1. Introduction
Welcome to BluePrint Room ("we," "our," or "us"). We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our application and services (collectively, the "Services"). By using our Services, you agree to the collection and use of information in accordance with this policy.
2. Information We Collect
We may collect personal information that you voluntarily provide to us when you register on the Services, express an interest in obtaining information about us or our products and services, when you participate in activities on the Services, or otherwise when you contact us.
The personal information that we collect depends on the context of your interactions with us and the Services, the choices you make, and the products and features you use. The personal information we collect may include the following:
- Personal Information You Disclose to Us:
- Account Information: Email address, password, first name, last name, age, display name.
- Payment Information: If you subscribe to paid plans, we use third-party payment processors (e.g., Paystack) to handle payment information. We do not directly store your full credit card details.
- Contact Information: Information you provide when you contact us for support or inquiries.
- Information Automatically Collected:
- Usage Data: Information about how you use our Services, such as features accessed, AI agent activity (types of agents used, frequency), interaction logs, IP address, browser type, operating system, and access times.
- Device Information: Information about the device you use to access our Services.
- Information Related to AI Agent Usage:
- Prospect Data: Information you input into our AI agents regarding businesses you are researching or contacting (e.g., business names, types, locations, specific observations, email content you draft). You are responsible for ensuring you have the right to provide and process this data via our Services.
- Generated Content: Content generated by our AI agents based on your inputs, such as drafted emails, aggregated business content, and website mockups.
3. How We Use Your Information
We use personal information collected via our Services for a variety of business purposes described below:
- To provide, operate, and maintain our Services, including user authentication and subscription management.
- To improve, personalize, and expand our Services, including analyzing usage patterns and AI agent performance.
- To understand and analyze how you use our Services to enhance user experience.
- To develop new products, services, features, and functionality.
- To communicate with you, including responding to your comments, questions, and requests; providing customer service and support; and providing you with information about services, features, surveys, newsletters, offers, promotions, contests, and events.
- To process your transactions and manage your subscriptions.
- To send administrative information, such as changes to our terms, conditions, and policies.
- For security purposes, such as detecting and preventing fraud, and ensuring the security of our Services.
- For compliance purposes, including enforcing our Terms of Service, or other legal rights, or as may be required by applicable laws and regulations or requested by any judicial process or governmental agency.
4. Sharing Your Information
We do not sell your personal information. We may share information with third parties only in the ways that are described in this Privacy Policy:
- Service Providers: We may share your information with third-party vendors, service providers, contractors, or agents who perform services for us or on our behalf and require access to such information to do that work. Examples include:
- Cloud hosting providers (e.g., Google Cloud Platform for Firebase).
- AI model providers (e.g., Google AI for Genkit functionality).
- Payment processors (e.g., Paystack) to process payments.
- Email delivery services (e.g., Resend) to send emails on your behalf or for service notifications.
- Legal Obligations & Rights Protection: We may disclose your information where we are legally required to do so in order to comply with applicable law, governmental requests, a judicial proceeding, court order, or legal process. We may also disclose your information if we believe it is necessary to investigate, prevent, or take action regarding potential violations of our policies, suspected fraud, situations involving potential threats to the safety of any person and illegal activities, or as evidence in litigation in which we are involved.
- Business Transfers: We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
- With Your Consent: We may disclose your personal information for any other purpose with your consent.
5. Cookies and Tracking Technologies
We may use cookies and similar tracking technologies (like web beacons and pixels) to access or store information. Specific information about how we use such technologies and how you can refuse certain cookies is set out in our (conceptual) Cookie Policy. For now, assume standard Firebase Authentication cookies may be used for session management.
6. Data Security
We use administrative, technical, and physical security measures designed to help protect your personal information. For example, data is stored with Firebase (Google Cloud Platform), which employs its own security measures. While we have taken reasonable steps to secure the personal information you provide to us, please be aware that despite our efforts, no security measures are perfect or impenetrable, and no method of data transmission can be guaranteed against any interception or other type of misuse.
7. Data Retention
We will retain your personal information only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use your information to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies. User-generated content (like drafts, prospect lists) is retained as long as your account is active or as needed to provide you services, and may be deleted upon account deletion or inactivity according to our data retention schedules.
8. Your Data Protection Rights
Depending on your location and applicable law, you may have certain rights regarding your personal information. These may include the right to:
- Access the personal information we hold about you.
- Request correction of inaccurate personal information.
- Request erasure of your personal information.
- Object to processing of your personal information.
- Request restriction of processing your personal information.
- Request portability of your personal information.
- Withdraw consent at any time (if processing is based on consent).
To exercise these rights, please contact us using the contact information provided below. We will respond to your request in accordance with applicable data protection laws. You may also be able to manage some of your information directly through your account settings.
9. Children's Privacy
Our Services are not intended for use by children under the age of 18 (or the age of legal majority in your jurisdiction). We do not knowingly collect personal information from children under this age. If we learn that we have collected personal information from a child under this age without verification of parental consent, we will take steps to remove that information from our servers.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. The updated version will be indicated by an updated "Last Updated" date and the updated version will be effective as soon as it is accessible. If we make material changes to this Privacy Policy, we may notify you either by prominently posting a notice of such changes or by directly sending you a notification. We encourage you to review this Privacy Policy frequently to be informed of how we are protecting your information.
11. Contact Us
If you have questions or comments about this Privacy Policy, or if you wish to exercise your data protection rights, please contact us via our Contact Page or by email at [Your Designated Privacy Support Email Address - e.g., privacy@blueprintroom.software].