1. Information We Collect

Account Information

When you register for the Services, we collect information through our authentication provider, Clerk. This may include your name, email address, profile photo, and authentication credentials. We do not store passwords directly; authentication is handled entirely by Clerk.

Drawing & Design Data

When you use the Services to create warehouse layouts, we store your drawing data, including polygon geometries, storage configurations, elevation settings, and associated metadata. This data is stored in our Supabase database and is associated with your user account.

Usage Information

We may collect information about how you interact with the Services, including features used, actions performed, and error reports. This information helps us improve the product and diagnose issues.

AI assistant interactions

When you interact with our AI assistant (Clark), the text of your prompts and the relevant drawing context (geometry, configuration, requirements) are sent to Anthropic for processing. Per Anthropic's API data policy, this content is not used to train their models. Only the data needed for the current request is transmitted; we do not send your full account history or unrelated drawings.

2. How We Use Your Information

We use the information we collect to:

  • Provide, operate, and maintain the Services
  • Save and retrieve your warehouse designs
  • Improve, personalize, and expand the Services
  • Communicate with you about updates, security alerts, and support
  • Process transactions and manage your subscription
  • Detect and prevent fraud or unauthorized access

3. Data Storage & Security

Your data is stored using Supabase, hosted in the United States. We use row-level security (RLS) policies to ensure that each user can only access their own data. Authentication is handled by Clerk, which provides secure session management and token-based access.

All data is transmitted over encrypted connections (HTTPS/TLS). While we implement commercially reasonable security measures, no method of electronic storage is 100% secure, and we cannot guarantee absolute security.

4. Third-Party Services

We use the following third-party services that may collect or process your data:

  • Clerk — Authentication and user management. Clerk processes your login credentials and session data. See Clerk's Privacy Policy.
  • Supabase — Database hosting and storage. Your drawing data and account information are stored in Supabase. See Supabase's Privacy Policy.
  • Vercel — Application hosting and deployment. Vercel serves the application and may collect standard server logs. See Vercel's Privacy Policy.
  • Anthropic — AI model provider for our assistant (Clark). Prompts and the relevant drawing context are sent to Anthropic's API for processing. Per Anthropic's data policy, content is not used to train their models. See Anthropic's Privacy Policy.

We do not sell your personal information to third parties.

5. Cookies & Local Storage

The Services use browser localStorage to cache your drawing data locally for faster load times. This data remains on your device and is keyed to your drawing IDs.

Clerk may use cookies or similar technologies for authentication session management. We do not use tracking cookies or third-party advertising cookies.

6. Data Retention

We retain your account information and drawing data for as long as your account is active or as needed to provide the Services. If you request deletion of your account, we will delete your personal information and drawing data within 30 days, except where we are required to retain it by law.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access the personal information we hold about you
  • Request correction of inaccurate information
  • Request deletion of your personal information
  • Export your drawing data
  • Object to or restrict certain processing of your data

To exercise any of these rights, please contact us at legal@bluevellum.com. We will respond to your request within 30 days.

8. Children's Privacy

The Services are intended for users who are at least 18 years of age. We do not knowingly collect personal information from anyone under the age of 18. If we learn that we have collected personal information from a child under 18, we will take steps to delete that information promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or by posting a notice on the Services prior to the changes taking effect. We encourage you to review this policy periodically.

10. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at legal@bluevellum.com.