1. Introduction
Welcome to the informational website of Blanket Partners Inc. (the “Website”). This Privacy Policy applies solely to this Website, not to the property management platform that Blanket operates separately (the “Platform”). We are committed to complying with applicable data protection laws. The Website is directed to users in the United States only and is not directed to anyone under 18; we do not knowingly collect information from children under 18. This Policy may be amended from time to time, and we will post any change a reasonable time before it takes effect.
2. Contact Us
If you have any questions, comments, or concerns regarding this Policy or our processing of your personal information, please contact us at support@blankethomes.com.
3. What We Collect and Why
When you subscribe to our newsletters, we process your email address, full name, and mobile phone number to send the content you requested. When you contact us with an inquiry or demo request, we also process your account username, the PM software you use, and the content of your message. When you provide feedback or reviews, we process that feedback. We also use cookies and internal analytics to process your IP address, access time, device and browser type, language, and actions taken on the Website. Providing this information is not a legal obligation, but without it we may not be able to respond or provide certain features. You can opt out of our newsletter at any time via the opt-out link or by emailing support@blankethomes.com.
4. Methods and Sources for Collecting Your Personal Information
We collect personal information from several sources: directly from you when you use our email, contact form, or subscription form; from service providers that help us operate the Website; and through the device you use to access the Website, including third-party cookies and the analytics, advertising and security tools described below.
How we use cookies and analytics. We use a small number of third-party tools to run the Website, understand how it is used, and measure our marketing. Depending on where you are (see “Your choices” below), some of them only run after you consent.
HubSpot provides our website tracking code, contact and demo-request forms, and chat widget, and processes the information you submit through them. HubSpot’s advertising pixel, when active, also loads the Meta (Facebook) pixel, which shares limited visitor and engagement data with Meta for ad measurement and retargeting on Meta’s platforms. The LinkedIn Insight Tag shares similar data - such as IP address, browser and device type, and pages visited - with LinkedIn for conversion tracking, retargeting, and aggregate demographic reporting about our visitors; LinkedIn may associate this with a LinkedIn member’s profile under LinkedIn’s own privacy policy. We use PostHog for product analytics, including clicks and page views, heatmaps, and session replay, served through our own subdomain (e.blankethomes.com); session replay masks form fields and is retained for 30 days. Leadpipe and RB2B help us identify the company and, where possible, the individual associated with a visit, using data such as IP address and browsing behavior, so our team can follow up on inbound interest. They work with identity and advertising data partners, including LiveIntent and Sovrn, which may set or read their own cookies and match your device with information they hold from other websites. Forms on this site are protected by Google reCAPTCHA; the Google Privacy Policy and Terms of Service apply.
Your choices. If you are visiting from the EEA, the UK, or Switzerland, none of the tools above that use cookies or similar technologies run until you consent through our cookie banner. Everywhere else they run by default unless you decline in the banner or your browser sends a Global Privacy Control signal. You can also opt out directly with LinkedIn, Meta, the Digital Advertising Alliance and the Network Advertising Initiative.
Global Privacy Control. Some browsers and extensions send a Global Privacy Control (GPC) signal telling websites that you do not want your personal information sold or shared, or used for targeted advertising. We treat a GPC signal as an opt-out request under the California Consumer Privacy Act and the Colorado Privacy Act, and we apply the same opt-out wherever you are visiting from. The signal works per browser or device, so enable it on each one you use.
5. Sharing Your Personal Information
We will not share your information with third parties except in the cases below or with your explicit, informed consent: with service providers who assist with Website operations (such as HubSpot, Amazon Web Services, PostHog, Leadpipe, RB2B, and Google reCAPTCHA), authorized to use it only to provide those services; to respond to abuse of the Website or violations of law; when required by a judicial, governmental, or regulatory authority; or in connection with a merger, acquisition, or other restructuring of our business.
6. Google API Services and Gmail Data
If you connect your Google account to Blanket, we may access certain Gmail data through Google OAuth to provide email-based features within the Blanket platform (the “Platform”). Depending on the features you use and the permissions you grant, we may access the content of Gmail messages and threads; message metadata such as sender, recipient, subject line, timestamps, and labels; Gmail labels; and draft and email-sending capabilities, including creating drafts and sending messages on your behalf when you direct us to.
7. How We Use Google Data
We use Google data only to provide, maintain, secure, and support specific user-facing features in the Platform, including analyzing email threads with owners and related contacts; identifying communication gaps, unanswered questions, and churn-risk signals; generating personalized risk insights and recommended next steps; preparing draft replies and follow-ups for your review; and sending emails or saving drafts when you initiate that action. We do not use Google user data for advertising, and we do not sell it.
8. AI Processing and Third-Party Service Providers
To provide these features, we may process Google-derived email data using third-party service providers, including cloud hosting, authentication, and AI providers such as OpenAI, Anthropic, xAI, and Google - solely to analyze communications, generate churn-risk insights, recommend follow-up actions, and prepare draft responses for you. We contractually require these providers to process the data only to provide services to us. We do not use Google user data to develop, improve, or train generalized or non-personalized AI or machine-learning models.
9. Data Storage, Security, and Retention
Google-derived data - including Gmail message content, thread context, metadata, labels, drafts, and related outputs - is encrypted in transit and at rest. We store it using Amazon Web Services (AWS) and related infrastructure, with access controls limiting access to authorized personnel. We generally retain this data for up to 30 days in our processing and memory systems, unless a shorter period applies, you request deletion, or retention is required for security, fraud prevention, or legal compliance. OAuth tokens are stored securely and deleted or revoked when no longer needed.
10. Human Access
Our personnel do not access the content of Google user data except in limited circumstances: with your affirmative consent for a specific support or troubleshooting request; when necessary for security, fraud prevention, or abuse investigation; when required to comply with applicable law; or when the data has been aggregated and de-identified for internal operational purposes.
11. Limited Use Disclosure
Our use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We will not sell Google user data to third parties; use it for advertising, retargeting, or interest-based ads; or use it to determine credit-worthiness or for lending. We require our employees, agents, contractors, and subprocessors that handle Google user data to comply with these restrictions.
12. Revocation and Deletion
You may revoke Blanket’s access to your Google account at any time through the Platform (Settings > Integrations > Gmail > Disconnect) or your Google Account permissions page. When you disconnect, we promptly revoke the associated OAuth tokens, and remaining Google-derived data is deleted within 30 days, consistent with our standard retention cycle. You may also request expedited deletion by contacting support@blankethomes.com.
13. Data Retention and Security
We retain your information for as long as needed to operate the Website, and thereafter as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements - approximately 7 years overall. We implement measures such as HTTPS/TLS connections to our database, an AWS-managed firewall, encryption at rest, and least-privilege access to reduce the risk of loss or unauthorized access, though no measure provides absolute security.
14. Changes to This Policy
We may amend this Policy from time to time. We will post any change to this Policy on our Website a reasonable time in advance of the effective date of the change.
