Privacy Policy

Last updated: March 14, 2026

What is Blueprnt?

Blueprnt ("we", "our", "the Service") provides AI-powered agents for small construction businesses. Our agents help manage email, scheduling, quoting, and other business operations on your behalf. Blueprnt is operated from the United States.

Google API Scopes and Data Access

When you connect your Google account, Blueprnt requests the following specific OAuth scopes:

  • gmail.readonly -- Allows your agent to read your incoming email. Used to identify new leads, customer replies, and business-relevant messages. Your agent does not modify, delete, or archive any email.
  • gmail.send -- Allows your agent to send email on your behalf. Used only when you explicitly authorize a specific email to be sent (e.g., a follow-up to a lead or a reply to a customer). Your agent never sends unsolicited email.
  • openid, email, profile -- Used to sign you in and identify your account. We store your email address and display name.

How We Use Google User Data

Google user data accessed through the Gmail API is used exclusively to provide the Blueprnt service to you:

  • Email content is read by your AI agent to identify leads, extract customer details, and surface action items. Structured data extracted from your emails (such as names, dates, phone numbers, and dollar amounts) is stored in a database associated with your account and is only accessible to your agent. This data is used to provide continuity across conversations so your agent can reference prior context when helping you.
  • Email sending is used only to send messages you have reviewed and approved through the Blueprnt interface.

We do not use Google user data for advertising, market research, or any purpose unrelated to providing the Blueprnt service to you.

Google API Services User Data Policy

Blueprnt's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

  • We only use Google user data to provide and improve the Blueprnt service for you
  • We do not transfer Google user data to third parties except as necessary to provide the service (see "Subprocessors" below)
  • We do not use Google user data for serving advertisements
  • We do not allow humans to read your Google user data unless you give us explicit permission, it is necessary for security purposes, or it is required by law
  • We do not use Google user data to train generalized AI or machine learning models

Data Storage and Security

OAuth refresh tokens and access tokens (used to access your Google account) are stored in our database hosted on Supabase (PostgreSQL). We never store your Google password. Facts extracted from your email and conversations are stored as structured data in the same database, associated with your account.

Subprocessors

We use the following third-party services to operate Blueprnt:

  • Supabase -- Database hosting (stores tokens and extracted facts)
  • Vercel -- Web application hosting
  • Anthropic -- AI model provider. Email content is sent to Anthropic's API for real-time processing to provide core agent functionality (e.g., reading emails, drafting replies, extracting business details). Under Anthropic's commercial API terms, inputs and outputs are automatically deleted within 30 days and are not used for model training. See Anthropic's privacy policy for details.
  • Google Cloud -- Embedding generation for semantic search

We do not sell, rent, or share your data with any other third parties.

Data Retention

We retain your data for as long as your account is active. OAuth tokens are refreshed automatically and replaced; expired tokens are deleted. If you revoke access or request deletion, we will remove your tokens and all stored data associated with your account within 30 days.

How to Revoke Access and Request Deletion

You can revoke Blueprnt's access to your Google account at any time:

  1. Go to Google Account Permissions
  2. Find "Blueprnt" in the list
  3. Click "Remove Access"

To request complete deletion of your data, email contact@myblueprnt.com. We will confirm deletion within 30 days.

Contact

For privacy questions or concerns, contact us at contact@myblueprnt.com.

← Back to Blueprnt