Privacy Policy

1. Overview

This Privacy Policy describes how Builts (“we”, “us”) collects, uses, and protects information when you use our Service at builts.tech.

2. Information We Collect

• Account information — such as your name, email address, avatar, and authentication credentials. If you sign in with Google, we receive your basic profile (name, email, profile picture) from Google.
• Content — projects, files, comments, and collaborator invites you create or upload to the Service.
• Guest feedback information — when you leave a comment on a project without an account, we store the name and contact details you provide so the project owner can reply.
• Usage data — information about how you interact with the Service, including log data, device information, and cookies.
• Billing information — processed by our payment provider (Stripe); we do not store full card details.

3. How We Use Information

We use the information we collect to:

• Provide, maintain, and improve the Service.
• Authenticate users and secure accounts.
• Deliver invite emails and service notifications.
• Process payments and manage subscriptions.
• Detect, prevent, and respond to abuse, fraud, or security issues.

4. Service Providers

We rely on the following third-party providers to operate the Service. Each processes only the data necessary for their role:

• Supabase — authentication, database, and file storage (hosted in the United States).
• Vercel — application hosting and edge delivery.
• Stripe — payment processing and subscription management.
• Resend — transactional email delivery (for example, collaborator invites and contact form replies).
• Google — when you choose to sign in with Google, Google receives your sign-in request and returns your basic profile.

We do not sell your personal information. We share data only with these providers, or when required by law.

5. International Transfers

Our providers are primarily located in the United States, which means your information may be transferred to and processed outside of your country of residence. We rely on our providers' compliance measures (such as Standard Contractual Clauses) to safeguard these transfers.

6. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. You may request deletion of your account and associated data at any time.

7. Security

We use industry-standard safeguards to protect your data. No method of transmission or storage is perfectly secure, so we cannot guarantee absolute security.

8. Your Rights

Depending on your location, you may have rights to access, correct, export, or delete your personal information. Contact us through our contact form to exercise these rights.

9. Cookies

We use a small number of cookies, including:

• Authentication cookies set by Supabase to keep you signed in.
• Session cookies used while you interact with the Service in a single browser session.

You can clear cookies through your browser; doing so will sign you out.

10. Children

The Service is not directed to children under 13, and we do not knowingly collect personal information from them.

11. Changes

We may update this Privacy Policy from time to time. Material changes will be communicated through the Service.

12. Contact

Questions about this Privacy Policy? Reach us through our contact form.