice covers the Android app, its image-to-video, video-template and AI-image features, our website at https://www.blissway.org, purchase administration and communications with our support team. It applies to information you provide and information received through the operation of these services. Personal information includes information that identifies you directly as well as identifiers or other records that can reasonably be linked to you or your device.

Bliss Way is in development for Android. Google Play availability is coming soon, and we do not currently provide a store download link. The app descriptions in this notice explain the information handling for those features when available. This website introduces the app and makes its policies accessible; browsing it does not create a generation request or make a purchase.

Reading a privacy policy is not consent to every activity it describes. Where processing requires a separate notice, permission or affirmative choice, we provide that separately. The regional sections explain rights that depend on the law applicable to the particular person and processing; they do not change the location of our company.

Use of Bliss Way must meet the age and consent requirements applicable to the person using it. Where a young person may lawfully use the service only with a parent or guardian's permission, that permission is required. This notice does not give permission to bypass an age restriction or replace a consent that the law requires.

We do not knowingly collect children's personal information contrary to those requirements. If we learn that information was obtained without a required permission or other lawful basis, we take appropriate steps to stop the processing and remove it as required. A parent or guardian can raise a concern or request review or deletion through our privacy contact, with limited verification where necessary to protect the child.

Creative input need not include unrelated government documents, private financial records, health information or confidential information about another person. Avoid supplying such material, including in support attachments. Images and prompts can reveal personal or sensitive details even when the app is not asking for them. Our decision not to use biometric identification does not make a recognizable person's image anonymous or remove the need for appropriate permission.

BEFORE YOU START · 02

Information that reaches us, with no sign-in

You do not register a Bliss Way login account, create a password or sign in through a social network. The app nevertheless needs records associated with an installation or app user to handle requested features, settings and purchased diamonds. A reference to an app-user record or an account-deletion control concerns those service records, not a separate username-and-password profile.

An installation identifier, a purchase reference or correspondence with support can be personal information even without your name. We use relevant references to associate a request with the appropriate service record and to find information when you exercise a right. If a record connects an app user or purchase to a particular creation, that connection is itself creation information and follows the creation deadline described below.

Google Play has its own account system. Making a store purchase does not create a Bliss Way login, and deleting your Bliss Way records does not close your Google account. Google is responsible for the records it handles independently under its own notice. We do not need your Google password or authentication codes to assist with app data or a payment issue.

Information comes from your submissions, your device's interaction with the app and website, the systems carrying out your requests, Google Play purchase responses and the installation-source attribution described later. What is present depends on the action you take. For example, an email enquiry includes a reply address, while reading a page does not require submitting creative material.

• Creation information: everything associated with a particular creation, including prompts, input images or videos where supplied, generated images or videos, settings and generation parameters, template choices, task identifiers, task status, timestamps and related metadata or associations. This also includes copies, thumbnails, cached versions and backups. These examples do not limit the scope to a particular file type or database field.
• App-user information: installation or app-user references, preferences and service settings, diamond balances and records of purchased entitlements. These help us operate the app without a sign-in. Any creation content, task reference or other link to a creation within these records is covered by the creation-information rules.
• Transaction information: order and transaction references, the diamond pack purchased, purchase dates, receipts or verification responses, payment and refund status, and information needed to reconcile an entitlement. Google Play handles the payment transaction itself; a payment issue can also bring relevant order information into a support conversation.
• Messages and reports: an email address when you contact us by email, your question or privacy request, correspondence, the description of a reported problem, and references or attachments you choose to provide. A creation can be reported from its detail page inside the app. Creation material included in a report or support case remains creation information.
• Operational information: IP address, device or browser characteristics, app and operating-system versions, request times, relevant page or feature interactions, error reports and diagnostic or security records. If such a record describes or identifies a particular creation, the relevant information must be removed with that creation.
• Attribution information: referral or channel details, permitted device or advertising identifiers, IP and version information, and installation, first-open or session signals needed to establish where an installation came from. Adjust receives only information for that attribution purpose, subject to the limits set out in its section below.

Please provide only information relevant to the action or enquiry. An optional screenshot or attachment is not required merely because you contact support. We may ask for a limited reference to distinguish your records from somebody else's, but a privacy request does not require you to create a login or provide unrelated identity documents.

