Privacy
Privacy Statement
Last updated: 19 October 2026 · Sold by Blueprint Labs Ltd, Auckland, New Zealand
The short version
We collect the minimum needed to sell and deliver licences. We comply with the New Zealand Privacy Act 2020. The App is offline-first — your documents are never uploaded to us.
What we collect and why
| Data | Why | Where it lives | Kept for |
|---|---|---|---|
| Email address (purchase) | Deliver licence, receipts, support, critical security notices | Our order records, encrypted (AES-256-GCM), plus the payment provider. Alongside it we store a keyed pseudonymous lookup tag — a code calculated from your address using a secret key we hold, so support can find your order without decrypting it. Because the key is required to calculate the tag, someone who obtained the database alone could not work back to your address by testing likely ones | Life of licence + 7 years (tax records) |
| Payment details | Processing payment | Payment provider only (Paddle) — we never see card numbers | Per provider policy |
| Campaign source, landing-page path and referring hostname | Understand which marketing sources lead to checkout and sales | Your browser tab's session storage and Paddle transaction metadata. We do not capture the full referring URL or additional query parameters | Browser attribution is used for up to 24 hours; transaction metadata follows Paddle's retention policy |
| Checkout reminder preference and delivery status | Send one reminder for an eligible abandoned Founder checkout, and prevent repeat or unwanted reminders | Paddle supplies the email address and opt-in status; Resend delivers the reminder. Our separate reminder records in Cloudflare D1 contain a keyed email lookup tag and delivery or unsubscribe status, not a readable email address | Retained to prevent repeat reminders and honour opt-outs; contact us to request deletion |
| Interest list (email; optional name and use case) | Tell you about future team packs and, only with your opt-in, send product email | Our interest-list database (Cloudflare D1) + transactional email provider (Resend) for notifications. Held separately from order records | Until you ask us to delete it |
| Licence record (key ID, Founder number, edition, seats, issue date, order reference) | Deliver your licence, reissue it if you lose it, and handle refund requests | Our order records | Life of licence + 7 years (tax records) |
| Bot-check result (Cloudflare Turnstile) | Stop automated scripts taking Founder slots | Cloudflare. We keep only a hash of the single-use token, to stop it being replayed. The token is random and is not derived from anything about you | 3 days |
| Rate-limit counter | Stop one source opening unlimited checkouts | Our order database. We do not store your IP address. We store a counter against a keyed hash of it, using a random key that changes daily and is then deleted — after which the counter cannot be linked back to any address, including by us | 3 days |
Licence keys are verified on your Mac. The App does not require an account, does not create device identifiers, and does not report activations to us.
What we deliberately do not keep
We do not store your purchase email address in readable form, and we do not keep a copy of the licence email we sent you or of your full licence key. When you ask us to resend a licence, we rebuild that email from the encrypted record and the licence details at the moment we send it — so there is no readable archive of licence emails to lose. Your download links are signed and expire after 72 hours; ask us and we will issue a fresh one.
What we do NOT collect
Your documents (the App does not upload them), analytics on your document contents, advertising identifiers. We do not sell personal information to anyone.
Marketing email and the launch interest list
If you register your interest on our website we store your email address (plus any name or use case you choose to share) so we can tell you when Project Blueprint launches. We send you marketing email only if you tick the opt-in box, always with one-click unsubscribe, per the Unsolicited Electronic Messages Act 2007 (NZ). Registering without ticking the box adds you to the list for our records but does not opt you in to marketing email. Every marketing email includes an unsubscribe link, and you can also unsubscribe or ask us to delete your registration at any time via support@blueprintformac.com. Transactional email (receipts, licence keys, security notices) is not marketing.
Abandoned checkout reminders
If you opt into email from us during Paddle checkout and leave an eligible Founder checkout unfinished, we may send one reminder after about an hour. We check that the checkout was not paid and that Founder licences remain available. The return link starts a new checkout and checks availability again; it does not keep an expired reservation open. Every reminder includes an unsubscribe link. You can also stop reminders by contacting support@blueprintformac.com.
Your rights
You may request access to, or correction of, your personal information at support@blueprintformac.com. You may request deletion; we will delete everything not legally required for tax and accounting records. Complaints: Office of the Privacy Commissioner, privacy.org.nz.
Processors we use
Payment and merchant of record (Paddle), email forwarding (Namecheap), website hosting, order and interest-list storage, bot protection (Cloudflare), and email delivery for licences, notifications and opted-in checkout reminders (Resend). Each processes data only to provide their service.