Privacy Policy
This policy explains how we collect, use, retain, and handle requests concerning account, 9x9, billing, and related data.
Data controller
Blueprint Collective Inc
Representative: Yui Kato
Address: 150-0044
Tokyo Shibuya-ku
8F MIEUX Shibuya Building, 5-3 Maruyamacho
Japan
Information we collect
- Account information, including your email address, user ID, and authentication provider.
- Sheets, revision history, images, sharing settings, MCP connection settings, and operation records that Pro users choose to sync to the cloud.
- Subscription status, product, renewal date, and customer or subscription identifiers issued by our payment provider.
- Device and browser information, IP address, usage events, errors, access logs, and other information needed to operate and secure the service.
- In the signed-in Web app, usage events are linked to a random identifier stored in your browser’s local storage.
- Support requests, information needed to verify your identity, and our response history.
The contents of Free users’ 9x9 sheets and their on-device images are not cloud-synced and remain stored on their device.
Site analytics (public pages)
On the public pages, before you sign in, we record page views and button clicks together with the page path, language, UTM campaign parameters from the link you arrived by, the referring site’s domain, and a random identifier generated only for that page view. We do not store or read anything on your device: no cookies, no local storage. Your IP address is used briefly for abuse protection and is not stored with the event. We use this to understand how the site is used and which campaigns work. For EU and UK visitors, our legal basis is legitimate interest. We retain these events for 13 months. To object, contact us using the details below.
How we use information
We use information to provide the service, authenticate users, operate Pro features, synchronize and restore data, enable sharing, manage subscriptions and billing, provide support, prevent misuse, investigate failures, improve quality, compile usage statistics, comply with law, and exercise or defend legal rights.
Processors and external services
We use our systems hosted on Cloudflare for authentication, delivery, and storage; Resend for email delivery; and Stripe for web payments. Stripe, not the operator, handles complete payment card details. These providers may process information outside Japan.
Disclosure to third parties
We do not sell or provide personal information to third parties except where required by law, necessary to protect life or property, connected with a business succession, or authorized by you. If you enable a sharing link or MCP connection, we provide the required data to the destination you select, based on your instructions.
Retention and security
We retain information only as long as reasonably required to provide the service, perform our contracts, maintain revision history, prevent fraud, resolve disputes, and meet legal obligations. Pro revision history is retained for up to one year or 500 revisions per sheet, whichever limit is reached first. We apply reasonable safeguards, including access control, authentication, protected communications, separation of privileges, and backups.
Your access, correction, restriction, and deletion requests
You or an authorized representative may contact us to request notice of purpose of use, access, correction, supplementation, deletion, restriction or cessation of use, erasure, or cessation of third-party disclosure regarding retained personal data. Please identify the account, describe the request, and provide contact details. We may request additional identity verification to prevent impersonation.
Completing a request may make your account, cloud data, sharing links, or MCP connections unavailable. If information cannot be deleted immediately because of legal, accounting, billing, fraud-prevention, or rotating-backup requirements, we will explain the reason or applicable handling.
Changes to this policy
If we make a material change to our data practices, we will provide notice through the service or another reasonable method, together with the effective date.
Contact
legal@blueprintco.io
Phone: The telephone number will be provided without delay by email upon request. Contact legal@blueprintco.io.
Language
This English version is provided for convenience. If it conflicts with the Japanese version, the Japanese version prevails to the extent permitted by applicable law.