BEFORE YOU START · 03

Install attribution, browser storage and device permissions

We use Adjust to establish the source of a Bliss Way installation, such as a referral, acquisition channel or campaign. Its role is source attribution, not AI processing. Attribution is not a zero-data activity: it requires technical signals to connect an installation with its source.

Depending on availability and applicable permission or consent, those signals can include device or advertising identifiers, referrer and channel details, IP address, operating-system, app or SDK version information, and installation, first-open or session signals. Device privacy choices and applicable restrictions govern the use of advertising identifiers; their inclusion here does not mean every identifier is available on every device.

Adjust does not receive creation information, including prompts, input or output images or videos, task records or associated metadata. We do not send it support correspondence, content reports or purchase events, and we do not use it to analyze the content of works or activity within creative features. Necessary attribution information and results may be exchanged with acquisition channels through enabled integrations, subject to applicable consent and privacy choices.

You can use available device privacy controls and contact us to request access, erasure, an objection or an applicable advertising opt-out for this processing. Restricting or resetting an identifier affects its use but does not itself erase information already collected. We handle requests relating to Bliss Way's processing, including involving the relevant provider as needed. Adjust's own privacy information explains its role and provides additional contact information.

This website does not use analytics or advertising cookies. Browsers and delivery systems can cache its pages, fonts and images so that they load and display properly. Product illustrations are explanatory material; interacting with the website does not send an image or prompt to a generation service.

The installed app has different technology from a website. App and service records support requested features, while the Adjust SDK performs the installation attribution described above. A browser's cookie setting does not automatically change an installed SDK's operation. Likewise, removing local browser or app storage does not delete records previously received by us or another provider.

Android's system Photo Picker gives access to the photos you choose for an input. If a feature needs a device permission, it is requested for that feature, and you can use Android's available controls to refuse or change permission. A refusal may prevent the related operation. Changing access prevents or limits future access according to the device control; it does not withdraw information already uploaded from our systems.

Manage browser storage and device privacy preferences using the controls supplied by their respective providers. Where consent is legally required for storing or accessing information or for tracking, the relevant choice is separate from simply visiting this policy. External destinations, including Google Play and Adjust, provide their own notices for interactions you have directly with them; our responsibility for our own disclosures remains as described here.

While you create

WHILE YOU CREATE · 04

What happens to a creation, and the 36-hour limit

For photo input, Android's system Photo Picker lets you select the images made available to Bliss Way. The selected material is uploaded when you request the relevant creative processing. A selection mechanism is different from a promise that the task runs only on your phone: generation takes place on servers that we host and operate using self-hosted models.

We do not pass inputs, results or other creation information to a third-party AI generation provider. Operational services and installation attribution are described separately in this notice; the absence of an external AI provider does not mean that no other service provider processes any information.

Bliss Way does not perform facial recognition, extract facial geometry for identification or create biometric identifiers. We do not use a face to identify a person. An image that depicts an identifiable person can still be personal information, and our protections do not depend on whether the image contains a face.

The complete set of information associated with a creation is removed within 36 hours, measured from the start of its input upload, or from submission of the prompt when there is no upload. The same deadline applies to the input and the result. Processing a request does not authorize model training, and completing the output does not start another retention period.

Choose material you have the right to use, including the necessary permission for another person's private information. Avoid unrelated confidential documents or sensitive details. Results can be inaccurate or unexpected; inspect them before saving or sharing, including whether they reveal someone else's information. If you want a personal copy of an available result, save it before its deletion deadline.

Each creation has one maximum lifetime of 36 hours. The clock starts when the input upload begins; for a request without an upload, it starts when the prompt is submitted. By that deadline we delete all information associated with the creation, not merely the visible output or the files in a generation server.

The scope includes inputs and outputs, prompts, settings and parameters, template selections, task records, identifiers, status and timestamps, metadata, associations and any other information about the creation. It includes every copy in systems we control and systems processing on our behalf: databases, file storage, logs, support and reporting attachments, thumbnails, caches and backups. A copied file or a reference in another record has the same deadline as the original creation.

Generation finishing later, a support investigation, a content report or moving information to a different system does not restart the clock. Other retention purposes cannot preserve creation content, its metadata or links to it beyond the deadline. Necessary independent records are treated separately only after all creation information and associations have been removed.

