Privacy Policy

1. Information We Collect

We collect information that identifies, relates to, describes, references, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or device ("personal information").

1.1 Information You Provide to Us

• Account Registration: Name, email address, phone number, company name, and password.
• Waitlist & Newsletter: Email address provided during signup.
• Billing Information: Credit card details, billing address, and transaction history. Note: Full credit card numbers are tokenized and stored by our payment processor (Stripe), not on our servers.
• Project Data: Client details (names, addresses), project scopes, quotes, invoices, photos, and files uploaded to the platform.
• Voice Data: Audio recordings uploaded for the "AI Scope Generator" feature.
• Messaging: Content of messages sent between you, your staff, and your clients via our secure messaging system.

1.2 Information Collected via BuiltClip

When you use the BuiltClip extension, we collect data from the web pages you actively visit and interact with to provide the "clipping" functionality:

• Product Data: Product names, prices, SKUs/Model numbers, images, and supplier URLs.
• Page Content: The extension scans the HTML of the active tab to identify product details. This occurs only when you interact with the extension.
• Authentication Tokens: We access local storage to identify your logged-in user session to save clipped items to your account.

1.3 Information Collected via Mobile Apps

• Device Information: Device model, operating system version, and unique device identifiers.
• Push Notification Tokens: To send you alerts about project updates, payments, or messages.
• Subscription Data: Receipt validation data from Apple App Store or Google Play Store for in-app subscriptions.

1.4 Automatically Collected Information

• Usage Data: Pages visited, features used, time spent, and clickstream data (via Google Analytics).
• Cookies: We use cookies to maintain your session and store preferences. See our Cookie Policy for details.

2. How We Use Your Information

We use the collected information for the following purposes:

• Service DeliveryTo provide, operate, and maintain our Services, including project management, invoicing, and client portals.
• AI ProcessingAudio recordings and project descriptions are processed by third-party AI providers (OpenAI) to generate text transcripts and scope itemizations. Data sent to OpenAI is not used to train their public models.
• