1. Introduction
This Privacy Policy ("Policy") describes how Blueprint Marketplace ("we", "us", or "Platform") collects, uses, discloses, and safeguards information when you access or use the website, APIs, dashboards, designer canvas, and any related services (collectively, the "Platform").
By creating an account, browsing Blueprints, deploying stacks, or using any feature of the Platform, you acknowledge that you have read and understood this Policy. If you do not agree with our practices, please do not use the Platform.
2. Information We Collect
Account Information: Name, email address, company name, job title, and authentication credentials (including SSO identifiers) provided when you register.
Workspace & Usage Data: Blueprint configurations, deployment metadata, workspace membership, billing history, and interaction logs generated as you use the Platform.
Technical Data: IP address, browser type, device identifiers, operating system, referring URLs, and timestamps collected automatically via cookies and similar technologies.
Third-Party Provider Data: Where you connect a hyperscaler or managed service account (AWS, Azure, GCP, etc.), we may receive limited account and billing metadata necessary to operate deployments on your behalf.
Support & Communications: Information you provide when contacting support, submitting feedback, or participating in surveys.
3. How We Use Information
We use collected information to: provision and operate your account and workspaces; process deployments and billing; monitor cost guardrails and platform performance; detect, investigate, and prevent fraud, abuse, or security incidents; communicate service updates, security notices, and marketing (where permitted); and comply with legal obligations.
We do not sell your personal information.
4. Legal Bases for Processing (EEA/UK Users)
Where applicable, we process personal data under the following legal bases: performance of a contract (providing the Platform), legitimate interests (security, fraud prevention, product improvement), consent (marketing communications, optional cookies), and legal obligation (tax, regulatory recordkeeping).
5. Sharing & Disclosure
We share information with: Publishers, to the extent necessary to fulfill a Blueprint deployment or license; Third-Party Services (hyperscalers, managed service providers) you configure within a deployment; service providers who support hosting, analytics, payment processing, and customer support under contractual confidentiality obligations; and authorities, where required by law, subpoena, or to protect the rights, property, or safety of the Platform, our users, or the public.
We do not permit these parties to use your personal information for purposes unrelated to the services they perform for us.
7. Data Retention
We retain personal information for as long as your account is active or as needed to provide the Platform, comply with legal obligations, resolve disputes, and enforce agreements. Deployment and billing records may be retained longer to satisfy audit, tax, and regulatory requirements. Upon account closure, data is deleted or anonymized within 90 days, except where longer retention is legally required.
8. International Data Transfers
Your information may be transferred to, stored, and processed in countries other than your own, including the United States and countries where our infrastructure or service providers operate. Where required, we rely on Standard Contractual Clauses or equivalent safeguards to protect data transferred from the EEA, UK, or Switzerland. A copy of applicable transfer mechanisms is available upon request.
9. Data Security
We employ administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit and at rest, access controls, and regular security assessments. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
10. Your Rights
Depending on your jurisdiction, you may have the right to: access the personal information we hold about you; request correction or deletion; object to or restrict certain processing; request portability of your data; and withdraw consent at any time where processing is based on consent.
EEA/UK/Swiss residents may exercise rights under GDPR Articles 15–21. California residents may exercise rights under the CCPA/CPRA, including the right to know, delete, correct, and opt out of the sale or sharing of personal information (which we do not engage in). To exercise any rights, contact us using the details in Section 13.
11. Children's Privacy
The Platform is not directed to individuals under 18. We do not knowingly collect personal information from children. If we learn that we have collected such information, we will delete it promptly.
12. Publisher & Third-Party Content
Blueprints and Apps published by third parties may collect or process data independently of this Policy. Review the applicable Publisher's terms and privacy practices before deploying their content. The Platform is not responsible for the privacy practices of independent Publishers or Third-Party Services.
13. Contact
Privacy & Data Protection: [email protected]
Data Protection Officer: [email protected] (Response within 30 days)
Help: help.company.com
Escalation: Submit a support ticket, contact [email protected], or file a complaint with your local data protection authority.
14. Changes to This Policy
We may update this Policy periodically to reflect changes in our practices, technology, legal requirements, or other operational reasons. Material changes will be communicated via email, in-app notification, or website banner at least 30 days before taking effect, except where required sooner by law. Continued use of the Platform after an update constitutes acceptance of the revised Policy.