• App-user and preference records may remain while needed to administer your use of the app and its entitlements, until deletion is required or they are no longer needed. Keeping an app-user record cannot keep its links to deleted creations.
• Purchase, entitlement and financial records may be needed for verification, reconciliation, refunds, disputes, tax or accounting obligations. A diamond purchase is independent of an individual creation. Removing creation information does not by itself remove the purchase history or purchased entitlement; any creation details within those records must still be erased on time.
• Support and report records may be retained to answer an issue, document its handling or resolve a related dispute. Their independent correspondence must not retain the creation, a screenshot of it, a task reference, associated metadata or any other creation information after its deadline.
• Operational and security records may be needed to diagnose a fault, protect the service, investigate misuse or resolve a specific incident. The applicable purpose governs independent records only; a log or security case cannot serve as an archive of creations or their associated information.
• Installation-attribution records have retention arrangements appropriate to their attribution purpose and the relevant Adjust service configuration, subject to applicable rights and legal requirements. They do not contain creative material or its associated records and are not assigned the creation retention period.

For these independent records, we consider the purpose, the unresolved issue or obligation, a valid rights request and whether a less identifiable record can meet the need. When they are no longer needed, we erase them or make them genuinely anonymous. Any restricted retention or backup handling of an independent record must not restore or preserve creation information.

The app is not a permanent archive of your work. Copies you export to your own device or independently share with someone else fall outside the systems we control or direct. You are responsible for those copies and can remove them through the relevant device or recipient; our deletion does not reach into another person's independently held files.

WHILE YOU CREATE · 05

Why we use information

We use information for the activities described here, with access limited to what the activity requires. A purpose such as support or reliability does not override the rules for creative content, its associated records or the prohibition on AI training.

• Carrying out creative requests: receiving the selected input, applying the requested settings or template, processing the task, communicating its status and making the result available.
• Maintaining app operation: managing preferences, identifying the service record for a request, administering available access and diamonds, and explaining a feature's availability or a service interruption.
• Administering purchases: validating store information, crediting a purchased pack, checking entitlements, reconciling approved refunds or reversals, and resolving payment discrepancies.
• Answering and acting on communications: responding to questions, privacy and deletion requests, technical problems and content reports, and sending necessary administrative information about the service or a request.
• Understanding acquisition sources: attributing an installation to a referral, campaign or channel through Adjust. This does not involve asking Adjust to analyze creations, feature use or purchase events.
• Keeping the service dependable and safe: diagnosing failures, investigating abuse and security incidents, preventing fraud, responding to reported harmful content, enforcing applicable terms and protecting or defending legal rights.
• Fulfilling business and legal duties: maintaining necessary transaction and accounting records, obtaining professional advice and responding to valid requirements from authorities.

Service statistics can be useful without identifying an individual. When we use genuinely anonymous or aggregated information, it must no longer identify or reasonably reconnect to a person. Replacing a name or hashing an identifier alone does not establish anonymity. Nor can aggregation or diagnostic work be used to keep information associated with a specific creation past its deadline.

No user information is used to train AI models. This applies to creative material and also to identifiers, purchase records, diagnostics, support messages and reports. Operating or improving the service is not an exception to that commitment.

WHILE YOU CREATE · 06

Legal grounds and how information is protected

Where a data protection law requires a legal basis, we identify a basis for the particular activity. Providing a requested feature and making an optional privacy choice are different matters. The applicable grounds can include the following.

• Performance of a contract or steps you request before entering one: handling a creative request, administering a purchase and providing the related assistance necessary to fulfil it.
• Legitimate interests where permitted: maintaining reliable operations, resolving faults, preventing fraud, protecting users and undertaking necessary business administration, after considering whether your rights and interests outweigh the proposed use.
• Compliance with legal obligations: processing needed to meet applicable accounting, tax, consumer-protection duties and other valid legal requirements.
• Consent where required: particular device access, tracking, communications or other optional activities for which applicable law requires your permission. A visit to this page is not that permission.

Where we rely on consent, you can withdraw it using the relevant available control or by contacting us. Withdrawal does not undo lawful processing that occurred before it. If information is necessary to carry out your requested generation or purchase, we may be unable to perform that action without it; declining an unrelated optional attachment does not by itself prevent a privacy enquiry.

