This Privacy Policy explains how BlunkWorks, LLC ("BlunkWorks," "we," "us," or "our") collects, uses, and protects personal information across the blunk.works website and our family of products — including ScopeBuilder Pro, StockPilot, and OrbitDisk Pro (each, a "Product," and collectively, the "Services"). It applies together with our Master Terms of Service and, where we act as a processor of your business data, our Data Processing Addendum.
BlunkWorks, LLC is an Oklahoma limited liability company located in Wagoner County, Oklahoma, United States. We build and operate a family of software products for small businesses and professionals, and we are the controller of the personal information described in this policy. If you use a Product on behalf of an organization, that organization's own privacy practices may also apply to its users.
This policy is the company-wide baseline for all Services. Each Product may publish a product-specific privacy notice that adds detail about how that Product handles data (for example, whether it operates offline and keeps your files on your device). Where a product-specific notice is more specific, it controls for that Product; otherwise this policy applies. Current product notices:
| Category | What it includes | Why |
|---|---|---|
| Account & contact | Name and email address you provide when you create an account, start a trial, buy, or contact support. | To create and secure your account, deliver licenses, and reply to you. |
| Purchase & license records | Product and edition purchased, license key/License File, order and payment reference, activation count and per-device activation entries, license status, and (for subscriptions) plan and renewal state. | To fulfill and support your purchase, run your license, and prevent misuse. |
| Licensing / device signals | A hashed Machine Identifier (a one-way hash derived from device hardware — it cannot be reversed to identify your hardware or you personally), an optional device label you set, and the app version. For trials, the same hashed identifier tracks trial status so reinstalling doesn't reset it. | To activate, validate, and node-lock licenses and run free trials. |
| Your content | For cloud-connected Products, the business data you create or upload (such as scopes, inventory records, documents, images, and templates). You own this content; see our DPA. | To provide, sync, back up, and export the Product for you. |
| Support communications | The contents of emails and support requests you send us. | To provide support and keep records of it. |
| Technical logs | Standard server logs such as request time, IP address or a truncated identifier, and error diagnostics. | Security, licensing integrity, and troubleshooting. |
We use personal information to: create and secure your account; activate, validate, and node-lock your license and run your free trial; deliver your license and send transactional and support email; process purchases, upgrades, and renewals; provide, maintain, sync, and back up cloud-connected Products; provide customer support; detect, investigate, and prevent fraud, abuse, and license misuse (including maintaining a license revocation list); comply with legal, tax, and accounting obligations; and improve the reliability and security of the Services. We do not use your information for automated decisions that produce legal effects about you.
Where the EU/UK GDPR or similar laws apply, we rely on: performance of a contract (to provide the Services you request); legitimate interests (to secure the Services, prevent fraud and license misuse, and support customers), balanced against your rights; consent (where required, for example certain communications), which you may withdraw; and legal obligation (for tax, accounting, and compliance records).
All payments are processed by Stripe, Inc. Your full card number and other sensitive payment credentials are collected and handled directly by Stripe under Stripe's privacy policy; they never touch our servers. We store only a payment reference (such as a Stripe customer or charge identifier) together with your order and license records.
We share personal information only with service providers who help us operate the Services, and only as needed for them to perform that role — currently including payment processing (Stripe) and hosting and email delivery. The current list is on our Subprocessors page. We may also disclose information where required by law or valid legal process, to enforce our agreements, or to protect the rights, safety, and security of BlunkWorks, our users, or the public. If BlunkWorks is involved in a merger, acquisition, or sale of assets, information may transfer as part of that transaction, subject to this policy.
We keep personal information for as long as needed to provide the Services and for the legitimate and legal purposes described above — for example, we retain license and purchase records for the life of the license and as required for tax, accounting, warranty, and fraud-prevention purposes. Technical logs are kept for a limited period. When information is no longer needed, we delete or de-identify it, subject to routine backups.
We use reasonable administrative, technical, and organizational measures to protect personal information, including encryption in transit, access controls, and limiting access to what is needed to operate and support the Services. No method of storage or transmission is completely secure, and we cannot guarantee absolute security; you are responsible for keeping your credentials and license files confidential.
Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal information, to object to or restrict certain processing, and to withdraw consent. You will not be discriminated against for exercising these rights. You can also:
To make a request, email cs@blunk.works. We may need to verify your identity before acting. If you are in the EEA/UK you may also lodge a complaint with your local data-protection authority.
Our marketing websites use only the cookies and local storage needed to function (for example, remembering a preference). Our installable applications do not use advertising cookies or third-party ad tracking. If we introduce optional analytics, we will update this policy and, where required, ask for consent.
BlunkWorks operates in the United States, and personal information is stored and processed in the United States and by our subprocessors. If you access the Services from outside the United States, you understand that your information will be transferred to and processed in the United States, where data-protection laws may differ from those in your country.
The Services are intended for businesses and for adults 18 and older, and are not directed to anyone under 18. We do not knowingly collect personal information from anyone under 18. If you believe someone under 18 has provided us information, contact us and we will delete it.
We may update this policy from time to time. For material changes we will update the "Effective" date above and, where appropriate, provide additional notice. Your continued use of the Services after an update takes effect constitutes acceptance of the revised policy.
Questions or privacy requests? Email cs@blunk.works, or write to BlunkWorks, LLC, Wagoner County, Oklahoma, USA.