Privacy

Blueprint is run by Echelon. Contact: help@echelonagents.ai.

What we store

• Your account email address.
• Sign-in tokens (OAuth) and sign-in codes, kept only as one-way hashes, with timestamps.
• Registered client apps: when Claude connects, it registers itself with us (a client id, its name and its redirect address). We keep that record.
• Failed sign-in attempts: each wrong code is kept with your email address, the network (IP) address it came from and the time, for about 1 hour, to limit guessing.
• Quota counters: for each render, your email address and the time, so we can apply the 30-per-hour limit.

What we do not store

Diagrams are generated when you ask and sent straight back to Claude. Diagram specs and images are not stored. We do not keep your Claude conversations and we do not receive them: Claude sends us only the tool input for the call you asked for.

What we do with it

We use it only to sign you in, run the service and apply the limit. We do not sell it or share it with anyone, and we do not use it for advertising. Sign-in codes are sent by email through Amazon SES, which sees the address and the message.

How long we keep it

• Your email address: kept until you ask us to delete your account.
• Quota counters: each entry is deleted about an hour after the render.
• Sign-in codes: each code works for 10 minutes and is removed automatically about an hour after it expires.
• Sign-in tokens: an access token lasts 1 hour and a refresh token lasts 30 days. Expired tokens are removed automatically.
• Server logs: they record events such as sign-ins and render timings. Email addresses in them are shortened (for example a***@example.com). They never contain diagram content, full email addresses, sign-in codes or tokens. The service writes them to the host's system log; this software sets no retention period of its own, so they are kept as long as that log keeps them.
• Failed sign-in attempts: kept with the network address for about 1 hour, then deleted automatically.
• Registered client apps: kept until we remove them. They are not linked to your email address.

Deleting your data

To have your account and everything we hold about it deleted, email help@echelonagents.ai from the address you signed in with. We delete it on request.