1. Introduction

Build8 ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered workflow generation service.

2. Information We Collect

2.1 Information You Provide

Account Information: Email address, name, and authentication credentials
Payment Information: Billing details processed securely through Stripe (we do not store full credit card numbers)
Workflow Content: The prompts, descriptions, and workflow data you create using Build8
Communications: Messages you send us through contact forms or support channels

2.2 Automatically Collected Information

Usage Data: Features used, workflows created, credits consumed, session duration
Device Information: Browser type, operating system, IP address, device identifiers
Analytics Data: Page views, clicks, navigation patterns collected via Google Analytics
Cookies: Session cookies for authentication and preference storage

3. How We Use Your Information

We use the collected information for the following purposes:

Service Provision: To provide, maintain, and improve Build8's AI workflow generation features
Account Management: To create and manage your account, process subscriptions, and handle billing
AI Model Improvement: To train and improve our AI models (you can opt out - see Section 9)
Communication: To send service updates, respond to inquiries, and provide customer support
Analytics: To understand usage patterns and improve user experience
Security: To detect, prevent, and address technical issues and fraudulent activity
Legal Compliance: To comply with legal obligations and enforce our Terms & Conditions

4. Data Storage and Security

Your data is stored securely using Convex, a modern backend platform with enterprise-grade security:

Data is encrypted in transit using TLS/SSL
Data is encrypted at rest
Access controls and authentication mechanisms protect your data
Regular security audits and updates are performed

While we implement reasonable security measures, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security of your data.

5. Third-Party Services

Build8 integrates with the following third-party services that may collect and process your data:

5.1 AI Model Providers

OpenRouter: Processes your workflow prompts to generate AI responses
OpenAI: May process data through OpenRouter's API

Your prompts and generated content are sent to these providers to deliver the AI functionality. Review their privacy policies for details on their data handling practices.

5.2 Payment Processing

Stripe: Processes all payment transactions securely. We do not store your full credit card information.

5.3 Analytics

Google Analytics: Tracks website usage, page views, and user interactions to help us improve the service.

5.4 Authentication

Better Auth: Handles user authentication and session management

6. Data Sharing and Disclosure

We do not sell your personal information. We may share your data in the following circumstances:

With Your Consent: When you explicitly authorize us to share information
Service Providers: With third-party vendors who perform services on our behalf (AI providers, payment processors, analytics)
Legal Requirements: When required by law, court order, or government request
Business Transfers: In connection with a merger, acquisition, or sale of assets
Protection: To protect our rights, property, or safety, or that of our users or the public

7. Data Retention

We retain your information for as long as necessary to provide our services and comply with legal obligations:

Account Data: Retained while your account is active and for a reasonable period after deletion
Workflow Data: Retained while your account is active; deleted upon account deletion
Usage Logs: Retained for up to 90 days for analytics and troubleshooting
Payment Records: Retained as required by tax and accounting regulations

8. Your Rights and Choices

Depending on your location, you may have the following rights:

Access: Request a copy of the personal data we hold about you
Correction: Request correction of inaccurate or incomplete data
Deletion: Request deletion of your personal data (subject to legal retention requirements)
Export: Request a copy of your data in a portable format
Opt-Out: Opt out of marketing communications and certain data processing activities
Restriction: Request restriction of processing in certain circumstances

To exercise these rights, please contact us through the contact page or your account settings.

9. AI Training Opt-Out

By default, your workflow prompts and generated content may be used to improve our AI models. If you wish to opt out of having your data used for AI training:

Navigate to your account settings
Disable "Use my data for AI model improvement"

Opting out will not affect your ability to use Build8's features.

10. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to:

Maintain your login session
Remember your preferences
Analyze usage patterns
Improve service performance

You can control cookies through your browser settings. Note that disabling cookies may limit some functionality.

11. Children's Privacy

Build8 is not intended for users under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

12. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. By using Build8, you consent to such transfers.

13. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

Right to know what personal information is collected
Right to know whether personal information is sold or disclosed
Right to opt-out of the sale of personal information (we do not sell personal information)
Right to deletion of personal information
Right to non-discrimination for exercising CCPA rights

14. European Privacy Rights (GDPR)

If you are in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR), including those outlined in Section 8 above. Our legal basis for processing your data includes:

Contract Performance: Processing necessary to provide our services
Legitimate Interests: Improving our services and preventing fraud
Consent: Where you have given explicit consent
Legal Obligation: Compliance with applicable laws

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

Posting the updated policy on this page
Updating the "Last updated" date
Sending an email notification for significant changes

Your continued use of Build8 after changes become effective constitutes acceptance of the updated Privacy Policy.

16. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Through our contact page
Via email (available on our website)

We will respond to your inquiry within a reasonable timeframe.

17. Data Protection Officer

For privacy-related inquiries, you may contact our Data Protection Officer through the contact methods listed above.