Privacy Policy

Last updated: 2026-08-24

This policy explains how Blueprint Software Development Inc. ("Blueprint", "we", "us") handles personal information in the Blueprint portal at blueprintsoftware.ca/blueprint.html and in the Blueprint iOS app. Blueprint is a self-hosted operations portal used by staff of the companies that subscribe to it. Blueprint Software Development Inc. is based in Canada.

What we collect

Blueprint collects only the personal information needed to operate the portal:

• Name (first and last)
• Email address
• Phone number, when provided
• User and account identifiers
• Data you enter into Blueprint forms
• Files and documents you attach to Blueprint records
• Kudos, notes, announcements, and alerts you author inside the portal
• Standard request diagnostics recorded by the server, including request timestamp, IP address, and user agent

The iOS app is a native container around the same portal. It does not add its own analytics, telemetry, advertising identifiers, or third-party SDKs beyond Apple's own frameworks.

What we do not collect

• No advertising identifiers, IDFA, or cross-app tracking
• No third-party analytics or marketing pixels
• No cross-site tracking or linkage to advertising networks
• No sale of personal information

How we use it

• Authentication and account access
• Operating the portal features you use (jobs, staff directory, forms, documents, kudos, announcements, and alerts)
• Sending account-related messages, including invitations and password-reset emails
• Security, including account lockout, session revocation, and audit logging
• Responding to support requests

Who we share it with

We do not sell personal information. We share personal information only with service providers that are necessary to operate Blueprint (for example, the mail service that delivers invitations and password-reset emails), and only to the extent needed to provide that service. We may disclose personal information when required by a lawful request from an authority with jurisdiction over Blueprint.

Account deletion

You can permanently delete your Blueprint account from the Account section of the Blueprint portal, and — once the Blueprint iOS app is available on your device — from the Account entry in the app menu. You can also request deletion by emailing info@blueprintsoftware.ca.

When you confirm deletion:

• The following personal information is irreversibly erased: your name, email address, phone number, date of birth, home address, emergency contact, staff notes, profile photo, birthday, external-integration (Jobber) username, and any per-user Blueprint UI overrides, and any Blueprint account password. Your account record is marked deleted and the email address is released.
• Sign-in sessions and refresh tokens are revoked, and their recorded IP addresses and user-agent strings are erased. Pending password-reset requests are consumed and their recorded IP addresses are erased. Every account-state flag — including multi-factor-authentication opt-in, email verification, forced-password-reset flag, failed-login counter, account-lockout timer, invitation timestamp, and last-login timestamp — is reset, and any residual cross-linkage between the deletion account and its staff record is removed.
• Login-attempt telemetry associated with your email in your organisation is scrubbed: the email is replaced with a non-identifying tombstone address and the recorded IP address is erased.
• Personal metadata attached to your prior audit-log entries (IP addresses and free-form metadata) is erased. The audit-log entries themselves are retained, without personal information, so your organisation's compliance trail remains intact.
• Every Blueprint invitation record to your email address in your organisation is deleted — including invitations that were already accepted. Invitations to other addresses or in other organisations are untouched.
• Banking information and your personal pay-rate profile (staff pay-rate history) are hard-deleted.
• If your email address appeared as your organisation's owner-contact or billing-contact email in Blueprint's company record, that copy is replaced (owner-contact) with another active owner in your organisation, or cleared (billing-contact). This applies only to the Blueprint company record; it does not affect any Blueprint licensing organisation record, which is kept as a separate business record.
• Non-identifying tenant business records that your organisation owns and operates from — including time entries, timesheet approvals, training completion records, skills records, scheduled work, and job records — remain in your organisation's Blueprint account, and their references to your former user id become inactive.
• Some legacy portal content created before this feature was introduced may display an author or acknowledgement name that resembles yours. Because those older records were stored as free-text names rather than stable user identifiers, we cannot safely alter them without risking corruption of another user's attribution. New records use stable identifiers and are erased with your account. This limitation applies to older announcements, alerts, kudos, and infraction rows only.
• No personal or business data is retained because of a legal requirement — Blueprint Software Development Inc. has none.

Security

• All traffic to Blueprint uses HTTPS.
• Passwords are stored as one-way hashes, not in plain text.
• Sessions and refresh tokens can be revoked and are rotated on use.
• Blueprint uses redaction and bounded logging controls designed to keep passwords, activation codes, session tokens, and provider secrets out of application logs.

Your rights

You can request access to, correction of, or deletion of your personal information by emailing info@blueprintsoftware.ca.

Changes to this policy

If we make material changes to this policy, we will update the "Last updated" date at the top of this page and, where appropriate, notify account holders through the portal.

Contact

Blueprint Software Development Inc.
Canada
info@blueprintsoftware.ca