Legal

Privacy Policy

Last updated August 11, 2026

1. What We Collect

Account info: name, email, password (stored as a one-way hash — we never see or store your actual password).
Business info: what you tell us in your business profile, assessment, roadmap, My Blueprint, and business-builder tools (CRM, offers, SOPs, and similar).
Session & billing info: session registrations and attendance, and — if you have a paid membership — billing status and payment-method display details (card brand/last 4) from our payment processor. We never store your full card number.
Blueprint AI conversations: your messages and the business context used to answer them.
Usage info: basic activity timestamps (e.g. last active date) used to power features like progress tracking — not detailed page-by-page tracking.

2. How We Use It

To run Blueprint: score your assessment, generate and track your roadmap, power Blueprint AI with your real business context, process billing, and show your facilitator or sponsoring organization the information your program agreement allows. We don't sell your data, and we don't use your business data to train third-party AI models.

3. Who Can See What

You: everything you've entered.
Your facilitator (if you have one): your progress, scores, roadmap, and any notes they or an admin have written — never your Blueprint AI conversations, which are private to you.
Platform admins: the same access as a facilitator, plus account and billing administration, used only to operate and support the platform.
A sponsoring organization (if you joined through one): aggregate statistics about all their participants by default. Your individual name and record are only shown to them if your program's data-sharing agreement explicitly allows it — this is a setting we control, not something the organization can turn on unilaterally.
Other members: never. Every business, assessment, roadmap, AI conversation, and billing record is isolated to the account (and program) it belongs to.

4. Third Parties We Use

Stripe for payment processing (we never touch your raw card number).
Anthropic for Blueprint AI responses — your message and relevant business context are sent to generate a reply, per Anthropic's own data-handling terms.
An email provider for account and password-reset emails.
We don't sell or rent your data to advertisers, data brokers, or anyone else.

5. How Long We Keep It

Your business's work — assessments, roadmap, My Blueprint, tools — stays intact even if your membership lapses or you stop paying, so it's there when you return; we don't delete a business's work just because a subscription ended. If you close your account entirely, contact us via Support and we'll delete your personal data other than what we're required to keep for legal, tax, or fraud-prevention reasons.

6. Your Choices

You can review and edit most of your data directly in Blueprint (business profile, roadmap answers, My Blueprint). Email us via Support to request a copy of your data, ask us to delete an account, or ask a question about anything on this page.

7. Security

Passwords are hashed, never stored in plain text. Payment details are handled by Stripe, not stored on our servers. Access to your business's data is checked on every request, not just hidden from the menu.

8. Changes to This Policy

We'll post updates here with a new "Last updated" date. Material changes affecting how your data is used will be communicated more directly (e.g. by email) where practical.

9. Contact

Questions about your data? Reach us from the Support page.