Privacy notice
Effective date: 9 October 2026.
Compliance Blueprints, operated by Kieran Wright, uses this Control Centre to manage its own business activity. Questions about the Control Centre’s data can be sent to [email protected].
Google information
When the owner connects an account, the app requests the Google account identifier and email address, read-only Gmail access and read-only Google Calendar access. The current app reads message headers and snippets for the latest 50 inbox messages; starred messages in the designated personal account; matching website enquiry notifications in the business account from the last 365 days; calendar names; and events from 30 days in the past to 180 days ahead. Email records include sender and recipient addresses, subject, date, thread identifiers and relevant labels. Calendar records include titles, dates, times, locations and links.
The app uses this information to display the owner’s inbox summary, starred follow-ups, website enquiry notifications and calendar. Matching email addresses can link a starred conversation to an existing lead record. It does not use this information for advertising or to train machine-learning models.
Other business information
The app stores lead, client, project and task records entered or imported by the owner. It also stores Etsy order and payment summaries and Cloudflare website analytics. Its Etsy integration does not retain buyer addresses or buyer contact information.
Storage and access
The dashboard is hosted through OpenAI Sites on Cloudflare infrastructure. Data is stored in its server-side database. Connection secrets and refresh tokens are encrypted by the application before storage. Cached message summaries and business records are not encrypted by that application-level token-encryption routine. Dashboard access is restricted to the owner; infrastructure providers process data as needed to operate the service. Owner-initiated exports contain the displayed business data and should be kept private.
Retention and control
Successful refreshes replace Google snapshots with the current configured windows. Failed refreshes retain the previous successful snapshot. Business records, connection settings and operational logs remain until removed; revoking Google access stops future authorised reads but does not by itself erase cached data. The owner can revoke the connection in Google Account settings and arrange deletion of stored Control Centre records. Deletion requests can be sent to [email protected]. There is currently no self-service account deletion button in the app.
Google user data is used only to provide the requested dashboard functions. Its use and transfer must comply with the Google API Services User Data Policy, including the Limited Use requirements. This notice will be updated when the app’s data handling changes.