1. Introduction
This document explains how the Blueprint application (hereinafter referred to as the "Application") processes your personal data. We respect your privacy and process only the data that is necessary for the provision of our service.
2. What Data Do We Collect?
• Email address: We collect it at the time of payment via Stripe. It is used to send the access link to your workspace and for communication regarding your order. • Payment data: This data (card number, etc.) is not processed by us, but directly by Stripe, Inc. We do not have access to your complete payment data. • Input PDF documents: These are used exclusively for one-time analysis by artificial intelligence. Immediately after processing and text extraction, the PDF file is permanently deleted from our servers. The processed content is retained for a period of 120 days. • Technical: For security and attack prevention purposes, we may process the user's IP address for the period necessary to ensure service operation
3. Purpose of Processing and Legal Basis
We process data on the basis of the performance of a contract (in order to deliver the purchased product to you) and on the basis of our legitimate interest (securing the Application against misuse).
4. Third Parties
We do not sell your data. For the operation of the Application, we utilize the following verified partners: • Stripe: Payment processing. • Supabase: Database and storage of your workspaces (data is encrypted). • Vercel: App hosting • Resend: Sending transactional emails with access links. • OpenAI (API): Artificial intelligence models process text from your PDFs. According to their API terms and conditions, these models do not train their models on your data. Stripe, Resend and OpenAI are based in the USA. The transfer of personal data outside the EU is in these cases contractually covered by Standard Contractual Clauses (SCC) approved by the European Commission. Data processed through Vercel and Supabase remains within the EU (Frankfurt region).
5. Data Retention
• Workspace and diagrams: Retained for a period of 120 days from the date of creation, after which they may be deleted (in accordance with our ToS). • Full name and email address: Stored in our order database for the purposes of fulfilling legal obligations, accounting, and customer support.
6. Your Rights
You have the right to request access to your data, its rectification, erasure, or restriction of processing. If you wish to have your data deleted prior to the 90-day period, please contact us at: [Your E-mail].
7. Cookies
We use exclusively technical cookies necessary for the functioning of the Stripe payment gateway and system security. We do not use any marketing or third-party tracking cookies.
8. Contact
App operator: Michal Rezek (Business ID: 57482276, Registered address: Bazovského 7, 841 01 Bratislava, Slovak Republic) Email: [e-mail]