Privacy Policy

Information We Collect

ElevatorBlueprint collects the following information:

• Account information - email address and password, provided when you create an account.
• Organization & building data - building names, addresses, elevator details, compliance events, and documents you upload to the dashboard. This data is associated with your organization and is not shared with other users.
• Payment information - processed securely by Stripe. We do not store credit card numbers on our servers. Stripe's privacy practices are governed by their privacy policy.
• Usage analytics - anonymous, aggregate usage data to understand which features are most useful. No personally identifiable information is collected through analytics.

How We Use Your Information

• Account data is used to authenticate you and associate your dashboard data with your organization.
• Building and document data is used solely to provide the dashboard functionality you've requested (compliance tracking, contract analysis, document storage).
• Email addresses may be used to send transactional notifications (password resets, billing confirmations) and, with your consent, product updates.
• We do not sell, rent, or share your personal information or building data with third parties.
• We do not use your uploaded documents or building data to train AI models.

Data Storage & Security

Your data is stored securely using Supabase (hosted on AWS infrastructure) with row-level security policies ensuring users can only access their own organization's data. All data is encrypted in transit (TLS) and at rest.

Uploaded documents are stored in Supabase Storage with access controls tied to your organization. Documents are not publicly accessible.

Third-Party Services

We use the following third-party services:

• Supabase - database, authentication, and file storage
• Stripe - payment processing for paid subscriptions
• Cloudflare - hosting, CDN, and DDoS protection
• Resend - transactional email delivery

Data Retention

Your account data and dashboard content are retained for as long as your account is active. If you delete your account or request data deletion, we will remove your personal information and building data within 30 days. Aggregate, anonymized analytics data may be retained indefinitely.

Your Rights

You have the right to:

• Access and export your building data and documents at any time
• Request correction of inaccurate personal information
• Request deletion of your account and all associated data
• Opt out of non-essential communications

To exercise any of these rights, email [email protected].

Cookies

The ElevatorBlueprint dashboard uses essential cookies for authentication (session management). We do not use tracking cookies or third-party advertising cookies. No cookie consent banner is required because we only use strictly necessary cookies.

Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated revision date. Continued use of the Service after changes constitutes acceptance of the updated policy.

Contact

Questions about this privacy policy? Email [email protected].