PRIVACY NOTICE · VERSION 2026-10-29-customer-booking

BluePetal Studio Privacy Notice

Effective date: October 29, 2026

This Privacy Notice explains how William Dunn, a sole proprietor operating as BluePetal Studio (“BluePetal,” “we,” “us,” or “our”), collects, uses, discloses, retains, and protects information when account holders, prospective customers, and visitors use our platform and websites.

1. Information we collect and where it comes from

Information you provide: Names, business names, email addresses, telephone numbers, website addresses, account credentials in hashed form, onboarding answers, website content, service areas, images, support requests, and publishing settings. If you ask us to review a public website that you own or are authorized to use, we may retrieve its public pages and images to prepare a design preview.

Information submitted through customer websites: Visitors may provide contact details, location, requested offering, project notes, and answers to a business's custom form questions. The customer business determines the questions it asks and how it uses the resulting lead information.

Information received from service providers: Stripe provides subscription and transaction identifiers, payment status, and billing details needed to administer a subscription. BluePetal does not receive full payment-card numbers. Hosting, email, and security providers may provide delivery, diagnostic, and security information.

Information collected automatically: Limited technical information needed to operate and secure the service may include IP address, browser or device information, request times, diagnostic logs, and security events. Built-in customer-site measurement records aggregate page-view counts, page paths, and referring website hostnames without visitor tracking cookies or retained visitor IP addresses. We may also receive information from public sources when an account holder or authorized operator asks us to import public business content.

Do not submit government identification numbers, payment-card details, health information, financial account information, biometric information, or other sensitive personal information through free-text fields or website forms unless the applicable business specifically requests it and has confirmed that its use of BluePetal supports that information.

The main categories, sources, purposes, and retention criteria are summarized below. Section 7 explains cleanup in more detail.

Online booking: When a business enables booking, we store the customer’s name, email, optional phone, contact permission, service selection and appointment times as linked CRM customer and job records. We store a hash of the private booking-link credential and a request fingerprint to prevent duplicate submissions. Anyone holding the private link can view or change an eligible appointment; the link is shown to the customer and is not automatically emailed. Availability exposes bookable services and open times, not customer details or private worker names. These records follow the CRM retention and account-deletion rules below. No external calendar provider or payment processor receives booking data through this feature.

Address suggestions: When you type in the CRM address suggestion field, the typed address is sent through our server to Photon (operated by komoot, using OpenStreetMap data) to find matching addresses. Customer names, emails, private notes, and separate apartment/unit details are not included in the lookup. You can choose manual entry without suggestions. A selected address and its map coordinates are stored in your private customer record. Map matches do not certify postal deliverability.

Private CRM records: When you use CRM, we store customer and business contact details, private notes, follow-up dates, opportunities and values, tasks, job records and private job notes, dispatch team names and roles, assignment schedules and time zones, owner-entered public website drafts, pricebook entries, job pricing, invoice details, owner-recorded payment records, actual expense and labor records, and links to website inquiries to provide your business workspace. CRM records are private and are not sent to an AI provider by these CRM modules. Only public facts you explicitly enter in Website content drafts can be imported into Studio; website approval and publication remain separate owner actions. Customer contact details, private notes, team assignments and schedules are not copied into the website draft. Your business controls the information it enters and its use of that information. Owners can grant team members a separate Field session for assigned work. Field access uses hashed one-use credentials and revocable sessions; assigned workers can see customer call details, location, field instructions and work notes, but not private owner notes or financial reports. This does not create employee access to the owner dashboard. Customer-invoice payment records describe payments entered by the owner; these modules do not process those payments or verify bank receipt. Do not enter full card numbers or other payment credentials in notes or references. Disabling a module or downgrading a plan does not delete CRM records; they remain available to the account owner for viewing and export while the workspace is retained. Account deletion and scheduled workspace cleanup described in section 7 still apply. CRM contact records are distinct from original form inquiries.

2. How we use information

We use information to create and administer accounts; generate, host, and publish websites; process and confirm subscriptions; deliver verification and operational emails; route leads to the appropriate business; provide support; prevent fraud and abuse; secure and troubleshoot the service; maintain audit records; understand aggregate product usage; consider product feedback; comply with law; and enforce our Terms of Service. We do not use nonpublic Customer Content or lead information to train general-purpose AI models or in public marketing examples without separate permission. Support personnel may review Customer Content when the customer requests help or when reasonably necessary to investigate abuse or a security issue, as described in the Terms.

3. Legal and operational grounds

We process information as needed to provide the service requested under our agreement, to comply with legal obligations, with consent where required, and for legitimate operational interests such as security, support, billing, fraud prevention, and product reliability.

4. Information sharing

We disclose information only as needed to operate the service, at your direction, or as required by law. Current categories of recipients include Vercel for application hosting, delivery, and public image storage; Neon for database services; Stripe for billing and subscriptions; Resend for transactional email; and domain or DNS providers involved when a customer connects a domain. We may add or replace providers as the platform develops and will review their use of information against this Notice and applicable agreements. Providers may process information in the United States or other locations where they operate. Contact us for information about the providers involved in a particular request.