If a new purpose calls for another legal basis, additional information or a separate choice, we take the required steps before that use. A general reference to business interests does not authorize an incompatible purpose, AI training on user information or retention of creation information beyond its stated lifetime.

We apply technical, administrative and organizational measures appropriate to the information and the risks of processing it. Transfers between the app or website and our servers use HTTPS with TLS encryption in transit. Access is restricted to people and systems with a relevant operational need, and authorized access is limited to the task being performed.

Security also involves examining suspicious activity, investigating faults, responding to reported incidents and reviewing how operational providers handle information. Internet services cannot guarantee that every loss, unauthorized access or misuse is impossible. When an incident occurs, we assess it, take appropriate action and provide notifications when the applicable law requires them.

You can help by protecting your device and your store access. Report a suspected exposure or security problem to our contact address with a brief explanation and a relevant reference if available. Avoid sending passwords, authentication codes or full financial details. A security investigation remains subject to the creation deletion deadline; necessary independent incident records cannot retain creation content or associations after that deadline.

WHILE YOU CREATE · 07

Who receives information, and where it is processed

Information is disclosed for a relevant purpose, rather than made available to every recipient listed below. We do not sell personal information for money. Some laws define sale or advertising-related sharing more broadly; the regional sections and opt-out routes address those definitions separately.

• Operational providers may handle information needed for hosting, storage, website delivery, communications, support or security. Their role is limited to their work for us. Adjust's permitted attribution information is described in its own section; operational support is separate from our self-hosted AI generation.
• Google Play and services involved in purchase administration may exchange order, verification, entitlement, refund or dispute information necessary to process a purchase, correct a problem or meet a platform requirement.
• Professional advisers, including lawyers, accountants, auditors and insurers, may receive relevant information for advice, compliance, business administration or a claim, subject to suitable confidentiality duties.
• Courts, public authorities or other legal and safety recipients may receive relevant information in response to a valid legal obligation, or where disclosure is lawfully necessary to protect people, investigate abuse or establish, exercise or defend rights.
• Parties to a proposed or completed financing, merger, acquisition, restructuring or asset sale may review or receive relevant information under appropriate confidentiality and legal safeguards. Required notices and protections continue to apply, and a change in the business is not permission to disregard existing commitments.
• People you authorize may receive information at your instruction, including an authorized representative assisting with a rights request. If you independently export or share a result, the recipient's subsequent use of that copy is outside our operation of the service.

For processing on our behalf, we require appropriate safeguards and handling limited to the authorized purpose. All creation information held by those providers follows its original deletion deadline, including copies and associated records. Independent providers, such as a marketplace for its own payment activities, may have separate legal responsibilities and notices for the information they handle themselves.

Our operator is based in Pakistan. Information may be processed in other countries through the infrastructure and providers involved in delivering the service, including relevant Google Play or Adjust operations. The company address is not a statement that every record is stored in Pakistan. Privacy protections and authority-access rules can differ between countries.

Where an international transfer is subject to specific data protection requirements, we use the safeguards or lawful arrangements required for that transfer. Depending on the applicable law and destination, these may involve an adequacy decision, approved contractual safeguards or another permitted mechanism. Where the law of your place of residence sets specific transfer requirements, those requirements apply to the processing they govern.

Contact us if you need information about safeguards relevant to your data, including a description or copy where available under applicable law. We may protect confidential details when responding without withholding information you are entitled to receive. Changing a processing location does not change the authorized purposes, privacy rights or deadline for removing all creation information and provider-held copies.

When you pay

WHEN YOU PAY · 08

Diamond purchases and payment records

Bliss Way offers one-time diamond packs that all users may purchase. Purchased diamonds do not expire. We keep the transaction and entitlement information needed to credit the correct app-user record, display the applicable balance and address a purchase problem. A record connecting an entitlement to an individual creation remains subject to the creation deletion rule.

Prices shown on the website are illustrative US-dollar prices. The final local amount, applicable taxes and terms appear in the app before you confirm a purchase. Our website does not collect payment details or process a purchase. Google Play handles its payment flow and provides relevant purchase and verification information under its own terms and privacy notice.

