Privacy Policy
This Privacy Policy explains how Blue Blink One, SL (CIF B44518892) (“Blue Blink One”, “we”, “us”), Av. del Mar, 55, 12003 Castellón de la Plana, Spain, processes personal data when you use Measure Map Online — our websites, the web application at app.measuremaponline.com, our APIs and embeddable components (together, the “Service”). Blue Blink One, SL is the data controller for the processing described here, except where noted in Section 7 (where our customers act as controllers for their own end clients).
Contact for privacy matters: support@blueblinkone.com.
1. Data We Collect
- Account data — email address, name, password (stored in hashed form by our authentication provider), profile photo and language preference; if you sign in with Google, the basic profile information Google shares with us.
- Billing data — billing address, country and fiscal identification (VAT/tax ID, national ID or passport number), which Spanish invoicing law requires us to collect and show on invoices; subscription plan, invoices and payment history. Card details are collected directly by our payment processors — we never see or store full card numbers.
- Content you create — projects and their geometries (polygons, polylines, spots) including their geographic coordinates, measurements, product and pricing data, cost estimates, descriptions, comments, and photos you attach (photos may contain metadata such as capture location if your device embeds it).
- Usage and technical data — IP address, browser and device information, log and diagnostic data, online/away presence while you use the app, and analytics events (see Section 12).
- Communications — messages you send us (support requests, feedback) and notifications we send you.
2. Why We Process It (Legal Bases)
| Purpose | Examples | Legal basis (GDPR) |
|---|---|---|
| Providing the Service | Account management, storing and rendering your projects, sharing, collaboration, support | Performance of a contract (Art. 6(1)(b)) |
| Billing and invoicing | Subscriptions, payments, invoices with buyer identification, usage metering on metered plans | Contract (Art. 6(1)(b)) and legal obligations (Art. 6(1)(c)) — Spanish tax and e-invoicing rules, including VeriFactu |
| Security and abuse prevention | Authentication, access control, logging, fraud prevention, enforcing plan limits | Legitimate interests (Art. 6(1)(f)) |
| Improving the Service | Aggregate usage analytics, diagnosing errors | Legitimate interests (Art. 6(1)(f)); consent for non-essential cookies (Art. 6(1)(a)) |
| Communications | Service announcements, responses to your requests | Contract; legitimate interests |
We do not sell your personal data, and we do not use your Content to train third-party AI models.
3. Location & Map Data
The coordinates of the shapes you draw are part of your Content and are stored with your projects. When you view maps, requests for map tiles and imagery are sent to the map provider you have selected (Google Maps by default; optionally providers such as Bing Maps, Mapbox, TomTom, HERE, OpenStreetMap, ArcGIS, Yandex or USGS), which technically receive your IP address and the map area you are viewing, subject to their own privacy policies. If you use parcel/cadastre layers, the coordinates of the area you query are sent to the respective data source (for example the Spanish Catastro, French cadastre services or Regrid in the USA). If you use your device’s location feature to centre the map, your position is used in your browser and is not stored by us unless you place it into a project.
4. AI Features
The AI-assisted detection features (recognising shapes in map imagery) run locally in your browser. Images processed by these features are not uploaded to us or to third-party AI providers for that purpose.
5. Service Providers & Recipients
We use a small number of service providers (processors) to run the Service:
- Google (Firebase / Google Cloud) — authentication, databases, file storage for photos, and hosting.
- Google Maps Platform and the optional map/imagery providers listed above.
- Stripe — payment processing; PayPal for some legacy subscriptions. Your VAT/fiscal details may be registered with the payment provider to issue compliant invoices.
- Google Analytics — aggregate usage statistics (only with your cookie consent, see Section 12).
We may also disclose data where required by law (for example to tax authorities, or under a court order), and in the context of a corporate transaction (merger, acquisition), in which case this Policy continues to apply.
6. Sharing You Control
You decide who sees your projects. Private projects are visible only to you and members you invite. If you set a project to view-only or public, anyone with the link can see its contents (including any photos, descriptions, prices and comments in it), and public projects may allow comments. If you embed a project on a website, visitors of that website can view it. Think before sharing Content that contains personal data — once shared or embedded, it may be viewed and copied by others.
7. Guests & Enterprise Accounts
- Guest users — subscribers on eligible plans can let their own end clients view and measure without an account (for example through embedded projects). For personal data those end clients enter, the subscriber is the data controller and we act as processor on their behalf; we process such data only to provide the Service.
- Enterprise accounts — the Enterprise admin manages member accounts and can access members’ work within the organisation’s account. If your account was created by your organisation, your organisation’s own privacy rules also apply.
8. International Transfers
Our providers may process data outside the European Economic Area (for example Google and Stripe in the United States). Where they do, transfers are protected by an adequacy decision (such as the EU–US Data Privacy Framework, where certified) and/or the European Commission’s Standard Contractual Clauses, together with appropriate supplementary measures.
9. Data Retention
- Account and Content — kept while your account is active. When you delete Content or your account, it is removed from the live systems within a reasonable period, with residual copies clearing from backups on a rolling basis.
- Invoicing and tax records — retained for the periods required by Spanish tax and commercial law (generally up to six years).
- Logs and analytics — kept for limited periods appropriate to security and statistics.
10. Security
We protect data with encryption in transit (TLS), authentication and access controls, per-project access rules, and the security infrastructure of our cloud providers. No system is perfectly secure: please use a strong, unique password, and contact us immediately if you suspect unauthorised access to your account.
11. Your Rights
Under the GDPR and Spanish data protection law (LOPDGDD), you can ask us for access to your personal data, rectification, erasure, restriction of processing, data portability, and you can object to processing based on legitimate interests. Where processing is based on consent, you may withdraw it at any time without affecting prior processing. To exercise your rights, email support@blueblinkone.com; we may need to verify your identity. You also have the right to lodge a complaint with your supervisory authority — in Spain, the Agencia Española de Protección de Datos (aepd.es).
12. Cookies
The Service uses cookies and similar technologies:
- Essential — sign-in sessions, security and remembering your settings (for example your theme and language). These are required for the Service to work.
- Analytics — Google Analytics, used to understand aggregate usage and improve the product. These are set only with your consent, which you can give or decline in the cookie banner and change at any time by clearing cookies for the site.
13. Children
The Service is intended for professional use and is not directed at children under 14. We do not knowingly collect personal data from children; if you believe a child has provided us personal data, contact us and we will delete it.
14. Changes to this Policy
We may update this Policy as the Service or the law evolves. The current version is always available at this page; for material changes we will notify you (for example by email or in-app notice) before they take effect. This version 2.0 replaces the previous policy in force since 2019.
15. Contact
Blue Blink One, SL — CIF B44518892
Av. del Mar, 55, 12003 Castellón de la Plana, Spain
support@blueblinkone.com
Version 2.0 — effective 19 August 2026. See also our Terms & Conditions.