Privacy Policy
This policy explains what personal data bluprnts ltd ("we", "us"), trading as bluprnts, collects when you use our financial-forecasting application, why we collect it, and the rights you have. We are the data controller for that personal data. You can reach us at privacy@bluprnts.ai.
The short version
- We collect the account details you register with and the business/financial figures you enter to build your forecasts.
- We use trusted providers to run the app: Auth0 (login), Stripe (payments) and, only with your consent, PostHog (analytics).
- We never sell your data, and we never use the financial figures you enter to train advertising or third-party models.
- You can access, correct, export or delete your data at any time — just contact us.
1. Data we collect
Information you give us
- Account & identity — your name, email address and job title, managed through our login provider, Auth0.
- Your business data — the company details and financial figures you enter (costs, sales, employees, financing, scenarios and the forecasts derived from them). This is commercially sensitive information and we treat it accordingly.
- Billing — when you subscribe, your payment is handled by Stripe. We store a subscription status and a Stripe customer reference; we never see or store your full card details.
- AI features — if you use our AI assistant or AI reports, the content of your requests is sent to our AI provider (Anthropic) to generate a response. We do not use this to train AI models.
- Support — any messages you send us.
Information collected automatically
- Essential technical data — a login session and basic technical information (such as IP address and browser type) needed to run the app securely.
- Product analytics — only if you consent, we use PostHog to understand how the app is used (pages visited, features used). We do not send your name, email or any financial figures to our analytics.
2. Why we use it, and our lawful basis
| Purpose | Lawful basis (UK GDPR) |
|---|---|
| Providing the app, your account and your forecasts | Performance of a contract |
| Taking payment and managing your subscription | Contract, and legal obligation (tax/accounting records) |
| Keeping the service secure and preventing abuse | Legitimate interests |
| Product analytics to improve the app | Consent (which you can withdraw at any time) |
| Responding to support requests | Legitimate interests |
3. Cookies and analytics
We use a small number of essential cookies/storage needed to keep you logged in and run the app — these do not require consent. We use non-essential analytics(PostHog and Google Analytics) only after you accept it in our consent banner. Nothing is loaded and no analytics cookie is set until you do.
You can change your choice at any time — , or use the consent banner inside the app. We will ask you again periodically. This website and the app ask separately.
4. Who we share it with
We use the following processors to provide the service. Each handles data on our instructions under a data-processing agreement. Our current list is on our sub-processors page.
| Provider | Purpose | Location |
|---|---|---|
| Auth0 (Okta) | Authentication / login | EU |
| Stripe | Payments & subscriptions | US / EU |
| PostHog | Product & website analytics (with consent) | EU |
| Google Analytics (Google) | Website analytics (with consent) | US / EU |
| Anthropic | AI assistant & AI reports — only if you use them | US |
| Sentry | Error monitoring — technical fault reports | EU |
| Render | Website & application hosting | EU (Frankfurt) |
| MongoDB Atlas | Database | EU (Frankfurt) |
| Xero | Accounting integration — only if you connect it | US |
We do not sell your personal data or share it for third-party advertising.
5. International transfers
Where a provider processes data outside the UK/EEA (for example, Stripe or Anthropic in the US), we rely on appropriate safeguards such as UK International Data Transfer Agreements or Standard Contractual Clauses to protect it.
6. How long we keep it
We keep your account and business data for as long as your account is active. If you close your account we delete or anonymise your personal data within 12 months, except where we must keep certain records (such as billing records) to meet legal obligations.
7. Security
Access to the app is protected by authenticated logins, encrypted connections (HTTPS) and access controls that limit each user to their own company's data. No system is perfectly secure, but we take appropriate technical and organisational measures to protect your information.
8. Your rights
Under UK GDPR you have the right to access, correct, delete, export or restrict the use of your personal data, and to object to certain processing or withdraw consent. To exercise any of these, contact us at privacy@bluprnts.ai. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.
9. Children
The service is intended for business use and is not directed at children. We do not knowingly collect data from anyone under 16.
10. Changes to this policy
We may update this policy from time to time. When we make material changes we will update the date above and, where appropriate, notify you in the app.
11. Contact
bluprnts ltd
86-90 Paul Street, London EC2A 4NE
privacy@bluprnts.ai
ICO registration number: [ICO REGISTRATION NUMBER]