Privacy Policy

This Privacy Policy describes how Blueflo (“Blueflo”, “we”, “us”) collects, uses and shares information when you use blueflo.tech and its pages, application programming interface and MCP server (together, the “Service”). By using the Service you acknowledge this Policy. It should be read with our Terms of Use.

1.1 When you read the Service. No account is required to read building or apartment pages. We record the number of page views and button presses for each building on each day; these counts carry nothing about you. Our application’s request logs keep a one-way code derived from your network address, not the address itself. Our hosting provider’s logs record the page requested, the page that linked to it and the type of browser, and are kept for about 30 days; they do not record your network address. Your network address is received by Cloudflare, which delivers every page, and, on pages that show a map, by OpenStreetMap, from which your browser loads the map images (section 4). There is no tracking and no advertising technology on the Service.

1.2 Address searches. When you type in the address box, the text is sent from our server to New York City’s address search service (GeoSearch) to find the building.

1.3 If you report an error. We keep the report, the building and apartment it concerns, and the date. If you give an email address, we use it only to reply to that report.

1.4 If you request access to the pilot. The apartment-record pilot is not open to the public: you may ask to join, and we decide each request. We keep your email address, any note you include and our decision, and use the address only to tell you if you are accepted. If you are not, we send nothing.

1.5 If you are in the apartment-record pilot. We collect and keep:

• Your email address, which identifies your account and is used to send you sign-in links and for no other purpose.
• Sign-in links, codes and sessions, stored only as one-way fingerprints. The links and codes themselves are never stored.
• Your records: the apartment, its rooms and items, your photos and notes, and your repair log with the dates you provide, including photos attached to repairs. Each photo is re-encoded on our server before it is stored, which removes camera, location and other embedded data; we keep it at full size and in two smaller sizes for display. Photos are dated by our server.
• Blurred copies. If you blur or cover part of a photo, we keep your original, visible only to you, and a copy, which is the only version shown through a share link.
• A location check, if you choose to make one: only whether your phone reported that it was near the building — a single “yes”, or nothing. Your phone performs the check itself. We never receive, store or see your location.
• Share links, stored only as one-way fingerprints, with the name you give each, its expiry, and how many times and when it was opened. We do not record who opened it.

1.6 If you report a record shared with you. We keep the report, the record and photo it concerns, and the date. We do not keep who you are.

We use the information above only to provide and operate the Service: to show you pages and records, to sign you in, to send the emails described in this Policy, to review and respond to reports, to protect the Service from abuse (including rate limits), and to understand, in aggregate, which buildings are viewed. We do not use it for advertising and we do not sell it.

A record is visible to you and to anyone you send a share link to while that link is active. Nothing in a record appears on any public page. The people who operate Blueflo view a photo only to review a report or respond to a legal demand, and each such view is recorded with who viewed it, when and why. We will not use records for any other purpose, such as a public page or counts across buildings, without first asking you, and then only as you agree.

We do not sell or share the information we hold. We disclose it in response to a legal demand only as the law requires. We use the following service providers, each of which handles information only to provide its service to us:

• Google Cloud hosts the Service and keeps the building pages and our logs.
• Neon operates our database — accounts, apartment records, share links, access requests and reports — on Amazon Web Services in the eastern United States.
• Cloudflare delivers every page and receives the network address each request comes from in order to do so; Cloudflare R2 stores photos.
• Resend delivers our emails — sign-in links, approval notices and a copy of each report sent to us — and so handles each whole message.
• Zoho hosts our mailbox, where copies of reports and any reply you send us arrive.
• New York City’s GeoSearch receives address searches, from our server, so it does not receive your network address.
• OpenStreetMap serves the map images on pages that show a map. Your browser requests them directly, so OpenStreetMap receives your network address and the page you are viewing, under its own privacy policy.

Reading this site sets no cookies. Signing in to the apartment-record pilot sets one cookie, which keeps you signed in on that device for 365 days or until you sign out. We use no tracking or advertising cookies.

Page-view counts are kept as daily totals per building. Hosting logs are kept for about 30 days. Error reports are kept as a record of what was reported and what we did. Access requests are kept until you ask us to delete them. Your records are kept until you delete them. You may delete a photo, a room or a record, or delete your account and everything in it, from your records page; deleted photos are removed from our storage, not hidden. A photo under review following a report is preserved, not deleted, until the review ends.

You may read the Service without providing any personal information. If you are in the pilot, you may delete any of your records, or your account, at any time. To ask about the information we hold about you, or to ask us to delete a report or an access request, contact us at [email protected].

Sign-in links, codes, sessions and share links are stored only as one-way fingerprints, so a copy of our database does not let anyone sign in as you or open your records. Photos are re-encoded to remove embedded data before storage, and every operator view of a reported photo is recorded. No method of storage or transmission is completely secure, and we cannot guarantee absolute security.

The Service is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has given us personal information, contact us and we will delete it.

The Service is operated from the United States, and information is processed and stored there by us and the providers in section 4.

If we change this Policy materially, we will change the effective date above. We keep every previous version and will send you the one that applied on any date if you ask.

Questions about this Policy, or requests about your information: [email protected], or our contact page.