Privacy Policy

BluePrint ("BluePrint", "we", "us") makes project-management software for builders. This policy explains what personal information we collect, why, how we handle it, and the choices you have. We've written it in plain language on purpose.

Who we are

BluePrint is a construction project-management application, available as a web app at blueprintpms.com and as an iOS app. We are based in Australia and provide the service to builders and owner-builders, primarily in Australia. For any privacy question, contact us at hello@blueprintpms.com.

What we collect

We collect only what we need to run the service:

• Account details — your name, email address, and password (passwords are stored securely hashed, never in plain text).
• Profile and company details — optional information you add about your business, such as company name and contact details.
• Content you create — projects, budgets, invoices, tasks, schedules, documents and photos you upload, and notes you record in the app.
• Client and trade records — contact and project information you enter about your clients and subcontractors (covered in its own section below).
• Technical data — IP address, device and browser type, and basic log information created automatically when you use the service.
• Analytics data — usage information collected via Google Analytics, where you've consented (see Cookies & analytics).

We do not ask for sensitive information (such as health or government identifiers) and ask that you don't store it in the app.

How we use it

We use personal information to:

• Provide, operate and maintain the service;
• Authenticate you and keep your account secure;
• Send SMS notifications to trades on your instruction;
• Respond to your enquiries and provide support;
• Send important service messages (e.g. billing, security);
• Understand how the product is used so we can improve it (via analytics, where consented);
• Meet our legal and tax obligations.

We do not sell your personal information, and we do not use the content of your projects for advertising.

Data about your clients & trades

BluePrint lets you store information about your clients and subcontractors — names, phone numbers, email addresses, site addresses, licence details and similar. When you enter this information, you control it and we process it on your behalf to provide the service.

You are responsible for ensuring you have the right to enter that information and, where required, that the people concerned are aware of how their details are used. If one of your contacts asks us directly to access or delete their information, we will generally refer them to you as the business responsible for it, and assist you in responding.

Who we share with

We share personal information only with service providers who help us run BluePrint, under agreements that require them to protect it:

• Supabase — database and authentication hosting.
• Vercel — application hosting and delivery.
• Twilio — sending SMS notifications to trades.
• Google Analytics — usage analytics, where you consent.

We may also disclose information if required by law, or to protect our rights, users or the public. If BluePrint is ever involved in a business sale or merger, data may be transferred as part of that, subject to this policy.

Where data is stored

Some of our providers store or process data outside Australia, including in the United States. Where personal information is transferred overseas, we rely on reputable providers that apply recognised safeguards to protect it. By using the service you acknowledge this overseas processing.

Face ID & biometrics

If you enable Face ID (or Touch ID) to sign in on the iOS app, the biometric check happens entirely on your device through Apple's secure system. We never receive, see or store your biometric data. Your login credentials are kept in the device's encrypted keychain and are only used to sign you in to BluePrint.

Cookies & analytics

We use cookies that are necessary for the service to work (for example, keeping you signed in). With your consent, we also use Google Analytics to understand how the product is used, which sets its own cookies and shares limited usage and device information with Google.

You can withdraw consent or control cookies at any time through your browser settings, and you can opt out of Google Analytics using Google's opt-out tools. Declining analytics does not affect your ability to use the service.

Your rights

You can ask us to:

• Access the personal information we hold about you;
• Correct information that's wrong or out of date (most of this you can edit yourself in account settings);
• Delete your account and associated personal information — you can do this yourself from Settings, or ask us to do it;
• Export a copy of your data in a common format;
• Withdraw consent for analytics or other optional processing.

To exercise any of these, email hello@blueprintpms.com. We'll respond within a reasonable time. If you're not satisfied with how we handle a request, you can contact the Office of the Australian Information Commissioner (OAIC).

Data retention

We keep your personal information for as long as your account is active. When you delete your account, we delete or anonymise your personal information, except where we're required to keep certain records (for example, for tax or legal reasons) for a limited period. Backups containing data are cycled out on a rolling basis.

Security

We protect your information with encryption in transit (HTTPS) and at rest, access controls, and database-level isolation so your data stays separate from other accounts. No system is perfectly secure, but we take reasonable steps to protect your information and have a process to respond to any data breach in line with the Australian Notifiable Data Breaches scheme.

Children

BluePrint is a business tool and isn't intended for anyone under 16. We don't knowingly collect information from children. If you believe a child has provided us information, contact us and we'll remove it.

Changes to this policy

We may update this policy from time to time. When we make material changes, we'll update the date at the top and, where appropriate, notify you in the app or by email. Continued use of the service after changes means you accept the updated policy.

Contact us

Questions about this policy or your personal information? Email hello@blueprintpms.com and we'll help.