Privacy Policy

Last Updated: April 10, 2026

1. Introduction

This Privacy Policy explains how BlueSuite Enterprises LLC (“BlueSuite,” “we,” “us,” or “our”) collects, uses, shares, and protects your personal information when you use our websites and services.

BlueSuite is a software-as-a-service (SaaS) platform built for service businesses. Our platform includes tools for field service management, customer relationship management (CRM), invoicing, quoting, scheduling, client portals, and related business operations.

This policy applies to the following websites and services:

• www.bluesuite.app – our marketing website
• my.bluesuite.app – the BlueSuite platform and dashboard
• lp.bluesuite.app – marketing landing pages

By using any of these websites or our services, you agree to the collection and use of your information as described in this policy. If you do not agree, please do not use our websites or services.

2. Information We Collect

Personal Information You Provide

When you create an account, use our platform, or contact us, we may collect the following information directly from you:

• Account information: your name, email address, phone number, company name, and password
• Business information: your company address, industry, team size, and business details you enter into the platform
• Customer data: information about your clients and contacts that you store in BlueSuite, including names, email addresses, phone numbers, physical addresses, and service history
• Financial information: invoicing details, quotes, and line items you create within the platform
• Communications: messages you send through the platform, support requests, and any other content you share with us
• Files and documents: photos, documents, and other files you upload to BlueSuite
• Scheduling information: if you book a meeting or demo with our team, we collect your name, email address, timezone, and any information you provide in the booking form

Payment Information

When you subscribe to a paid plan or process payments through BlueSuite, our payment processor Stripe collects your payment card number, expiration date, and billing address. We do not store your full credit card number on our servers. We receive from Stripe a partial card number (last four digits), card brand, expiration date, and billing address for record-keeping purposes.

Usage Data and Information Collected Automatically

When you visit our websites or use our platform, we automatically collect certain information, including:

• Device information: your IP address, browser type and version, operating system, device type, and screen resolution
• Usage information: pages you visit, features you use, time spent on pages, click patterns, scroll behavior, and navigation paths
• Session recordings: through Microsoft Clarity, we record user sessions including mouse movements, clicks, and scrolling behavior to understand how people use our websites (personal data entered into form fields is masked)
• Referral information: how you arrived at our website, including referring URLs, search terms, and campaign parameters
• Log data: server logs that record requests made to our servers, including timestamps and error information
• Visitor attribution: we use our own first-party tracking to record your landing page URL, referrer URL, URL parameters (including UTM campaign tags), IP address, and browser user agent. This data is stored in a cookie on your device and on our servers, linked to a unique visitor identifier. If you later create an account, this visitor record may be linked to your email address so we can understand which marketing channels are bringing users to BlueSuite.

Information from Third Parties

We may receive information about you from third-party sources, including:

• Authentication providers: if you sign up or log in using a third-party service (such as Google), we receive your name and email address from that provider
• Advertising platforms: Meta (Facebook) and Google may provide us with aggregated information about how users who saw our ads interact with our websites

3. How We Use Your Information

We use the information we collect for the following purposes:

Service Delivery

• To create and manage your BlueSuite account
• To provide, maintain, and improve the BlueSuite platform and its features
• To process transactions and manage your subscription
• To store and organize the business data you enter into the platform
• To send transactional emails related to your account (password resets, invoice notifications, scheduling alerts, and similar operational messages)

Communications

• To respond to your support requests and questions
• To send you product updates, new feature announcements, and other information about BlueSuite (you can opt out of these at any time)
• To send marketing emails if you have opted in to receive them
• To schedule and manage meetings or demos you book with our team

Analytics and Improvement

• To understand how visitors use our websites and platform through Google Analytics 4 and Microsoft Clarity
• To identify bugs, performance issues, and areas for improvement
• To analyze usage trends and measure the effectiveness of our features

Advertising

• To measure the effectiveness of our advertising campaigns on Google and Meta (Facebook) using conversion tracking pixels
• To show you relevant ads on third-party platforms based on your interactions with our websites
• To create audiences for advertising purposes on Google Ads and Meta

Legal and Safety

• To comply with applicable laws and regulations
• To enforce our Terms of Service and other agreements
• To protect the rights, property, and safety of BlueSuite, our users, and the public
• To detect, prevent, and address fraud or security issues

4. Cookies and Tracking Technologies

We use cookies and similar tracking technologies across all three of our websites (www.bluesuite.app, my.bluesuite.app, and lp.bluesuite.app). These technologies are deployed through Google Tag Manager and include:

• Google Analytics 4 (GA4): tracks website usage, page views, user journeys, and engagement metrics
• Meta Pixel (Facebook): tracks conversions from our Facebook and Instagram ads, and enables retargeting
• Google Ads conversion tracking: measures conversions from our Google Ads campaigns and enables retargeting
• Microsoft Clarity: records user sessions (mouse movements, clicks, scrolling) and generates heatmaps to help us understand how people use our websites

When you interact with an embedded meeting scheduling widget on our websites (provided by Calendly or Google Calendar appointment scheduling), that third party may also set its own cookies on your device to support the scheduling functionality. These cookies are set directly by the scheduling provider and are subject to their own privacy practices.

For full details about the cookies and tracking technologies we use, including how to manage your preferences, please see our Cookie Policy.

5. How We Share Your Information

We do not sell your personal information. We share your information only in the following circumstances:

Service Providers (Sub-processors)

We use the following third-party service providers to operate BlueSuite. Each provider only receives the information necessary to perform their specific function:

• Supabase – database hosting, user authentication, and file storage. Stores your account data, business data, and uploaded files.
• Vercel – website and application hosting. Processes your requests and serves our web pages.
• Stripe – payment processing. Receives your payment card details and billing address to process subscription payments and platform transactions.
• Google (Analytics, Ads, and Calendar) – receives usage data, IP addresses, device information, and conversion events for analytics and advertising purposes. If you book a meeting with our team through Google Calendar appointment scheduling, Google also receives your name, email address, and the meeting details you provide.
• Meta/Facebook – receives conversion events, IP addresses, and device information for advertising measurement and retargeting.
• Microsoft (Clarity) – receives session recording data including mouse movements, clicks, scrolling behavior, device information, and IP addresses.
• Klaviyo – email marketing. Receives your email address, name, and subscription status to deliver marketing emails and product updates. Used only when you opt in to marketing communications.
• Calendly – appointment scheduling. If you book a meeting or demo through a Calendly widget or link on our websites, Calendly receives your name, email address, timezone, and any information you provide in the booking form. Used only when you actively schedule a meeting with us. Calendly is a US-based processor.

Legal Requirements

We may disclose your information if required to do so by law, or if we believe in good faith that disclosure is necessary to:

• Comply with a legal obligation, subpoena, court order, or government request
• Protect and defend the rights or property of BlueSuite
• Prevent or investigate possible wrongdoing in connection with our services
• Protect the personal safety of users or the public

Business Transfers

If BlueSuite is involved in a merger, acquisition, asset sale, or bankruptcy, your personal information may be transferred as part of that transaction. We will notify you by email and/or by placing a prominent notice on our website before your information is transferred and becomes subject to a different privacy policy.

With Your Consent

We may share your information in other ways if you give us specific consent to do so.

6. Data Retention

We retain your information for as long as necessary to provide our services and fulfill the purposes described in this policy. Here are our specific retention periods:

• Account data (your profile, business data, customer records, files, and all other data stored in the platform): retained while your account is active, plus 30 days after account deletion to allow for recovery if needed. After 30 days, this data is permanently deleted.
• Billing and payment records: retained for 7 years after the transaction date to comply with tax and accounting regulations.
• Usage and analytics data (Google Analytics, Microsoft Clarity, advertising data): retained for 26 months from the date of collection. This is the default retention period configured in Google Analytics 4, and we apply the same timeframe to other analytics tools.
• Marketing data (email subscription preferences, marketing consent records): retained until you opt out of marketing communications or delete your account.
• Support correspondence: retained for as long as your account is active, plus 30 days after account deletion.

When data reaches the end of its retention period, we either delete it or anonymize it so that it can no longer be linked to you.

7. Data Security

We protect your personal information using industry-standard security measures, including:

• Encryption in transit: all data transmitted between your browser and our servers is encrypted using TLS (HTTPS).
• Encryption at rest: data stored in our databases and file storage is encrypted at rest.
• Access controls: access to user data is restricted to authorized personnel on a need-to-know basis. Our platform uses row-level security policies in our database to ensure users can only access data belonging to their own workspace.
• Authentication security: passwords are hashed using strong one-way algorithms. We support secure authentication methods including email/password and third-party OAuth providers.
• Regular review: we periodically review our security practices and update them as needed to address new threats.

No method of transmission over the internet or method of electronic storage is 100% secure. While we work to protect your information, we cannot guarantee absolute security.

8. International Data Transfers

BlueSuite is based in the United States. Our servers and service providers are primarily located in the United States. If you access our services from outside the United States, your information will be transferred to and processed in the United States.

If you are located in the United Kingdom, your data is transferred from the UK to the US. To ensure adequate protection for these transfers, we rely on Standard Contractual Clauses (SCCs) as approved by the UK Information Commissioner’s Office, along with supplementary measures where appropriate.

If you are located in Canada, your data may be transferred to and processed in the United States by our service providers. Under PIPEDA, we ensure that our service providers are contractually bound to protect your information to a comparable standard.

If you are located in Australia, your data is transferred to the United States. Before transferring your data overseas, we take reasonable steps to ensure that the overseas recipients handle your information in accordance with the Australian Privacy Principles. By using our services, you acknowledge this cross-border transfer. See Section 13 for more details about cross-border disclosures under Australian law.

9. Your Privacy Rights

Regardless of where you are located, we provide all users with the following rights:

• Access: you can request a copy of the personal information we hold about you.
• Correction: you can ask us to correct inaccurate or incomplete information. You can also update most of your information directly through your account settings.
• Deletion: you can request that we delete your personal information. Note that we may need to retain certain information for legal or legitimate business purposes (such as billing records required by tax law).
• Data portability: you can request a copy of your data in a structured, commonly used format.
• Opt-out of marketing: you can unsubscribe from marketing emails at any time by clicking the “unsubscribe” link in any marketing email or by contacting us at support@bluesuite.app.

To exercise any of these rights, email us at support@bluesuite.app. We will respond to your request within 30 days. We may ask you to verify your identity before processing your request.

10. Your California Privacy Rights (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), gives you specific rights regarding your personal information.

Categories of Personal Information We Collect

In the past 12 months, we have collected the following categories of personal information as defined by the CCPA:

• Identifiers: name, email address, phone number, IP address, account ID
• Commercial information: subscription history, payment records, transaction details
• Internet or other electronic network activity: browsing history on our websites, interactions with our platform, search queries, session recordings
• Geolocation data: approximate location derived from your IP address
• Professional or employment-related information: company name, job title, and business information you provide
• Inferences: drawn from the above categories to create a profile about your preferences and behavior on our websites

Your CCPA/CPRA Rights

As a California resident, you have the right to:

• Right to Know: request that we disclose what personal information we have collected, used, disclosed, and sold or shared about you in the past 12 months.
• Right to Delete: request deletion of your personal information, subject to certain exceptions (such as legal retention requirements).
• Right to Correct: request correction of inaccurate personal information.
• Right to Opt-Out of Sale or Sharing: direct us to stop “selling” or “sharing” your personal information (as those terms are defined under the CCPA/CPRA).
• Right to Limit Use of Sensitive Personal Information: if applicable, request that we limit the use and disclosure of your sensitive personal information.
• Right to Non-Discrimination: we will not discriminate against you for exercising any of your CCPA/CPRA rights. We will not deny you services, charge different prices, or provide a different level of service because you exercised a privacy right.

“Do Not Sell or Share” Disclosure

We do not sell your personal information in the traditional sense of the word. However, our use of advertising cookies and tracking technologies from Meta (Facebook Pixel) and Google (Google Ads conversion tracking) may qualify as “sharing” of personal information under the CPRA. When these tools collect data about your activity on our websites, that information is shared with Meta and Google for targeted advertising purposes.

The categories of personal information potentially “shared” for targeted advertising include: identifiers (such as IP address and device identifiers), internet activity information (such as browsing behavior on our websites), and inferences drawn from this data.

