Privacy Policy

This policy explains what information Blueprint Business Systems™ collects when you use Blueprint, why we collect it, and how it is handled. It describes what Blueprint actually does today.

To create an account we collect your email address and a password, which is stored only in hashed form by our authentication provider. Inside Blueprint you may also save a preferred name and a business name used to personalise the product.

Blueprint stores the operating information you enter: properties, rates and fees, operating standards, team members and assignments, reservations, revenue entries, expenses and supply inventory. This data is stored in our authenticated cloud database and is scoped to your account, so other customers cannot read it.

Reservation records may include guest names you choose to enter. Please only enter guest information you are permitted to record, and only what you need.

When you purchase, we store commercial records: a customer record (name and email as provided at checkout), purchase records including amount, currency, status and timestamps, the resulting product entitlement, and payment-provider event records used to fulfil and audit the purchase.

Payments are processed by Stripe. Card details are entered directly with Stripe and are never sent to or stored by Blueprint. Blueprint does not store full card numbers, CVC codes or bank credentials. We receive and store only the transaction result and identifiers needed to grant access, support you and handle refunds.

We send account emails required to operate the Service, such as address verification and password-reset links. These are transactional messages, not marketing.

Optional promotional email consent is stored separately from your account and purchase records and defaults to off. We do not add purchasers to promotional email automatically. Legal, transactional and account communications are distinct from optional marketing.

We use a small number of providers to run Blueprint: a cloud database and authentication provider for account and business data, a payment provider (Stripe) for purchases, and application hosting. These providers process data on our behalf so we can deliver the Service.

AI-generated insights. To write Blueprint Insight summaries, Blueprint may send a limited set of your business information to an AI model provider through our application platform's AI service. What is sent is limited to figures Blueprint has already calculated (such as recorded revenue, expenses, occupancy and findings), the reporting period, and property names where needed. Guest names, guest emails, phone numbers and free-text notes are not sent, and neither are the CSV files you import. The provider processes this information on our behalf to return the summary. AI features may be optional, subject to usage limits, and not always available. AI output is informational decision support only, not tax, legal, accounting or investment advice.

Blueprint uses browser storage and cookies for essential functionality only: keeping you signed in, and temporarily holding Blueprint data in your browser before it is saved to your account. We do not run advertising trackers.

Access to your data requires authentication, and database access rules restrict every business record to the account that owns it. Administrative access is limited to server-side code and authorised personnel. No system can be guaranteed completely secure.

We keep your account and business data for as long as your account exists so the product remains usable. Purchase, entitlement and payment-event records are retained as business and accounting records after access ends. If you ask us to delete your account data, we will delete your business records and retain the minimum commercial records needed for accounting, tax and dispute purposes.

We do not sell your personal information.

You can view and edit your business information inside Blueprint at any time. For access, correction or deletion requests, or any privacy question, email support@blueprintbusinesssystems.com. We handle requests manually and will respond as promptly as we reasonably can, and we may need to verify that the request comes from the account holder.

If this policy changes, we will update the version and effective date shown on this page.