Blue Cap Apps LLC ("we", "us", or "our") operates bluecapapps.com and a portfolio of software products, including Down Control (downctl.com) and Flex BPM, each operating as a distinct brand under Blue Cap Apps LLC. This policy explains how we collect, use, and protect your information across all of our websites and services.
Information We Collect
We collect information in the following ways depending on how you interact with our services:
- Account registration — your name, email address, and password when you create an account for one of our products.
- Waitlist signups — your email address when you join a product waitlist on bluecapapps.com.
- Contact form submissions — your name, email address, and message when you contact us through our website.
- Billing information — payment details processed securely through our payment provider (Stripe). We do not store full card numbers.
- Product configuration — settings, preferences, and data you add to your account while using our products (for example, monitoring targets in Down Control or business data in Flex BPM).
- Usage data — log data, IP addresses, browser type, and pages visited, collected automatically when you use our websites or services.
How We Use Your Information
- To provide, operate, and improve our products and websites.
- To send transactional emails, service alerts, and communications you have requested.
- To notify waitlist members when the product they signed up for becomes available.
- To process billing and manage your subscription.
- To respond to support and contact requests.
- To detect and prevent fraud or abuse.
We do not sell your personal information to third parties.
Legal Basis for Processing (GDPR)
If you are located in the European Economic Area (EEA), we process your personal data under the following legal bases:
- Consent — when you join a product waitlist, you consent to receiving launch updates for that product only. You may withdraw consent at any time by emailing privacy@bluecapapps.com.
- Contract performance — when you create an account, we process the data necessary to provide the service you signed up for.
- Legitimate interests — when you contact us, we process your information to respond to your inquiry. We balance this against your interests and fundamental rights.
- Legal obligation — where processing is required to comply with applicable law.
International Data Transfers
Blue Cap Apps LLC is based in the United States. If you are accessing our services from outside the United States, your personal data will be transferred to and stored on servers in the United States. We use third-party service providers who implement appropriate safeguards for international data transfers, including standard contractual clauses where applicable.
Data Storage and Security
We implement industry-standard security measures including encryption in transit (TLS) and at rest. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.
Cookies
Our websites use essential cookies only — to maintain your session and remember your preferences. We do not use third-party advertising or tracking cookies on any of our properties.
Third-Party Services
We use a small number of trusted third-party services to operate our products:
- Stripe — payment processing.
- Linode / cloud infrastructure providers — hosting and data storage.
- Postmark / transactional email providers — delivering system and notification emails.
Each third party is bound by its own privacy policy.
Your Rights
You may access, update, or delete your account data at any time from your account settings. To request permanent deletion of all your data — including waitlist or contact records — email us at privacy@bluecapapps.com. We will fulfil requests within 30 days.
If you are located in the EEA, you also have the right to: access the personal data we hold about you; correct inaccurate data; restrict or object to our processing; and port your data to another provider. You also have the right to lodge a complaint with your local data protection authority (for example, the ICO in the UK, CNIL in France, or the relevant authority in your country).
Data Retention
We retain account data for as long as your account is active. Product-specific data (such as monitoring logs) is retained according to your plan terms. Waitlist email addresses are retained until the product launches or you request removal. Contact form submissions are retained only as long as needed to respond. Aggregated, anonymised data may be retained indefinitely.
Children's Privacy
Our services are not directed at children under 16. We do not knowingly collect personal data from anyone under 16.
Changes to This Policy
We may update this policy from time to time. We will notify you of material changes by email or by posting a notice in your account dashboard if you are registered for one of our services. Your continued use of our services after changes take effect constitutes acceptance.
Contact
Questions about this policy? Email us at privacy@bluecapapps.com.