We may also disclose information to professional advisers, auditors, insurers, law enforcement, regulators, or courts when reasonably necessary; to investigate fraud, security threats, prohibited content, or violations; or as part of a merger, financing, acquisition, reorganization, or sale of assets. We do not sell personal information or share it for cross-context behavioral advertising through BluePetal's built-in service. We do not use lead information for unrelated advertising. A customer business may use other tools on its website, which it must disclose separately. If our sale or advertising-sharing practices change, we will update this Notice and provide legally required choices before the change takes effect.

5. Customer and visitor roles

BluePetal acts as the business or controller, as applicable, for its own account, billing, security, support, and platform operations. For lead information collected through a customer's published website, the customer generally acts as the business or controller and determines the purposes of processing. BluePetal processes that information to host forms, store submissions, deliver authorized notifications, and provide related service functions under the customer's use of the platform, subject to applicable law and the parties' agreement. Each customer must identify its business to visitors, provide appropriate privacy disclosures, obtain required consent, respond to requests concerning its own practices, and use leads as permitted by law and the visitor's expectations. BluePetal's Privacy Notice does not replace the customer's notice or determine how the customer may use lead information. Questions about a lead should first be directed to the business whose website collected it.

6. Cookies and analytics

BluePetal uses essential cookies for account and operator sessions, support access, and connection security; these are needed for the account to function. Some dashboard drafts may be saved in your browser's local storage until you submit or clear them. Built-in customer-site traffic reporting records aggregate counts, page paths, and referring website hostnames without visitor tracking cookies or retained visitor IP addresses. Stripe may use cookies on its own hosted checkout and subscription-management pages under its own notice. The BluePetal application does not currently include third-party advertising pixels, session replay, or cookie-based visitor analytics. Customer-added embeds or tools may have their own practices and must be disclosed by that business. If additional analytics or advertising technologies are introduced by BluePetal, this notice and any required consent or opt-out controls will be updated before use.

On the BluePetal private preview, we also count visits, preview creation, and clicks toward signup by broad arrival source (LinkedIn, search, other, or unattributed). These aggregate activity counts do not identify unique visitors or establish that a sale occurred. We do not include preview form answers, full referring URLs, visitor identifiers, or tracking cookies in these counts. We honor browser Global Privacy Control and Do Not Track signals for this optional measurement. Temporary IP-derived security keys may be used to limit abuse, separately from the aggregate report. Hosting providers may maintain operational request logs. We retain aggregate counts for campaign analysis without linking them to an account or individual.

7. Retention

We retain active account and website information while the service is provided. When paid access actually ends after cancellation, a guarded cleanup job becomes eligible to remove workspace content after 30 days. It removes hosted site drafts and versions, leads, built-in analytics, uploaded images, and domain connections, or de-identifies information where appropriate. This is a period before scheduled cleanup, not a restoration guarantee; provider backup and history windows differ and may be shorter. Download content you need before access ends. Limited account, billing, agreement, security, fraud-prevention, and legal records may be retained longer where reasonably necessary. A customer business also has its own obligations for lead information and may delete individual leads earlier.

8. Security

We use administrative, technical, and organizational safeguards designed to protect information, including encrypted transport, hashed passwords, access controls, restricted support access, audit records, and managed infrastructure. Authorized personnel may access account, website, lead, or support information when reasonably needed for requested support, security or abuse investigation, legal compliance, or service restoration. Access is restricted and material operator actions may be logged. If we determine that a security incident affects personal information, we will investigate, take reasonable steps to contain and remediate it, and provide notices required by applicable law. We may contact affected account holders by their account email or another reasonable method. No internet service can guarantee absolute security. Account holders should use a unique password and promptly report suspected misuse.

9. Your choices and rights

You may submit a privacy request or email info@bluepetal.studio to ask for access to, correction of, export of, or deletion of personal information. Depending on applicable law, you may also ask to limit or object to certain processing. We record requests and may verify identity and authority before sharing or changing information; we respond within the time required by applicable law. If we deny a request, we will explain the reason and, where an appeal right applies, how to appeal using the same form or email. We will review the appeal and communicate the result; if denied, you may have the right to contact your state attorney general or another regulator. An authorized agent may contact us on your behalf; we may ask for proof of authority and verify your identity. Account holders may update much of their information inside the platform, disable authorized support access, cancel subscriptions, and request account closure. Rights and exceptions vary by state and our legal obligations. We do not discriminate against people for exercising applicable privacy rights.

10. Email communications

We send transactional messages needed for account verification, security, billing, support, and service operation. Marketing emails, if introduced, will include the choices required by applicable law. Operational messages may continue while an account remains active.

11. Children

BluePetal is a business service and is not directed to children. We do not knowingly collect personal information directly from children under 13. Some jurisdictions provide additional protections for teenagers or other minors. If you believe a child has provided personal information, contact info@bluepetal.studio so we can review and delete it where appropriate.

12. International use

BluePetal is directed primarily to businesses in the United States. We do not intentionally target customers in jurisdictions where additional registration, representation, or transfer arrangements would be required unless we agree to support those requirements. Information may nevertheless be processed in the United States and other countries where our providers operate. Contact us before using the service for a business subject to additional international privacy requirements.

13. Changes to this notice

We may update this notice as services or legal requirements change. We will post the current version and effective date and provide reasonable notice of material changes where appropriate.

14. Contact

Privacy questions and requests may be sent to info@bluepetal.studio or submitted through the BluePetal Studio Account & Support center. We may need to verify identity and authority before completing a request. BluePetal Studio is operated by William Dunn, a sole proprietor in New Hampshire, United States.