Privacy Policy — BuildPad

BuildPad Technology ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the BuildPad platform. Please read this policy carefully.

1. Data We Collect

1.1 Account and Identity Data

Email address — used for authentication and communications
Full name — displayed in your profile and within the platform
Profile picture — optional, used for display purposes
Company or team name — used to scope your workspace

1.2 Usage Data

Pages visited and features used within the platform
AI agent interactions and conversation history (stored per session)
Project and mission activity logs
Session timestamps, device type, browser, and IP address
Error logs and performance diagnostics

1.3 Payment Information

We do not store your payment card details. Payment information is collected and processed directly by Stripe, our payment processor. We receive only non-sensitive billing metadata such as subscription status, plan tier, and transaction IDs.

1.4 Content You Create

This includes project files, code snippets, chat messages, task descriptions, and any other content you input into the platform. This data is stored to provide the Service and is not shared with third parties without your consent.

2. How We Use Your Data

Service delivery — Operating BuildPad features, AI agents, and collaboration tools
Authentication — Verifying your identity and managing sessions
Billing and payments — Processing subscriptions, invoices, and refunds
Communications — Sending product updates, security alerts, and support responses
Analytics — Understanding usage patterns to improve the platform
Security — Detecting and preventing fraud, abuse, and unauthorized access
Legal compliance — Meeting regulatory obligations in applicable jurisdictions

We do not sell your personal data to third parties. We do not use your content to train AI models without your explicit consent.

3. Data Storage and Infrastructure

3.1 Primary Database

Your account data, project content, and usage data are stored in Supabase, a managed PostgreSQL database hosted on AWS infrastructure in the US East (North Virginia) region. Supabase applies encryption at rest (AES-256) and in transit (TLS 1.2+).

3.2 Application Hosting

The BuildPad web application is hosted on Vercel, a globally distributed edge network. Static assets and serverless functions may be served from edge nodes worldwide to minimize latency. Vercel does not have access to your stored data.

3.3 Retention

We retain your data for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete or anonymize your personal data within 30 days, except where retention is required by law or for legitimate business interests (e.g., fraud prevention, financial records).

4. Data Sharing and Third Parties

We share your data only with the following categories of trusted service providers:

Stripe — Payment processing. Stripe is PCI-DSS Level 1 certified. Their privacy policy is available at stripe.com/privacy.
Supabase — Database and authentication infrastructure.
Vercel — Application hosting and edge delivery.
Anthropic / Google — AI model providers. Conversation inputs are transmitted to process AI responses. These providers have their own data processing agreements in place.
Analytics providers — Anonymized and aggregated usage data may be shared with analytics services to improve the platform. No personally identifiable information is shared in this context.

We do not share your data with advertisers, data brokers, or unaffiliated third parties for marketing purposes.

5. Your Rights (GDPR and Global)

Regardless of your location, we respect the following data rights. Users in the European Economic Area have these rights guaranteed under the General Data Protection Regulation (GDPR); we extend equivalent protections to all users globally.

Right of Access — You may request a copy of the personal data we hold about you.
Right to Rectification — You may request correction of inaccurate or incomplete data.
Right to Erasure — You may request deletion of your personal data ("right to be forgotten"), subject to legal retention obligations.
Right to Data Portability — You may request an export of your data in a machine-readable format (JSON or CSV).
Right to Restrict Processing — You may request that we limit how we process your data in certain circumstances.
Right to Object — You may object to processing based on legitimate interests or for direct marketing.

To exercise any of these rights, email us at privacy@buildpad.me. We will respond within 30 days. Identity verification may be required before we can fulfill your request.

6. Cookies and Tracking

We use cookies and similar technologies for the following purposes:

Essential cookies — Required for authentication, session management, and core platform functionality. These cannot be disabled.
Preference cookies — Store your settings such as theme (light/dark) and language preferences.
Analytics cookies — Help us understand how users interact with the platform. These are anonymized and do not track you across external websites.

You can manage cookie preferences through your browser settings. Note that disabling essential cookies will impair the functionality of the platform.

7. Security

We implement industry-standard security measures to protect your data:

All data in transit is encrypted using TLS 1.2 or higher
All data at rest is encrypted using AES-256
Authentication is managed via Supabase Auth with secure session tokens
Row-Level Security (RLS) policies ensure users can only access their own data
Access to production infrastructure is restricted to authorized personnel only
We conduct regular security reviews and follow responsible disclosure practices

Despite our best efforts, no method of transmission over the internet or electronic storage is 100% secure. In the event of a data breach affecting your personal data, we will notify you as required by applicable law.

8. Children's Privacy

BuildPad is not directed to individuals under the age of 13. We do not knowingly collect personal data from children under 13. If you become aware that a child has provided us with personal data without parental consent, please contact us at privacy@buildpad.me.

9. International Transfers

BuildPad is operated from Egypt. If you are accessing the Service from outside Egypt, your data may be transferred to and processed in countries with different data protection laws than your country of residence. By using the Service, you consent to such transfers. We ensure that appropriate safeguards are in place for any international transfers of personal data.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and, where appropriate, by email. The "Last updated" date at the top reflects the date of the most recent revision. Continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: privacy@buildpad.me
Legal inquiries: legal@buildpad.me