Privacy Policy

Last updated: March 8, 2026

1. Information We Collect

We collect the following types of information:

  • Account Information: Name, email address, company name, phone number, and business address provided during registration
  • Business Data: Projects, proposals, invoices, client information, and other content you create within the Service
  • Usage Data: How you interact with the Service, including pages visited, features used, and timestamps
  • Device Information: Browser type, operating system, and device identifiers

2. How We Use Your Information

We use your information to:

  • Provide, maintain, and improve the Service
  • Process your account registration and manage your subscription
  • Send transactional emails (invoices, proposals, account notifications)
  • Power AI features to generate proposals and other business content
  • Provide customer support
  • Ensure the security and integrity of the Service

3. AI Data Processing

When you use AI-powered features, your input data (such as project descriptions and scope details) is processed to generate content. We do not use your business data to train AI models. AI-generated content is created on-demand and is treated with the same privacy protections as your other data.

4. Data Sharing

We do not sell your personal information. We may share data with:

  • Service Providers: Third-party services that help us operate (hosting, email delivery, payment processing, AI providers). These providers are contractually obligated to protect your data.
  • Your Clients: When you send proposals or invoices through the Service, the relevant information is shared with your specified recipients.
  • Legal Requirements: When required by law, legal process, or to protect our rights.

5. Data Storage & Security

Your data is stored securely using industry-standard encryption and security practices. We use Supabase for database hosting with row-level security policies ensuring data isolation between accounts. While we take reasonable measures to protect your data, no system is completely secure.

6. Data Retention

We retain your data for as long as your account is active. If you close your account, we will delete your data within 90 days, except where retention is required by law. You may request data export at any time while your account is active.

7. Your Rights

You have the right to:

  • Access and view your personal data
  • Correct inaccurate information
  • Request deletion of your account and data
  • Export your data in a standard format
  • Opt out of non-essential communications

8. Cookies

We use essential cookies for authentication and session management. These are necessary for the Service to function and cannot be disabled. We do not use third-party advertising or tracking cookies.

9. Children's Privacy

The Service is not directed at individuals under 18 years of age. We do not knowingly collect information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Service. The "Last updated" date at the top reflects the most recent revision.

11. Contact

For privacy-related questions or to exercise your rights, contact us at support@build-flow.net.