Privacy policy

The short version

• You can search and read reports without an account. We only ask you to sign in to save a report.
• We don't sell your data, show ads, or pass you to brokers, builders or sellers.
• Photos and floor plans you upload are sent to Google's AI to be analysed. We don't keep them unless you save a report that includes them.
• You can delete saved reports yourself, and ask us to delete your account at any time.

What we collect

Addresses you search

When you search an address or drop a pin, its location is sent to our servers to build the report. If you're not signed in, it isn't linked to you.

Your account

If you sign up with email, we store your email address and a password. The password is stored scrambled (hashed) by our database provider, so we can't read it. If you sign in with Google, Google shares your name, email address and profile picture with us.

Reports and folders you save

A saved report holds the address, its scores and text, and the map images in it. If you added a room photo or floor plan to that report, it's saved too. Folder names you create are saved with them.

Photos and floor plans you upload

These are sent to Google's Gemini AI to work out rooms, windows and light. Don't upload photos of people, documents or anything private you wouldn't want analysed.

Purchases and Keys

When you buy Keys, we keep a record of the purchase (pack, amount, date, Razorpay payment ID), your Key balance, and which reports you've unlocked. We need this for receipts, refunds and tax records. Your card, UPI or bank details go to Razorpay, not to us.

Feedback you send

The footer feedback box and the small "report" buttons next to numbers in a report store your message, the page you were on, your browser type, your email if you give it, and your account if you're signed in.

Usage and technical data

We use Vercel Analytics to count page visits. It doesn't use cookies or identify you. Our servers see your IP address, like any website. We use it briefly to stop spam and abuse (for example, limiting how many feedback messages one connection can send), and our hosting provider keeps short-lived logs.

Cookies and storage in your browser

We use cookies only to keep you signed in and to bring you back to your report after you sign in. The 3D map remembers its last camera angle in your browser. We don't use advertising or tracking cookies.

How we use it

• To build the reports you ask for and save the ones you keep.
• To let you sign in and see your saved reports on any device.
• To reply to you if you sent feedback with your email.
• To fix bugs, correct wrong data, and see which parts of the site get used.
• To keep the service safe from spam, abuse and overload.

Who else handles it

We use these services to run BlindSpot. Each only gets what it needs for its job:

• Supabase stores accounts, saved reports, folders and feedback.
• Vercel hosts the website and counts visits.
• Razorpay processes payments for Keys. It receives your payment details and the email and phone you give at checkout. We only receive the payment ID, the amount and whether it succeeded, never your full card or bank details.
• Google handles Google sign-in, writes report text and analyses uploaded photos and floor plans (Gemini), and provides air quality readings for a location.
• Map and weather providers receive the location being looked up: OpenStreetMap's Nominatim and Komoot's Photon (address search), Esri and CARTO (map pictures), OSM Buildings (building heights), and Open-Meteo (weather and air). Some map pictures load straight from these providers, so they see your IP address like any website you visit.

These providers may store data outside India. We'll also share information if the law requires it, or if BlindSpot is ever sold or merged, in which case this policy still applies to your data.

How long we keep it

• Your account and saved reports: until you delete them or ask us to delete your account.
• Feedback: until we've dealt with it and it's no longer useful for fixing the product.
• Uploaded photos and floor plans you don't save: not kept by us after the analysis.

Your choices and rights

Under India's Digital Personal Data Protection Act, 2023, you can ask us to show you the personal data we hold about you, correct it, or delete it. You can also withdraw your consent, and nominate someone to act for you if you're unable to.

You can delete saved reports and folders yourself from your profile. For anything else, including deleting your whole account, email agblindspot@gmail.com from the email address on your account. We'll reply within 30 days.

If you're unhappy with how we handled a request, tell us at the same address. If we don't resolve it, you can complain to the Data Protection Board of India.

Children

BlindSpot is meant for adults researching a home. Please don't create an account if you're under 18. If we learn that a child has given us personal data, we'll delete it.

Security

Data travels over encrypted connections, and each saved report can only be read by the account that saved it. No system is perfectly secure. If we find out your data has been exposed, we'll tell you and the authorities as the law requires.

Changes to this policy

If we change this policy, we'll update the date at the top. If a change affects how we use data you've already given us, we'll tell signed-in users before it applies.

Contact

BlindSpot LLP runs blindspot.properties. For privacy questions and requests, email agblindspot@gmail.com.