Privacy Policy

From customers and their users

• Account details: name, work email address, job title, phone number, company name and billing address.
• Content you upload: bid documents, plan sets, street lists, specifications, maps, photos and other project files, and any information in them.
• Scheduling data: crews, materials, job locations and dates.
• Usage data: pages viewed, features used, actions taken, browser type, device and IP address, and error logs.
• Support requests and other messages you send us.

From residents

• If you opt in to email updates about a project: your email address and the project you chose.
• If a customer sends printed notices about a project: your mailing address, which the customer provides or which is drawn from public records for the affected streets.
• Basic technical data when you visit a project page: browser type, device and IP address.

From website visitors

• Anything you submit through a contact or demo-request form: name, email, company and message.
• Basic technical data: browser type, device, IP address and pages viewed.

We do not knowingly collect sensitive personal information such as government ID numbers, health information or precise geolocation of individuals.

• To provide the Services: process uploads, map streets, measure pavement, build schedules, publish project pages and send notices.
• To run your account: sign-in, billing, invoicing and support.
• To communicate with you about the Services, including updates, security notices and responses to your requests.
• To keep the Services secure and detect errors, abuse and fraud.
• To improve the Services, including by analyzing how they are used and how accurately they perform.
• To comply with law.

The Services use machine learning and AI models to read documents, map roads and measure pavement from aerial imagery. Files you upload are processed by our own models and by third-party AI providers acting on our behalf (listed in Section 5). We use information about how the Services perform, including corrections our customers make, to improve our models. When we do this, we use data in de-identified or aggregated form, and we do not use it to identify individuals.

Outputs of the Services, such as quantities and schedules, are estimates for our customers to review. They are not relied on by BlueRoad to make decisions about individuals.

If you received an email from us about a road project, it is because you opted in on that project's page. Every email includes an unsubscribe link, and you can stop updates at any time. We send project emails only on behalf of the contractor doing the work, and only about that project.

If you received a printed notice, the contractor chose to notify your address because it is near the work. We print and mail notices through a mailing vendor, and we do not use your mailing address for any other purpose.

We do not sell resident information, and we do not use it for advertising.

We share personal information only as follows:

• Within a customer's account. Information in a customer's account is visible to that customer's users according to the roles the customer sets.
• Residents and customers. When a resident opts in to updates about a project, the contractor running that project can see that someone at that email has subscribed.
• Service providers that process data on our behalf under contracts that limit their use of it. We currently use:
  • Amazon Web Services (hosting, storage, databases, email delivery)
  • Modal (compute for our takeoff models)
  • Railway (hosting)
  • Anthropic, Google and Microsoft Azure (AI and document-processing models)
  • Google Maps Platform and HERE (mapping and imagery)
  • Stripe (payments)
  • Lob (printing and mailing notices)
  • Sentry (error monitoring)
  • Slack and Google Workspace (internal communication and support)
• Legal reasons. If required by law, subpoena or court order, or to protect the rights, safety or property of BlueRoad, our customers or others.
• Business transfers. If BlueRoad is involved in a merger, acquisition or sale of assets, information may be transferred as part of that transaction. We will notify customers of any change in who controls their data.

We do not sell personal information, and we do not share it with third parties for their own marketing.

We use cookies and similar technologies to keep you signed in, remember your preferences and keep the Services secure. We do not currently use third-party analytics or advertising cookies. If that changes, we will update this policy. You can control cookies through your browser settings; disabling them may prevent sign-in.

We keep customer account information and uploaded content for as long as the customer's account is active. After an account closes, we make the customer's data available for export for 30 days and then delete it, except where we need to keep it for legal, tax or security reasons, or where it has been de-identified.

We keep resident email addresses until the resident unsubscribes or the project ends, whichever comes first, and then delete them. Mailing addresses used for a printed notice are kept only as long as needed to send and confirm that mailing.

We protect information with encryption in transit and at rest, access controls, and monitoring. No system is perfectly secure, and we cannot guarantee the security of information. If we learn of a breach affecting your personal information, we will notify you as required by law.

• Access and correction. Customers can view and edit account information in the Services. Anyone can ask us for a copy of their personal information, or to correct or delete it, by emailing contact@blueroad.ai.
• Unsubscribe. Every marketing or project email contains an unsubscribe link.
• Deletion. You can ask us to delete your personal information. We will do so unless we need to keep it for the reasons in Section 7.

We will respond to requests within 45 days. We will not treat you differently for exercising these rights.

This section provides the notice required by the California Online Privacy Protection Act. The categories of personal information we collect, how we use them and who we share them with are described above. You may request access to or deletion of your personal information as described in Section 9. We do not sell personal information. Our Services do not currently respond to browser "Do Not Track" signals, because there is no common standard for them.

The Services are for businesses and adults. We do not knowingly collect personal information from children under 13. If you believe a child has given us personal information, email contact@blueroad.ai and we will delete it.

BlueRoad is based in the United States and processes data there. If you use the Services from outside the United States, your information will be transferred to and processed in the United States.

We may update this policy from time to time. We will post the new version here with a new effective date, and for material changes we will notify customers by email.

Blueroads LLC

131 Continental Drive, Suite 305

Newark, DE 19713

contact@blueroad.ai