Privacy Policy

Effective Date: May 31, 2026 · Oblige, a product of Blueprint Concepts LLC

1. Information We Collect

1.1 Information You Provide Directly

When you create an account or use Oblige, you provide information including:

• Account information: your name, email address, and password
• Workspace information: your business or operator name and industry
• Project data: project names, descriptions, dates, estimated values, budgets, and notes
• Party information: names, companies, email addresses, and phone numbers of clients, subcontractors, and vendors
• Agreement content: the variable fields you complete when generating documents
• Milestone and payment data: milestone titles, due dates, amounts, and status updates
• Uploaded documents: agreements, invoices, briefs, and other files you upload to a project
• Incident records: titles, descriptions, and notes you log against a project
• Subscription and billing information: your selected tier and payment method details processed by Stripe

1.2 Information Generated Through Platform Use

As you use Oblige, we generate and store:

• Audit log entries: timestamped records of key actions taken within a project
• Notification records: in-app and email notification history tied to milestones and payment events
• Session data: authentication tokens and session state necessary to keep you logged in

1.3 Information We Do Not Collect

Oblige does not collect:

• Payment card numbers or full banking details — these are handled directly by Stripe
• Biometric data
• Location data beyond what you voluntarily provide in project or party records
• Behavioral tracking data, advertising identifiers, or third-party cookies
• Any data from users under 18 years of age

2. How We Use Your Information

We use the information we collect solely to operate and improve Oblige. Specifically:

• To create and maintain your account and workspace
• To provide core Platform functionality: project management, document generation, milestone tracking, payment status notifications, incident logging, and document storage
• To send transactional email notifications via Resend when you have enabled email notifications
• To enforce active project limits based on your subscription tier
• To process your subscription payments through Stripe and maintain billing records
• To maintain audit logs that support your own recordkeeping
• To diagnose technical issues, maintain platform security, and improve platform performance
• To comply with applicable legal obligations

We do not use your data for advertising, behavioral profiling, or sale to third parties.

3. How We Share Your Information

3.1 Third-Party Service Providers

• Stripe: processes subscription payments and manages billing.
• Supabase: provides database hosting and cloud document storage.
• Resend: delivers transactional email notifications.
• Vercel: hosts and serves the Oblige web application.

3.2 Legal Disclosures

We may disclose your information if required by law, regulation, or valid legal process, or if we believe in good faith that disclosure is necessary to protect the rights, property, or safety of Blueprint Concepts, our users, or the public.

3.3 Business Transfers

If Blueprint Concepts is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

3.4 No Sale of Data

We do not sell, rent, or trade your personal information to any third party for their own commercial purposes.

4. Data Storage and Security

4.1 Where Data Is Stored

Your data is stored on servers operated by Supabase, using infrastructure located in the United States. By using Oblige, you consent to your data being stored and processed in the United States.

4.2 Security Measures

• Encrypted data transmission (HTTPS/TLS) between your browser and our servers
• Password hashing using industry-standard algorithms (bcrypt)
• Authentication session management via NextAuth with JWT tokens
• Access-controlled cloud storage for uploaded documents

4.3 Data Retention

We retain your account and project data for as long as your account is active. If you terminate your account, we will retain your data for up to 90 days before deletion.

5. Your Data and Third-Party Parties

Oblige allows you to enter information about third parties — your clients, subcontractors, and vendors. You are responsible for ensuring you have the right to enter and store this information in the Platform. Blueprint Concepts processes party information only as directed by you and only to provide the Platform's features.

6. Your Rights and Choices

6.1 Access and Correction

You can access and update your account information at any time through your account settings.

6.2 Account Deletion

You may request deletion of your account and associated data by contacting us at the address in Section 10. We will process deletion requests within a reasonable time.

6.3 Email Notifications

Transactional email notifications can be toggled on or off within your account settings. You cannot opt out of critical account-related communications such as password reset emails.

6.4 Data Portability

If you wish to export your project data before closing your account, contact us and we will make reasonable efforts to provide your data in a readable format.

7. Cookies and Tracking

Oblige uses only the cookies necessary to operate the Platform — specifically, authentication session cookies that keep you logged in. We do not use advertising cookies, third-party tracking pixels, or analytics cookies. If you disable cookies in your browser, you will not be able to log in to the Platform.

8. Children's Privacy

Oblige is intended for adults 18 years of age and older. We do not knowingly collect personal information from anyone under 18. If we become aware that a user is under 18, we will promptly delete their account and associated data.

9. Changes to This Policy

Blueprint Concepts reserves the right to update this Privacy Policy at any time. We will notify registered users of material changes by updating the Effective Date and, where appropriate, by sending an email notification.

10. Contact Us

If you have questions about this Privacy Policy, wish to exercise your data rights, or need to report a privacy concern, contact us at: