Skip to main content
Permit rules
Security

How we protect your work

You put job dimensions, client names and bid numbers into this tool. Here is exactly how that data is handled — in plain language, with no claims we cannot back up.

Encrypted in transit

Every page, calculation and export is served over HTTPS. The app is not available over plain HTTP.

Row-level access control

Your projects, permit history, saved estimates and exports are stored with per-row database policies keyed to your account. Another signed-in user cannot read your rows, even if they guess an ID.

We never see your card

Checkout is handled by our reseller Paddle, the Merchant of Record for all orders. Card numbers never touch our servers or database — we store only the subscription state needed to grant you access.

Least-privilege admin access

Administrative screens require a role stored in a separate roles table and checked server-side on every request. Roles cannot be granted from the browser.

Secrets stay server-side

API keys and service credentials are held as server environment secrets and are never shipped to the browser bundle.

Email you control

Product and lifecycle emails are sent from our own verified sending domain and carry a one-click unsubscribe. Bounces and complaints are suppressed automatically.

Your data, your call

  • Export any project as a PDF or shopping list at any time — your estimates are not locked inside the app.
  • Ask us to delete your account and we remove your projects, permit history and saved estimates. Billing records we are legally required to keep are retained by our payment processor.
  • We do not sell your data or share your project details with contractors, suppliers or advertisers.

Read the full privacy policy and terms, check live system status, or see how we estimate.

Reporting a vulnerability

If you believe you have found a security issue, email security@diy-blueprint-pro.com with steps to reproduce. Please give us a reasonable window to fix it before public disclosure, and do not access or modify other users' data while testing. We read every report and will confirm receipt.

We hold no third-party security certification and make no regulatory-compliance claim on this page. Everything above describes how the product is built today. Estimates produced by this app are estimates only, never a quote — verify dimensions and local code before buying materials.