Privacy Policy

1. Introduction

Blueprint ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the Service.

2. Information We Collect

2.1 Personal Information You Provide

We collect information you voluntarily provide when you:

• Register for an account: Name, email address, password
• Set up your profile: Profile picture, display name, preferences
• Subscribe to paid plans: Billing information, payment method details (processed by Stripe)
• Create studios and projects: Studio names, project titles, scripts, descriptions, tags
• Upload content: Thumbnails, images, and other media files
• Contact support: Support tickets, help center posts, communications

2.2 Information Collected Automatically

When you access our Service, we may automatically collect:

• Device Information: Browser type, operating system (anonymized, via Vercel Analytics)
• Usage Data: Page views, performance metrics (anonymized, aggregated)
• Authentication Cookies: Session cookies required for login and security

We use Vercel Analytics, which is privacy-friendly and does not track individual users, use cookies for analytics, or collect personal data.

2.3 Third-Party Information

When you connect your YouTube account, we may receive information from YouTube API Services, including channel information, video metadata, and playlist data. This is governed by YouTube's Terms of Service and Google's Privacy Policy. You can revoke access at any time through your Google Account settings at https://security.google.com/settings/security/permissions.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our Service
• Create and manage your account
• Process transactions and send related information
• Send administrative information, such as updates, security alerts, and support messages
• Respond to your comments, questions, and customer service requests
• Monitor and analyze usage patterns and trends
• Detect, prevent, and address technical issues and fraudulent activity
• Personalize your experience and deliver content relevant to your interests
• Comply with legal obligations

4. Information Sharing and Disclosure

We may share your information in the following circumstances:

4.1 With Your Consent

We may share your information when you give us explicit consent to do so.

4.2 With Studio Team Members

When you join a studio, other members of that studio may see your name, profile picture, and contributions to shared projects. Studio owners can see member activity within their studio.

4.3 With Service Providers

We share information with third-party service providers who perform services on our behalf:

• Supabase: Database hosting and authentication
• Stripe: Payment processing
• Vercel: Application hosting
• YouTube API Services: Channel integration features

4.4 For Legal Purposes

We may disclose your information if required by law, regulation, legal process, or governmental request, or when we believe disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a government request.

4.5 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our Service of any change in ownership.

5. Data Retention

We retain your information for as long as your account is active or as needed to provide you the Service. We will retain and use your information as necessary to:

• Comply with our legal obligations
• Resolve disputes
• Enforce our agreements
• Maintain backups for disaster recovery

When you delete your account, we will delete your personal information within 30 days, except for information we are required to retain for legal or legitimate business purposes.

6. Data Security

We implement appropriate technical and organizational security measures to protect your information, including:

• Encryption of data in transit (TLS/SSL)
• Encryption of sensitive data at rest
• Regular security assessments
• Access controls and authentication requirements
• Secure password hashing

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee its absolute security.

7. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal information:

7.1 Access and Portability

You can request a copy of the personal information we hold about you. We will provide this in a commonly used, machine-readable format.

7.2 Correction

You can update or correct your account information at any time through your account settings.

7.3 Deletion

You can request deletion of your account and personal information. Some information may be retained as required by law or for legitimate business purposes.

7.4 Opt-Out

You can opt out of receiving promotional communications by following the unsubscribe instructions in those messages. You may still receive transactional or account-related emails.

7.5 Revoke YouTube Access

You can revoke our access to your YouTube data at any time by visiting Google's security settings at https://security.google.com/settings/security/permissions and removing Blueprint's access.

8. Cookies and Tracking Technologies

We use minimal cookies and privacy-friendly analytics:

• Essential Cookies: Required for the Service to function (authentication, security). These are strictly necessary and do not require consent.
• Analytics: We use Vercel Analytics, a privacy-friendly analytics service that does not use cookies, does not track personal data, and does not require consent under GDPR/CCPA. It only collects anonymous, aggregated data about page views and performance.

We do not use third-party tracking cookies, advertising cookies, or cross-site tracking. You can control essential cookies through your browser settings, but note that disabling them may prevent you from logging in.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your own. These countries may have different data protection laws. By using our Service, you consent to the transfer of your information to these countries. We take steps to ensure that your information receives an adequate level of protection in the jurisdictions in which we process it.

10. Children's Privacy

Our Service is not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13. If you become aware that a child has provided us with personal information, please contact us. If we become aware that we have collected personal information from a child under 13 without verification of parental consent, we will take steps to remove that information.

11. Third-Party Links

Our Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to read the privacy policies of any third-party sites you visit.

12. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information we collect, use, disclose, and sell
• Right to request deletion of your personal information
• Right to opt-out of the sale of your personal information (we do not sell personal information)
• Right to non-discrimination for exercising your privacy rights

13. European Privacy Rights (GDPR)

If you are in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR):

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Rights related to automated decision-making

Our legal basis for processing your information includes: contract performance, legitimate interests, legal obligations, and your consent.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. For significant changes, we will provide a more prominent notice (including, for certain services, email notification of privacy policy changes).

15. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us through:

• Our Help Center support ticket system
• The contact information provided in the Service

16. YouTube API Services

Our Service uses YouTube API Services. By using features that connect to YouTube, you agree to be bound by:

• YouTube Terms of Service: https://www.youtube.com/t/terms
• Google Privacy Policy: https://policies.google.com/privacy

We access YouTube data only to provide the features you request (such as displaying channel information and managing content). We do not store YouTube data longer than necessary to provide our Service.