Privacy Policy
1. Who We Are
BlueprintRank is a brand of JPL Digital Growth Group Inc. ("JPL", "we", "us", or "our"), a corporation incorporated under the laws of Quebec, Canada (NEQ 1174574369), with its principal place of business in Quebec, Canada.
We operate the BlueprintRank Platform, a software-as-a-service product that helps home-services contractors respond to inbound leads via automated and manual SMS messaging.
2. Scope of This Policy
This policy describes how we collect, use, disclose, and retain personal information in connection with:
- the BlueprintRank Platform subscription service (the "Platform"); and
- the websites we operate, including blueprintrank.com.
This policy covers two categories of individuals whose information we handle:
Business customers ("Subscribers"): contractors and other businesses that subscribe to the Platform.
Prospects: the end consumers (homeowners and others) who contact a Subscriber by phone or web form and whose contact information is processed by the Platform on the Subscriber's behalf.
3. Two-Role Reality: Platform Provider and Service Provider
When we process Prospect data, we do so as a service provider acting on behalf of our Subscribers. The Subscriber is the business that has the direct relationship with the Prospect. The Subscriber determines the purpose and manner of outreach to that Prospect within the bounds the Platform allows.
We process Prospect personal information only to deliver the service the Subscriber has engaged us to provide. We do not use Prospect data for our own marketing purposes.
When we process Subscriber account data, we act as the organization responsible for that information.
4. Personal Information We Collect
4a. Prospect Information
When a Prospect calls a Subscriber's tracked phone number or submits a web inquiry form that the Subscriber has connected to the Platform, the Platform may receive and store:
- Name (if provided in a web form or in the course of conversation)
- Mobile phone number
- SMS message content (inbound and outbound messages in the conversation thread)
- Call metadata: call timestamp, call duration, dial status, and the area code or full number of the originating call
- Source indicator (missed call or web form)
We do not collect voice recordings, voicemail audio, or call transcripts at any stage of the current Platform.
4b. Subscriber Account Information
When a business subscribes to the Platform, we collect:
- Legal business name and trade name
- Business address, phone, and website
- Owner or authorized contact name, title, and email address
- Owner mobile number (used for SMS alert delivery and identity verification)
- IP address and user-agent string, captured on authentication events
- Business configuration settings (tracked phone number, forwarding number, message templates, quiet-hours settings)
4c. Platform Usage Data
We collect operational and security logs needed to run the Platform, including authentication event logs, message-send and delivery logs, opt-out and opt-in events, and error logs. These logs are retained for compliance and security purposes described in Section 7.
5. How We Use Personal Information
5a. Prospect Information
We use Prospect information only to:
- Send the automated first-touch SMS response on behalf of the Subscriber (missed-call text-back or web-form confirmation);
- Route inbound Prospect replies to the Subscriber's inbox;
- Deliver owner alert notifications to the Subscriber when a new lead arrives or a Prospect replies;
- Honor opt-out requests (STOP) and maintain opt-out records so that no further automated messages are sent to an opted-out number;
- Maintain compliance event logs (including consent-basis records, opt-out records, and message delivery records) for TCPA and CASL compliance purposes; and
- Troubleshoot Platform errors and investigate abuse reports.
We do not use Prospect information to build advertising profiles, to sell or license Prospect data to any third party, or for any purpose unrelated to delivering the service the Subscriber has requested.
5b. Subscriber Information
We use Subscriber information to:
- Provision and maintain the Subscriber's account;
- Deliver Platform features (SMS relay, inbox, owner alerts, A2P carrier registration);
- Send transactional communications (account notices, billing, service updates); and
- Comply with legal obligations.
6. SMS Consent and the "Not Shared" Commitment
Mobile opt-in consent and phone numbers collected through the BlueprintRank Platform are not shared with or sold to third parties or affiliates for marketing purposes.
This commitment applies to both Subscriber phone numbers and Prospect phone numbers processed through the Platform.
Prospect phone numbers are used solely to deliver the SMS conversation the Prospect initiated by contacting the Subscriber, and to maintain opt-out records on that Subscriber's behalf.
Subscriber phone numbers are used solely for Platform alert delivery and identity verification.
No mobile or SMS data collected through this Platform is transferred to any marketing platform, data broker, list aggregator, or advertising network.
7. Retention
| Data type | Retention period |
|---|---|
| Lead records, SMS conversation content, and web-form submission data | Retained while the Subscriber account is active |
| Call metadata (timestamps, durations, dial status) | 13 months from the date of the call |
| Opt-out records (STOP events) | Indefinite. Opt-out records are never deleted because deleting them would recreate the liability they document. |
| Compliance event log (consent-basis events, blocked-send records, operator actions, re-authentication events) | Indefinite for the same reason as opt-out records. |
| Subscriber account data | Retained for the life of the subscription and for a period following termination as required by applicable law or as set out in the subscription agreement. |
| Post-offboarding purge | Following Subscriber account termination, lead records, SMS messages, and call metadata are purged after a 90-day grace window. Opt-out records and the compliance event log survive the purge permanently. The purge is a logged, documented event. |
8. Disclosure of Personal Information
We do not sell personal information.
