Privacy Policy

Last updated: October 12, 2026

Scope

This policy describes how BlueLux LLC handles personal information in operating its pool services and BlueLux digital products: bluelux.com, its blog and Playbook, Ask Blue, public calculators, API/MCP tools, and Pool Scout at scout.bluelux.com. It also covers related inquiries, applications, service communications and billing.

BlueLux may provide a separately governed platform to other businesses. When another business uses that platform for its customers, that business's privacy notice and its agreement with BlueLux govern that processing. This policy governs BlueLux's own websites and services and does not replace another business's notice. External websites, AI hosts and integrations have their own practices.

Information and sources

CategoryExamples and sourcesMain purposes
Customer and account dataName, email, phone number, service address, account identifiers, and authorized contacts supplied by you or an authorized personAccounts, inquiries, service delivery, and support
Property and service dataPool and equipment details, access instructions, service photos, recommendations, proposals, Service Confirmations, approvals, and signed recordsQuotes, scheduling, safe access, service performance, and dispute records
Billing and payment dataBilling address, charges, invoices, payment status, refunds, and limited payment-method details received from StripePayments, accounting, fraud prevention, and billing support
Communications and submissionsEmail and text exchanges, form entries, submitted files, and support requestsResponding to requests, providing service, and maintaining business records
Ask Blue dataQuestions, answers, recent conversation context, source references, page context, feedback, and conversation identifiersGenerating answers, conversation continuity, troubleshooting, and quality review
Scout dataAccount email, searched or uploaded addresses, uploaded CSV content and filenames, coordinates, saved searches, tags, assignments, and status changesProperty research, prospect workflows, export, and account persistence
External property dataParcel or owner information, mapped features, geocoding, and imagery from public-record and mapping sourcesEnriching and presenting Scout search results
Device and usage dataIP address, browser and device details, request logs, page activity, campaign identifiers, cookies, and local or session storageSecurity, site operation, analytics, attribution, and product improvement
Application dataInformation submitted for employment or business opportunitiesEvaluating and responding to the application

We collect only the categories relevant to the feature or relationship. This policy distinguishes customer and service records from billing and payment records, although identifiers such as a name or address may appear in both. Stripe handles full payment credentials in the normal payment flow; BlueLux receives the limited billing records described below. Scout property-owner information can concern someone who has never created a BlueLux account. A public record can still be subject to privacy duties when it is combined, enriched, or used for a new purpose.

Billing and payment data

Stripe collects full payment credentials through the payment form. In the normal payment flow, BlueLux does not receive or store the full card number; we receive transaction records and limited payment-method details needed to administer billing. Do not send card numbers through general forms or chat.

Ask Blue conversations and AI processing

Ask Blue stores questions and answers in Neon with associated conversation and source information. Selected recent context is used to answer follow-up questions. Clearing a browser conversation does not necessarily delete the server record. Runpod processes answer generation, OpenAI processes search embeddings, and Pinecone supports retrieval. Braintrust receives performance and quality metadata and feedback; BlueLux does not currently send raw questions or answers to Braintrust. Authorized staff may review stored conversations for support, quality and safety.

These providers maintain their own processing and retention practices. Do not submit unnecessary confidential information to public AI tools.

API and MCP data

API/MCP calls send the arguments needed for the requested operation to BlueLux's supporting calculation services. Your chosen external AI host or integration can also receive inputs and results. You should not include unnecessary identifying or sensitive information in tool arguments. A host's handling of its copy is governed by that host's practices.

Scout processing

Scout uses address searches and uploaded lists to discover and organize nearby properties. Geocoding, mapping and enrichment can involve Google Maps/Places, OpenStreetMap services and county ArcGIS records. These services receive information necessary to fulfill the relevant request, such as an address or geographic area; a mapping service may also receive browser/device data when its content loads.

Saved records can include uploaded CSV content, not just map markers. Signing into an account can associate that browser's previously anonymous saved searches with the account. Removing a browser cookie is not the same as deleting account data.

Disclosures

We disclose information to providers that support hosting, storage, payments, authentication, communications, mapping, AI processing, analytics, and security when needed for the relevant purpose. These providers include Render, Neon, Stripe, Resend, Twilio, Google services, Cloudflare, and the AI and mapping providers described above.

We may also disclose information to BlueLux personnel and authorized subcontractors who provide the requested service, to a recipient you direct us to use, when the law requires it, to protect safety or legal rights, or in a business transaction subject to applicable protections. Submitted information is used for the purposes described here. BlueLux does not publish submitted information or distribute it for unrelated purposes unless you direct us to do so or another lawful basis applies.

