Privacy Policy

This Privacy Policy describes how we collect, use, store, and protect your personal data.

1. Data Controller

Field	Value
Name	Blueprint Blog
Email	contato@blueprintblog.tech
Data Protection Officer (DPO)	dpo@blueprintblog.tech

2. Data We Collect

Data provided by you:

Email address (when creating account)
Profile name (optional)
Language and theme preferences
Article comments (when implemented)

Data collected automatically:

IP address (anonymized for analytics)
Browser type and version
Device type and operating system
Pages visited and time spent
Cookie data (see our Cookie Policy)

3. Purpose of Processing

Providing blog services (content access)
Continuous improvement of user experience
Usage analysis and performance metrics
Communication about updates and news
Security and fraud prevention
Compliance with legal obligations

4. Legal Basis for Processing

We process your personal data based on the following legal grounds:

Consent (GDPR Art. 6, a / LGPD Art. 7, I)

When you expressly agree to data use (e.g., newsletters, analytics cookies).

Contract Execution (GDPR Art. 6, b / LGPD Art. 7, V)

To provide services when you create an account.

Legitimate Interest (GDPR Art. 6, f / LGPD Art. 7, IX)

For usage analysis, security, and service improvement.

Legal Obligation (GDPR Art. 6, c / LGPD Art. 7, II)

For compliance with legal or regulatory obligations.

5. Data Sharing

We may share your data with:

Supabase (hosting and database)
Microsoft Clarity (anonymized analytics)
Competent authorities (when legally required)

Important: We never sell your personal data to third parties.

6. Data Security

We adopt the following security measures:

SSL/TLS encryption for data transmission
Role-based access control (RLS)
Continuous monitoring of suspicious activities
Regular security updates

7. Retention Period

We retain your data for the following periods:

Type	Period
Active accounts	As long as the account exists
Deleted accounts	Up to 30 days after deletion
Analytics data	Up to 26 months
Tax/commercial data	As required by law

8. Your Rights

Under GDPR and LGPD, you have the following rights:

Access to your personal data
Correction of incomplete or inaccurate data
Deletion of data (right to be forgotten)
Portability of data
Withdrawal of consent
Objection to processing

To exercise your rights, contact us at dpo@blueprintblog.tech. We will respond within 15 business days.

9. International Transfers

Your data may be processed outside Brazil (USA/Europe) by our providers (Supabase, Microsoft Clarity). We ensure such transfers comply with GDPR and LGPD through adequate contractual clauses.

10. Changes to this Policy

We may update this policy periodically. We will notify you of significant changes by email or site notice.

11. Contact

If you have questions about this Privacy Policy or data processing:

Email: contato@blueprintblog.tech
DPO: dpo@blueprintblog.tech