Privacy Policy

Effective Date: April 8, 2026

BlueApe, Inc. ("BlueApe," "we," "us," or "our") operates the BlueApe platform at app.blueape.ai. This Privacy Policy explains how we collect, use, store, and protect your information when you use our services.

1. Information We Collect

When you use BlueApe, we may collect the following categories of information:

• Account information: Name, email address, company name, and role
• Business data from connected integrations:
  • QuickBooks Online/Desktop: Customers, vendors, inventory items, invoices, bills, sales orders, purchase orders
  • Microsoft 365: Calendar events, email metadata (for meeting intelligence and communication sync)
  • HubSpot: Company and contact records, deal information
• Operational data: Quotes, sales orders, purchase orders, inventory transactions, catalog and pricing data, and shipping records
• Usage data: Feature interactions, copilot queries, and workflow execution records

2. How We Use Your Information

We use collected information to:

• Provide and operate the BlueApe platform features you use
• Synchronize data between BlueApe and your connected integrations (QuickBooks, HubSpot, Microsoft 365)
• Power AI copilot responses with your company's knowledge base (documents, catalogs, product specs, and order history)
• Generate pricing quotes, manage inventory, and fulfill operational workflows
• Maintain audit trails for compliance and traceability
• Improve platform reliability and fix technical issues

3. Data Storage and Security

• Infrastructure: Data is stored on Amazon Web Services (AWS) infrastructure in the US East region, including RDS (PostgreSQL), S3, and App Runner
• Encryption: Integration credentials (API keys, OAuth tokens) are encrypted at rest using AES-256-GCM
• Tenant isolation: Each customer's data is stored in a separate database schema, preventing cross-tenant data access
• Access control: Role-based access control (RBAC) with per-user permissions, two-factor authentication (TOTP), and HMAC-signed session cookies
• Audit trail: All data modifications are logged with timestamps, user identity, and change details

4. Data Sharing

We do not sell, rent, or share your financial data, business data, or personal information with third parties for marketing or advertising purposes.

We share data only:

• With integration providers you explicitly connect (QuickBooks, HubSpot, Microsoft 365) — only the data necessary for the sync you configure
• With AI model providers (Anthropic/Claude) for copilot queries — queries are not used to train models
• As required by law or to protect our legal rights

5. Data Retention

We retain your data for as long as your account is active. If you disconnect an integration, we stop syncing but retain previously synced data in your BlueApe workspace. You may request deletion of your data by contacting us.

6. Your Rights

You may:

• Access the data we store about your company through the BlueApe platform
• Disconnect any integration at any time, immediately stopping all data sync
• Request export or deletion of your data by contacting privacy@blueape.ai

7. Cookies

BlueApe uses session cookies for authentication and tenant verification. We do not use third-party tracking cookies or advertising cookies.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised effective date.

9. Contact

If you have questions about this Privacy Policy, contact us at:

BlueApe, Inc.
Email: privacy@blueape.ai
Web: blueape.ai