Privacy Policy

Blueprin — Privacy Policy and Google API Services User Data Disclosure

Effective Date: November 9, 2026

Last Updated: November 9, 2026

Application: Blueprin

Website: https://blueprin-app.vercel.app

1. Introduction

Blueprin ("Blueprin", "we", "our", or "us") is a digital platform designed to support construction, architecture, engineering, and project collaboration workflows.

The platform provides tools for project management, construction budgeting (RAB), quantity takeoff, BIM/CAD file inspection, design collaboration, construction documentation, and related productivity features.

This Privacy Policy explains how Blueprin collects, uses, processes, stores, shares, and protects personal information, including information obtained through Google authentication and Google API integrations.

By using Blueprin, you acknowledge that you have read this Privacy Policy.

2. Information We Collect

We collect information that is necessary to provide, maintain, and improve our services.

2.1 Account Information

When you create an account or sign in using Google, we may collect:

Full name and display name.
Email address.
Google account identifier.
Profile picture or avatar URL.
Authentication identifiers and session-related information.

2.2 User-Provided Information

Depending on the features you use, Blueprin may process:

Construction project names and descriptions.
Project budgets and RAB calculations.
Construction quantities and material information.
BIM/CAD files and related design documents.
Project photographs and site documentation.
Comments, messages, and collaboration records.
Tasks, schedules, reports, and project activities.
Other information you voluntarily submit to the platform.

2.3 Technical Information

We may automatically collect limited technical information, including:

Browser type and device information.
IP address and connection information.
Application logs and error reports.
Authentication events and session information.
Usage information necessary for security and service maintenance.

3. Google API Services User Data

Blueprin uses Google Sign-In to allow users to authenticate without creating a separate password.

3.1 Google Data We Access

When you choose Google Sign-In, Blueprin requests the following standard OAuth scopes:

openid: Used to identify your Google account and establish an authenticated session.
email: Used to obtain your Google account email address for account identification, login, and project-related communication.
profile: Used to obtain your name and profile information, such as your profile picture, to identify you within the Blueprin collaboration environment.

Blueprin only requests Google account information necessary for authentication and the associated user-facing features.

We do not request access to Gmail, Google Drive, Google Photos, or Google Calendar through basic Google Sign-In.

If additional Google integrations are introduced in the future, their required permissions and purposes will be disclosed separately before access is requested.

3.2 How We Use Google User Data

Information received through Google APIs is used exclusively for the following purposes:

Authentication: Verifying your identity and creating your Blueprin account session.
Account Management: Associating your Google account with your Blueprin profile.
Team Collaboration: Displaying your name and profile picture to authorized project collaborators.
Communication: Using your email address for essential account notifications, invitations, and service-related communications.
Security: Detecting suspicious authentication activity and protecting user accounts.

We do not use Google user data for purposes unrelated to providing Blueprin services.

3.3 Google API Services User Data Policy and Limited Use

Blueprin's use and transfer of information received from Google APIs will comply with the Google API Services User Data Policy, including its Limited Use requirements.

Specifically:

We do not sell Google user data.
We do not use Google user data for targeted advertising.
We do not use Google user data for creditworthiness evaluation or lending decisions.
We do not use Google user data to train generalized artificial intelligence or machine learning models.
We do not transfer Google user data to third parties except as permitted by Google's policies, including transfers necessary to provide or improve user-facing features, comply with applicable law, or protect users and the service.

Any access to Google user data is limited to the purposes disclosed in this Privacy Policy.

4. Artificial Intelligence and Automated Features

Blueprin may provide AI-assisted features for construction workflows, including engineering assistance, project analysis, budgeting support, and document-related automation.

When users actively use these features, information they submit or select may be processed to generate the requested results.

AI-generated outputs are provided as assistance and do not replace professional engineering judgment.

Google account information obtained through basic authentication scopes is not used to train generalized AI or machine learning models.

Where third-party AI service providers are used to process user-submitted content, such processing is limited to delivering the requested functionality and is subject to applicable contractual and data protection requirements.

5. Data Storage and Processing

Blueprin uses third-party infrastructure providers to operate the platform.

Our infrastructure may include:

Supabase: Used for database hosting, authentication services, and related backend infrastructure. Website: https://supabase.com
Vercel: Used for application hosting, deployment, and delivery of the Blueprin web application. Website: https://vercel.com

These providers process information as necessary to operate and maintain Blueprin.

We do not authorize infrastructure providers to independently sell or use Google user data for unrelated advertising purposes.

Data may be processed in locations where our infrastructure providers operate, subject to their applicable security and privacy practices.

6. Data Sharing and Disclosure

Blueprin does not sell, rent, or trade personal information or Google user data.

We may disclose information only in the following circumstances:

6.1 Authorized Project Collaborators

Project information may be shared with team members, architects, engineers, contractors, and other collaborators according to the permissions and access settings established within a project.

6.2 Infrastructure and Service Providers

We may share limited information with service providers that support hosting, authentication, database operations, security, and other essential platform functions.

6.3 Legal Requirements

We may disclose information when required by applicable law, valid legal processes, or to protect the rights, security, and integrity of Blueprin and its users.

6.4 User-Directed Sharing

Information may be shared when you explicitly choose to invite collaborators, export project documents, or use an integration that requires such sharing.

7. Data Security

Blueprin applies technical and organizational measures intended to protect personal information against unauthorized access, alteration, disclosure, or destruction.

Depending on the services and infrastructure used, these measures include:

HTTPS/TLS encryption for data transmission.
Authentication and access-control mechanisms.
Database access restrictions.
Project-level authorization and permission controls.
Secure session and authentication-token handling.
Security monitoring and application maintenance.

No internet-based service can guarantee absolute security. We continuously seek to improve the security of the platform.

8. Data Retention

We retain personal information only for as long as reasonably necessary to:

Maintain your account and provide Blueprin services.
Support active projects and collaboration activities.
Fulfill contractual and legal obligations.
Resolve disputes and enforce our agreements.
Maintain security and prevent abuse.

When information is no longer required, we take reasonable steps to delete or anonymize it.

Certain information may remain temporarily in encrypted backups or be retained where required by law.

9. Account and Data Deletion

You may request the deletion of your Blueprin account and associated personal information.

To request deletion:

Use the account deletion functionality in Blueprin, if available.
Alternatively, send an email to privacy@blueprin.io with the subject: "Blueprin Account and Data Deletion Request".

We may request reasonable verification to confirm that the request comes from the account owner.

After verification, we will process the request and delete or anonymize eligible personal information within a reasonable period, generally within 30 days, subject to applicable legal obligations and limited backup retention.

Deleting your account may also affect your access to projects, collaboration records, and associated services.

Information belonging to other project members may be retained where necessary to preserve their independent records and legitimate project activities.

10. Your Privacy Rights

Subject to applicable laws, you may have the right to:

Request access to your personal information.
Request correction of inaccurate information.
Request deletion of your personal information.
Withdraw optional permissions or disconnect supported integrations.
Object to certain processing activities.
Request information about how your data is processed.

To exercise these rights, contact us using the email address provided below.

11. Children's Privacy

Blueprin is designed for professional, educational, and organizational construction-related activities.

The platform is not intended to knowingly collect personal information from children in violation of applicable laws.

If you believe that a child has provided personal information without appropriate authorization, please contact us.

12. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our services, technology, legal requirements, or data processing practices.

Material changes will be reflected in the updated policy, including a revised effective or last-updated date.

If changes materially affect how we process Google user data, we will provide appropriate notice where required.

13. Contact Information

For privacy-related questions, data access requests, deletion requests, or concerns about Google API Services User Data Policy compliance, contact:

Blueprin Privacy Team

Email: privacy@blueprin.io

Application: https://blueprin-app.vercel.app