We do not sell personal information for money. Some analytics or advertising disclosures can be treated as "sharing" under California privacy law even without a monetary sale. You may opt out of covered sale or sharing through our privacy request form, at legal@bluelux.com, or at 601-258-3589. Service-provider processing needed to fulfill your request or provide a service may continue where the law permits it.

Text messaging privacy

When you separately consent to BlueLux SMS, MMS, or RCS messages, we use your mobile number and consent record to send the messages you requested and to document, administer, and honor your messaging choices. Messaging consent is not a condition of purchase. Message frequency varies, and message and data rates may apply. Reply STOP to opt out and HELP for help, or contact support@bluelux.com or 601-258-3589.

We do not sell, rent, or share mobile phone numbers or messaging opt-in data with third parties or affiliates for their own marketing or promotional purposes. We disclose that information only to providers that operate the messaging program, such as Twilio, telecommunications carriers, and customer-support providers, or when required by law. Messaging consent is specific to BlueLux and cannot be transferred as part of a customer list.

Opting out of messages does not cancel a paid service, erase service or billing records, or stop communications that the law permits without marketing consent. Use the Service Agreement's cancellation method to stop automatic renewal.

Cookies, analytics and choices

Our sites use cookies and browser storage for account sessions, preferences, conversation continuity and attribution. The public BlueLux website uses Umami Cloud for aggregate page categories, language, referral origins, contact clicks, quote steps, modal views, form interactions and inquiry outcomes. Umami analytics do not receive form contents, names, contact details, searches, URL parameters or personal identifiers from our integration. Dynamic article and guide URLs are grouped into page categories. Umami processes network/browser information to derive visit statistics without analytics cookies; reports are private and retained for up to two years. We do not enable Umami session recordings or identify individual users. The website also loads Google Tag Manager; enabled tags can process usage, device and campaign information. Embedded maps and other external resources can collect information when loaded. Third-party analytics and embedded services may collect activity across websites under their own policies. Browser settings may restrict that collection.

When your browser sends Global Privacy Control, this website suppresses its Google Tag Manager and Umami loading and analytics events. The older Do Not Track setting also suppresses those analytics here. These controls do not prevent necessary hosting logs or every independent embedded service from processing data. You can manage cookies and storage through your browser; disabling necessary storage may prevent sign-in or other features. You can unsubscribe from marketing email and opt out of texts using STOP. These choices do not erase information we must retain or cancel a paid service.

Retention and security

We retain information for the purposes described above, considering the service relationship, request type, accounting and recordkeeping obligations, dispute periods, security needs and any legal hold. Ending a subscription does not automatically delete all invoices, signed records, correspondence or backups. We delete or de-identify information when we no longer need it for the stated purposes, subject to the retention considerations above and lawful exceptions.

We use reasonable administrative, technical and organizational safeguards. No system guarantees complete security. Information may be processed where BlueLux and its providers operate, including outside your state or country.

Privacy requests

Use our privacy request form, legal@bluelux.com or 601-258-3589 to request access, correction or deletion or to ask about a privacy concern. Include enough information to identify the relevant account or interaction; do not email sensitive identity documents unless a secure verification method is requested. We verify identity when appropriate, use request information for that purpose and explain applicable exceptions.

Where the CCPA or another applicable law grants them, rights can include knowing/accessing personal information, obtaining a portable copy, correcting inaccuracies, deleting information, opting out of sale/sharing, limiting qualifying uses of sensitive information, and exercising rights without unlawful discrimination. Authorized agents may submit requests subject to appropriate authority and verification. We respond within the applicable legal timeframe and explain any permitted extension.

Removing a saved payment method does not cancel a subscription or erase legally retained transaction records. To cancel service use the Service Agreement's cancellation method. Privacy requests and service cancellation are handled separately so neither is unnecessarily delayed.

Children and policy changes

BlueLux digital accounts and prospecting tools are intended for adults and are not directed to children under 13. Adults arranging swim instruction or lifeguard services may supply limited information about participating children needed to provide that service. Contact us if you believe a child has independently submitted information without an adult arranging the service.

We post substantive revisions with a fixed effective date and provide appropriate notice of material changes. Where a changed use requires consent, we obtain it before that use. Continued use of a website is not blanket permission for every new use of previously collected data.

Contact: BlueLux LLC, legal@bluelux.com, 601-258-3589, PO Box 8831, Rancho Santa Fe, CA 92067.