We share personal information only in the following circumstances:
Service providers: We use third-party infrastructure providers to operate the Platform, including Twilio (SMS delivery), Supabase (database and authentication), and Netlify (hosting and functions). These providers act under contractual obligations and may only use personal information to deliver the services we engage them for.
Legal requirements: We may disclose personal information if required by law, court order, or regulatory authority, or to protect the rights, property, or safety of our users or the public.
Business transfers: If JPL is involved in a merger, acquisition, or asset sale, personal information may be transferred as part of that transaction, subject to notice to affected users.
We do not disclose Prospect personal information to the Subscriber's competitors or to any party other than the Subscriber on whose behalf that data was collected.
9. Security
We implement technical and organizational measures designed to protect personal information from unauthorized access, alteration, disclosure, or destruction. These include:
- Encrypted data storage and transmission (TLS in transit, encryption at rest)
- Row-level security policies that prevent one Subscriber from accessing another Subscriber's data
- Authentication controls including one-time-passcode (OTP) verification for owner accounts
- Append-only compliance event logs that cannot be altered or deleted
- Velocity controls and geographic restrictions on outbound SMS to limit abuse
No system is completely secure. If you believe your information has been compromised, contact us immediately at the address in Section 14.
10. Canadian Users: PIPEDA and Quebec Law 25
If you are located in Canada, including Quebec, the following applies.
PIPEDA: The federal Personal Information Protection and Electronic Documents Act (S.C. 2000, c. 5) governs our collection, use, and disclosure of personal information in the course of commercial activities across most of Canada. We collect personal information only for the purposes identified in this policy and only with consent, which may be express or implied depending on context.
Quebec Law 25 (An Act to modernize legislative provisions respecting the protection of personal information, S.Q. 2021, c. 25): Quebec residents have rights including the right to access, correct, and request portability of personal information we hold about them. They also have the right to request deletion of personal information, subject to exceptions for legal compliance. Our designated privacy officer is identified in Section 14.
CASL: Commercial electronic messages sent to Canadian recipients are subject to the federal anti-spam legislation (S.C. 2010, c. 23). The Platform relies on the consumer-initiated contact (inbound call or form submission) as the consent basis for the first automated SMS response. Every first outbound message identifies the business by name and includes opt-out instructions.
11. United States Users: TCPA, CTIA, and State Privacy Laws
If you are located in the United States, the following applies.
TCPA: The Telephone Consumer Protection Act (47 U.S.C. ยง 227) and FCC regulations govern automated SMS messaging to US consumers. The Platform is designed to send automated messages only on the basis of consumer-initiated contact (an inbound call or a form submission where the form states that a text-message response will be sent). Consumers can opt out at any time by replying STOP.
State mini-TCPAs: Several US states have enacted laws that impose additional restrictions on commercial SMS messaging, including different consent standards, shorter quiet-hours windows, and private rights of action. These laws include but may not be limited to the Florida Telephone Solicitation Act, Oklahoma, and Washington state law. If you are a Subscriber deploying the Platform to send messages to recipients in those states, you are responsible for ensuring your use complies with applicable state law. JPL strongly recommends that Subscribers review their obligations with qualified US counsel.
US State Privacy Laws: Several US states have enacted consumer privacy laws. Where applicable, we handle personal information in compliance with those laws. To exercise any rights under applicable state privacy law, contact us using the information in Section 14.
12. Opt-Out of SMS
Prospects who receive text messages sent through the Platform can opt out at any time by replying STOP to any message. The Platform will:
- Block all further automated SMS messages to that phone number for that Subscriber within one message of receiving the STOP reply;
- Record the opt-out with a timestamp in the compliance event log; and
- Reflect the opt-out status in the Subscriber's lead inbox.
Replying START re-enables messaging. The re-opt-in is also logged.
Opting out does not affect any other relationship the Prospect has with the Subscriber.
13. Your Rights
Depending on where you are located, you may have the right to:
- Access the personal information we hold about you;
- Correct inaccurate personal information;
- Request deletion of personal information (subject to legal exceptions, including our obligation to retain opt-out and compliance records);
- Request portability of your personal information (Quebec and certain other jurisdictions); and
- Withdraw consent, where processing is based on consent.
To exercise any of these rights, contact us using the information in Section 14. We will respond within the timeframe required by applicable law.
14. Contact and Privacy Officer
For privacy questions, rights requests, or concerns about how we handle your personal information, contact us at:
Privacy Officer
JPL Digital Growth Group Inc., publisher of BlueprintRank
Quebec, Canada
Email: growth@jpldigital.ca
Website: blueprintrank.com
15. Changes to This Policy
We may update this policy from time to time. When we do, we will update the "Last updated" date at the top of this page. For material changes, we will notify active Subscribers through the Platform or by email. Continued use of the Platform after the effective date of a revised policy constitutes acceptance of the revised terms.
This document is published by JPL Digital Growth Group Inc. for BlueprintRank. JPL is not a law firm and this document does not constitute legal advice. Subscribers and Prospects with legal questions about their rights should consult qualified counsel.