When discussing a missing purchase or refund, an order reference, receipt or description of the discrepancy is usually more appropriate than a full bank statement. Remove unrelated information before sending an attachment. Never send payment-card security codes, a store password or authentication codes to support.

Information needed to verify a purchase, apply an approved refund or meet an accounting obligation may be retained separately from creations. The fact that diamonds do not expire does not permit indefinite storage of every item of personal information. We retain each independent record for the necessary purpose described in the retention section, and privacy requests remain available whether or not a payment issue is outstanding.

Afterwards

AFTERWARDS · 09

Requesting removal of your app data

There are two independent ways to request deletion. You may use either route, including email while you still have access to the app. The absence of a Bliss Way login does not prevent a request, and an in-app reference to deleting an account means deleting the associated app-user data.

• Inside the app, open Personal Settings and choose the deletion control. Review the information shown and confirm the request. Save any result you wish to keep while it is still available before proceeding.
• Outside the app, email support@blissway.org and say that you want your Bliss Way app-user data deleted. An available app-user or order reference can help locate it. If you cannot open the app, tell us; you do not need to reinstall or create a login merely to send the request.

Removal covers the relevant app-user record, non-essential preferences and associated personal information, including all remaining creation information and copies held for us. We pass the necessary instructions to providers processing on our behalf. We may request limited verification to avoid deleting or exposing somebody else's information, using a method proportionate to the records involved.

Independent records may remain where necessary for a specific payment, tax, security, support, attribution or other lawful purpose described above. This is not continued ordinary use of a deleted app-user record, and we explain a relevant limitation when responding. Retained records cannot include creation information or a connection to it past the creation deadline.

The automatic 36-hour removal of creation information does not depend on receiving or verifying a deletion request. Deleting a local cache or uninstalling the app is different from requesting removal of service records. Once erased from our systems, the creation and its associated information are no longer available there.

Deleting app data does not close a Google account, erase Google's independently held records or automatically reverse a payment. A refund or purchase issue can be raised separately and is not a prerequisite for exercising a privacy right. Copies saved or shared outside our systems remain under the control of you or the relevant recipient.

AFTERWARDS · 10

Your privacy rights and browser signals

Write to support@blissway.org to ask about your information or exercise an applicable right. The rights available depend on the law, the processing and its legal basis. No Bliss Way sign-in is needed. These rights can include the following.

• Confirmation and access: find out whether information about you is processed, obtain a copy and learn about its sources, uses and recipients.
• Correction: have inaccurate personal information corrected or information completed where it is incomplete for the purpose for which it is used.
• Erasure or restriction: ask for deletion or for limits on processing, subject to applicable grounds and exceptions for independent records, such as a particular legal obligation or claim.
• Portability: receive relevant information you provided in a usable format, and where the right applies and it is technically feasible, have it transferred to another provider.
• Consent withdrawal: change a consent-based choice without affecting the lawfulness of the processing carried out before withdrawal.
• Advertising or profiling choices: exercise applicable rights concerning sale, advertising-related sharing, targeted advertising or qualifying profiling. Additional California and Virginia information appears below.

Where we rely on legitimate interests, an applicable right to object allows you to raise reasons related to your circumstances. An applicable objection to direct marketing does not require you to explain a personal reason. Opting out of a particular future use and deleting information already held are different requests; you may ask for both where the rights apply.

To find the correct information and protect it from disclosure to the wrong person, we may ask for proportionate verification using an available app-user, purchase or correspondence reference. Authorized representatives may act where permitted, with evidence of their authority and any verification the law requires. We do not require a new login solely to exercise a right.

We respond within the relevant legal period and explain any lawful limitation, refusal, extension or permitted charge, together with the available next steps. Exercising a protected right does not result in unlawful discrimination. No exception concerning an independent record extends the creation deletion deadline.

You can complain directly to the supervisory authority or regulator available under the law that applies to you. Where a data protection authority exists for your place of residence, it is usually the appropriate body. Contacting us first may help resolve a problem, but it is not a condition for using an available regulatory complaint route.

A browser may offer a legacy Do Not Track preference. Its implementation is not uniform across services, and that preference is not treated as a universal instruction to delete app records, switch off every SDK or withdraw every permission associated with a device.

