Privacy Policy

Effective October 6, 2026

Actionbase Inc. operates Bluedoor, a service for finding public records and preparing, making, and tracking records requests. This policy explains how we handle information when you visit bluedoor.sh, sign in, or use the service.

Information we collect

• Account information. When you sign in with Google, Google and our authentication provider Clerk provide your name, email address, profile picture, and an account identifier. If you use email sign-in, we receive the information needed to create and secure your account.
• Information you provide. This can include your account type, organization type and size, interests, contact details, request descriptions, and messages you send us. If purchases become available, our payment provider collects payment details and gives us transaction information; we do not collect full card numbers in our forms.
• Usage and device information. Our hosting and analytics tools may receive your IP address, browser and device details, pages viewed, interactions, approximate location derived from IP address, and cookies or similar identifiers. We use PostHog for site and product analytics, including session recordings with input masking.
• Records and correspondence. If you authorize a records request, we may receive agency replies and responsive records. Publicly released records shown on the site may contain information supplied by agencies or other third parties.
• Connected Gmail accounts. If you separately connect a Gmail account, Google gives us its verified email address, account identifier, the permissions you approved, and an access credential. The Gmail permissions requested for request correspondence can read and send mail in the chosen account. We encrypt the saved refresh credential. The permission applies to the account as a whole, even though Bluedoor uses it for the records requests you authorize.

How we use information

We use information to authenticate you, maintain your workspace, understand what records you want, communicate with you, process authorized requests and purchases, display records, improve the service, prevent abuse, and comply with legal obligations. Google sign-in uses basic identity information only; it does not grant Gmail or Google Drive access. Connecting Gmail is a separate, optional authorization.

When you connect Gmail for request correspondence, we use that access to send records requests you authorize, identify replies to those requests, and bring related messages and attachments into your request history. We do not use unrelated personal mail for those purposes. We do not sell Google user data, use it for advertising, or use it to train general AI models. Our use of information received from Google Workspace APIs follows the Google API Services User Data Policy, including its Limited Use requirements.

When information is shared

Service providers process information for us, including Clerk for authentication, Cloudflare for hosting and security, PostHog for analytics, Resend for email, and Stripe if you make a purchase. If you direct us to make a records request, we may share the details needed with the relevant public agency or request portal. We may disclose information when required by law or to protect the service and its users. We do not publish your private account setup answers or Google sign-in information. Some request activity and responsive public records may be published on Bluedoor after review.

Connected Gmail data is shared only as needed to provide your request correspondence, such as sending an authorized message to a public agency and processing relevant replies with our hosting providers, or for security or legal compliance. Our personnel do not read connected Gmail messages unless you explicitly authorize help with specific messages, it is necessary to investigate security or abuse, or law requires it.

Retention and choices

We keep information while it is needed to operate your account and requests, maintain records, resolve disputes, prevent abuse, or meet legal and financial obligations. You can ask about your information, request access or deletion, or close your account by emailing support@bluedoor.sh. We will respond according to applicable law; some request correspondence may need to be retained as case evidence.

You can disconnect a Gmail account in Bluedoor at any time. Disconnecting deletes its saved access credential and stops new access through that connection; we also attempt to revoke the grant with Google. You can review and revoke Bluedoor in your Google Account settings. Disconnecting does not automatically erase correspondence already included in an authorized request. You can control cookies in your browser.

Security and changes

We use reasonable technical and organizational safeguards, but no online service is perfectly secure. We may update this policy as the service changes. The effective date above shows when it was last updated.

Contact

Actionbase Inc., Seattle, Washington. For privacy questions, email support@bluedoor.sh.