buildroy

Privacy Policy

Privacy Policy

Effective date: May 2, 2026 Last updated: May 2, 2026

This Privacy Policy describes how Buildroy ("Buildroy", "we", "us", or "our") collects, uses, and shares information about you when you use buildroy.com and our related services (the "Service").

If you have questions, contact us at support@buildroy.com.

1. Information we collect

Information you provide

  • Account information. When you sign in, we collect your email address and, if you sign in with Google, your Google account email and display name.
  • Calculator content. The prompts, refinements, and calculator specifications you create. We need this to generate, save, and serve the calculators you build.
  • Payment information. If you make a purchase, payment is processed by our third-party payment provider. We do not store your full card number — only a customer ID issued by the payment provider and the billing metadata it returns (such as last 4 digits, card brand, billing email, and subscription status).
  • Communications. Emails you send us at support@buildroy.com.

Information collected automatically

  • Usage data. Pages viewed, features used, generation and refinement counts, plan tier, and approximate time spent. We use this to improve the product and enforce plan limits.
  • Device & log data. IP address, browser type and version, operating system, referring URL, and timestamps.
  • Analytics. We use a third-party analytics provider to capture product analytics events such as generation and refinement activity, error states, and rate-limit hits. The current provider is listed at buildroy.com/subprocessors.

Information from third parties

  • Google Sign-In. If you sign in with Google, we receive your Google email and name. We do not access your Google contacts, drive, or other Google services.
  • Payment provider. We receive subscription status and billing event webhooks from our payment provider.

2. How we use information

We use the information above to:

  • Provide, operate, and maintain the Service.
  • Generate calculator specifications using third-party AI providers.
  • Authenticate you and keep your session active.
  • Enforce free-tier limits, refinement caps, and rate limits.
  • Process subscriptions, one-time unlocks, and refunds.
  • Send transactional emails (sign-in links, receipts, account notices) via a third-party email provider.
  • Detect, investigate, and prevent abuse, fraud, and security incidents.
  • Improve the Service through analytics and aggregate usage trends.
  • Comply with legal obligations.

We do not sell your personal information. We do not use the content of your calculators to train AI models.

3. AI processing

When you generate or refine a calculator, your prompt and any prior spec are sent to a third-party AI provider for inference. Our current AI provider(s) are listed at buildroy.com/subprocessors. We choose providers that, per their policies, do not use API inputs to train their models.

4. How we share information

We share information only with the following categories of recipients:

  • Service providers that help us run Buildroy (database and auth, payments, AI inference, analytics, email, hosting, CDN). The current list of subprocessors is published at buildroy.com/subprocessors. Each is bound by contractual confidentiality and data-protection obligations.
  • Legal & safety. When required by law, subpoena, or to protect rights, property, or safety.
  • Business transfers. If Buildroy is acquired or merged, your information may transfer to the successor entity. We'll notify you before this happens.

5. Cookies and tracking

We use first-party cookies and localStorage to keep you signed in, remember preferences, and maintain an anonymous session identifier. We use first-party analytics cookies set by our analytics provider. We do not use advertising cookies or third-party tracking pixels.

You can disable cookies in your browser, but the Service will not function without session cookies.

6. Data retention

  • Account data: kept while your account is active. If you delete your account, we typically delete your account data within 30 days, except where retention is required by law (e.g., billing records).
  • Calculator content: kept while your account is active or until you delete it.
  • Anonymous session data: typically kept up to 90 days from last activity, then purged.
  • Analytics events: retained per our analytics provider's default retention.
  • Logs: typically retained for 30 days.

7. Your rights

Depending on where you live, you may have the right to:

  • Access the personal information we hold about you.
  • Correct inaccurate information.
  • Delete your account and associated data.
  • Export your data in a portable format.
  • Opt out of certain processing (e.g. analytics).
  • Object to processing or restrict it.

To exercise any of these rights, email support@buildroy.com. We respond within 30 days.

EEA, UK, and Swiss users

We process personal data on the legal bases of (a) performing our contract with you, (b) our legitimate interests in operating and improving the Service, (c) your consent where required, and (d) compliance with legal obligations. You may lodge a complaint with your local data protection authority.

California users

Under the CCPA/CPRA, you have rights to know, delete, correct, and limit the use of your personal information. We do not sell or share personal information for cross-context behavioral advertising.

8. Children

Buildroy is not directed to children under 13, and we do not knowingly collect information from anyone under 13. If you believe a child has provided us information, contact us and we will delete it.

9. International transfers

Buildroy is operated from the United States. If you access the Service from outside the U.S., your information will be transferred to, stored in, and processed in the U.S. and other countries where our service providers operate. We rely on Standard Contractual Clauses or equivalent safeguards where required.

10. Security

We use industry-standard safeguards including HTTPS/TLS for data in transit, encrypted storage at rest, least-privilege access controls, and PCI-DSS-compliant infrastructure for payments (handled by our payment processor). No system is perfectly secure; we cannot guarantee absolute security.

11. Changes to this policy

We may update this policy from time to time. If we make material changes, we'll notify you by email or in-product notice at least 14 days before the changes take effect. The "Last updated" date at the top reflects the most recent change.

12. Contact

Buildroy support@buildroy.com