Legally recognized opt-out signals, including Global Privacy Control where applicable, are different. We give a valid signal the effect required by the law governing the relevant processing. A signal's scope can depend on the browser, device or context in which it is received; it does not automatically identify every separate installation or independent service record.

You can also contact support@blissway.org to make an applicable sale, sharing or targeted-advertising opt-out request. Identify the app or device record concerned as far as reasonably possible, without sending credentials. Changing an advertising identifier or removing a local cache does not itself erase prior records; use the deletion route as well if that is what you want.

AFTERWARDS · 11

California privacy rights

This section applies when California privacy law governs our handling of your information, subject to the law's scope, thresholds and exceptions. The collection, purpose, recipient and retention sections of this notice explain the corresponding activities. They describe information received from you, device and service interactions, purchase services and attribution sources.

Relevant categories include personal or device identifiers and contact details; commercial information about transactions and entitlements; internet, app and technical activity; and visual material, prompts or correspondence you supply. The content you choose may reveal other personal or sensitive information. Each category is used and disclosed only for the purposes and to the recipient categories described in this notice, with the separate creation deadline remaining in effect.

• Where applicable, you can ask to know and access personal information, including information about its collection, use and disclosure; correct inaccuracies; and request deletion subject to statutory exceptions.
• You can exercise applicable rights to opt out of sale or sharing for cross-context behavioral advertising, and to limit qualifying uses or disclosures of sensitive personal information.
• An authorized agent can make a request under the applicable authorization and verification rules. Protected rights may be exercised without unlawful discrimination.

We do not exchange personal information for money. California's definitions of sale and sharing can nevertheless apply to other disclosures. Where attribution information exchanged through an enabled acquisition-channel integration falls within those definitions, applicable opt-out rights can be exercised through our contact address or a legally recognized signal. This does not authorize Adjust to receive creative, support or purchase-event information.

Verification is proportionate to the request. We explain a relevant exception or other reason that prevents full completion and the available response options. You need not resend sensitive material merely to ask about a right; describe the issue first so that any necessary identification can be limited to the information actually needed.

AFTERWARDS · 12

Virginia requests and appeals

If the Virginia Consumer Data Protection Act applies, eligible residents have rights within its scope and exceptions. These relate to the information and purposes described in this notice and do not imply that every listed form of processing takes place in Bliss Way.

• Confirm whether personal data is processed and obtain access to it; correct inaccuracies; and request deletion of personal data as applicable.
• Obtain an applicable portable copy of data you provided in a usable form, subject to the law's conditions and technical feasibility.
• Opt out of processing for targeted advertising, sale of personal data or profiling for decisions producing legal or similarly significant effects, where that processing and right apply.
• Appeal a refusal of a privacy request and exercise protected rights without unlawful discrimination.

Send a request to support@blissway.org. If you disagree with our decision, reply to the correspondence or email the same address with “Privacy appeal” in the subject and explain the point you want reconsidered. We review the appeal and communicate the outcome and reasons within the applicable legal period. If the appeal is denied, we provide the available method for contacting the Virginia Attorney General to make a complaint.

AFTERWARDS · 13

Keeping this notice current and reaching us

The date shown on this page identifies this version of the notice. We review it when features, practices, providers or legal requirements change, and give additional notice of material changes where required. Updating a webpage does not replace consent or other steps required for a new use, or remove rights relating to information already processed. Our official website is https://www.blissway.org.

For a privacy question, deletion request, objection, security concern or appeal, contact support@blissway.org. Postal enquiries can be addressed to PAKFRANCO EXPORTS ( SMC-PRIVATE ) LIMITED, Canal Colony, Faisalabad - 38000, Pakistan. Tell us which issue or right your message concerns and provide a limited app-user or order reference if available. An email reply address does not imply that you have a registered Bliss Way login.

A concern about a creation can be reported from the creation's detail page without leaving the app, or described to support. Do not forward unlawful material or unrelated confidential documents when a description will do. Creation information in a report or attachment follows its original deadline rather than acquiring a new lifetime as correspondence.

Our support, deletion and purchase pages explain the available practical routes. A purchase complaint does not prevent a privacy request, and you do not need to resolve one before making the other. Independent providers' notices explain their own processing; changes to those notices do not replace our responsibility to describe and protect the information we handle.