You can opt out of this sharing by:

• Adjusting your cookie preferences through the cookie consent banner on our websites
• Emailing us at support@bluesuite.app with the subject line “Do Not Share My Personal Information”
• Enabling the Global Privacy Control (GPC) signal in your browser, which we honor as a valid opt-out request

How to Submit a Request

To exercise your California privacy rights, you can:

• Email us at support@bluesuite.app
• Write to us at: BlueSuite Enterprises LLC, 771 7th Ave NE, Largo, FL 33770, USA

We will verify your identity before processing your request by matching information you provide with information we already have on file. We will respond to verifiable requests within 45 days. If we need more time, we will notify you and may take up to an additional 45 days (90 days total). You may also designate an authorized agent to submit a request on your behalf.

11. Your United Kingdom Privacy Rights (UK GDPR)

If you are located in the United Kingdom, the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 provide you with specific rights over your personal data.

Data Controller

BlueSuite Enterprises LLC is the data controller for the personal data we process about you. Our contact details are listed in the “Contact Us” section below.

Lawful Bases for Processing

We rely on the following lawful bases under Article 6 of the UK GDPR to process your personal data:

• Performance of a contract (Article 6(1)(b)): processing necessary to provide you with the BlueSuite platform and services you have signed up for, including account creation, service delivery, and payment processing.
• Legitimate interests (Article 6(1)(f)): processing necessary for our legitimate business interests, provided those interests are not overridden by your rights. This includes analytics to improve our services, fraud prevention, and security measures. Our specific legitimate interests include understanding how users interact with our platform, identifying and fixing bugs, and improving the user experience.
• Consent (Article 6(1)(a)): where you have given us clear consent to process your personal data for a specific purpose. This applies to marketing emails, advertising cookies, and session recording through Microsoft Clarity. You can withdraw your consent at any time.
• Legal obligation (Article 6(1)(c)): processing necessary to comply with a legal obligation, such as retaining billing records for tax purposes.

Your Data Subject Rights

Under the UK GDPR, you have the following rights:

• Right of access (Article 15): you can request a copy of the personal data we hold about you.
• Right to rectification (Article 16): you can ask us to correct inaccurate personal data or complete incomplete data.
• Right to erasure (Article 17): you can ask us to delete your personal data in certain circumstances, for example when the data is no longer necessary for the purpose it was collected.
• Right to restriction of processing (Article 18): you can ask us to restrict the processing of your personal data in certain circumstances, such as while we verify the accuracy of disputed data.
• Right to data portability (Article 20): you can request your personal data in a structured, commonly used, machine-readable format and have it transferred to another controller.
• Right to object (Article 21): you can object to processing based on legitimate interests or for direct marketing purposes. If you object to direct marketing, we will stop processing your data for that purpose immediately.
• Right to withdraw consent: where we rely on your consent as the lawful basis, you can withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before you withdrew consent.
• Rights related to automated decision-making (Article 22): you have the right not to be subject to a decision based solely on automated processing that produces legal effects or similarly significant effects. We do not currently make any such automated decisions.

International Transfer Safeguards

As BlueSuite is based in the United States, your personal data is transferred from the UK to the US. To protect your data during these transfers, we use Standard Contractual Clauses (SCCs) approved by the UK Secretary of State, together with any supplementary measures necessary to ensure your data receives a level of protection equivalent to that in the UK. You can request a copy of these safeguards by contacting us.

Data Protection Officer

Given our current size and the nature of our data processing, we have not appointed a Data Protection Officer (DPO). For any questions or requests about your personal data, please contact us at support@bluesuite.app. We treat all data protection inquiries with priority and will respond within one month of receiving your request.

Right to Complain

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO):

• Website: https://ico.org.uk
• Phone: 0303 123 1113
• Address: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, United Kingdom

We encourage you to contact us first so we can try to resolve your concern directly.

12. Your Canadian Privacy Rights (PIPEDA)

If you are located in Canada, the Personal Information Protection and Electronic Documents Act (PIPEDA) governs how we collect, use, and disclose your personal information.

Consent

Under PIPEDA, we collect, use, and disclose your personal information with your knowledge and meaningful consent. Depending on the sensitivity of the information and the context, we may rely on:

• Express consent: for sensitive information, marketing emails, and advertising cookies, we obtain your explicit agreement before collecting or using your data.
• Implied consent: for information that is reasonably necessary to provide the services you have requested, your consent is implied by your use of the platform. For example, when you create an account, you implicitly consent to us storing your account information to deliver the service.

Your Rights Under PIPEDA

As a Canadian user, you have the following rights:

• Right to access: you can request access to the personal information we hold about you. We will respond to your request within 30 days.
• Right to correction: you can request that we correct any inaccurate or incomplete personal information.
• Right to withdraw consent: you can withdraw your consent to the collection, use, or disclosure of your personal information at any time, subject to legal or contractual restrictions. We will explain the implications of withdrawal (for example, if you withdraw consent for essential processing, we may no longer be able to provide you with the service).
• Right to know about disclosures: you can ask us to tell you what personal information we have disclosed and to whom.

Accountability

We are responsible for personal information in our possession or custody, including information transferred to third parties for processing. We require our service providers to protect your personal information through contractual agreements.

Filing a Complaint

If you believe we have not handled your personal information appropriately, please contact us first at support@bluesuite.app so we can address your concern. If you are not satisfied with our response, you have the right to file a complaint with the Office of the Privacy Commissioner of Canada:

• Website: https://www.priv.gc.ca
• Phone: 1-800-282-1376
• Address: Office of the Privacy Commissioner of Canada, 30 Victoria Street, Gatineau, Quebec, K1A 1H3, Canada

13. Your Australian Privacy Rights (Privacy Act 1988)

If you are located in Australia, the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs) govern how we handle your personal information.

Australian Privacy Principles Compliance

We collect, hold, use, and disclose your personal information in accordance with the APPs. We only collect personal information that is reasonably necessary to provide our services and operate our business. We collect this information by fair and lawful means, and where reasonable and practical, directly from you.

Your Rights Under the Privacy Act

• Right to access (APP 12): you can request access to the personal information we hold about you. We will provide access within 30 days of your request unless an exception under APP 12.3 applies.
• Right to correction (APP 13): if you believe any personal information we hold about you is inaccurate, out of date, incomplete, irrelevant, or misleading, you can request that we correct it. We will respond within 30 days.
• Right to anonymity and pseudonymity (APP 2): where practical, you have the option of not identifying yourself or using a pseudonym when interacting with us. However, if you choose not to provide certain information, we may not be able to provide you with all of our services.

Cross-Border Disclosure of Personal Information

Under APP 8, we are required to inform you that your personal information will be disclosed to overseas recipients. By using BlueSuite, your data is transferred to and stored in the United States, where our servers and primary service providers are located. Our sub-processors (listed in Section 5) are based in the United States and other countries.

Before disclosing your personal information overseas, we take reasonable steps to ensure that the overseas recipient does not breach the APPs in relation to that information. We do this through contractual arrangements with our service providers that require them to handle personal information in accordance with standards comparable to the APPs.

Filing a Complaint

If you have a complaint about how we have handled your personal information, please contact us first at support@bluesuite.app. We will investigate your complaint and respond within 30 days.

If you are not satisfied with our response, you can lodge a complaint with the Office of the Australian Information Commissioner (OAIC):

• Website: https://www.oaic.gov.au
• Phone: 1300 363 992
• Address: Office of the Australian Information Commissioner, GPO Box 5218, Sydney, NSW 2001, Australia

14. Children’s Privacy

BlueSuite is not intended for anyone under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16 without verified parental consent, we will delete that information promptly. If you believe a child under 16 has provided us with personal information, please contact us at support@bluesuite.app.

15. Third-Party Links

Our websites and platform may contain links to third-party websites, services, or applications that are not operated by us. If you click on a third-party link, you will be directed to that third party’s site. This Privacy Policy does not apply to those third-party websites. We encourage you to review the privacy policy of any website you visit. We have no control over and accept no responsibility for the content, privacy policies, or practices of any third-party websites or services.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, our services, or applicable laws. When we make changes, we will update the “Last Updated” date at the top of this page.

For significant changes that materially affect your rights or how we use your data, we will provide a more prominent notice, such as an email notification to the address associated with your account or a banner on our website.

We encourage you to review this Privacy Policy periodically. Your continued use of our services after any changes take effect means you accept the updated policy.

17. Contact Us

If you have any questions about this Privacy Policy, want to exercise your privacy rights, or need to report a privacy concern, you can reach us at:

BlueSuite Enterprises LLC
771 7th Ave NE
Largo, FL 33770
United States

Email: support@bluesuite.app

We aim to respond to all inquiries within 30 days.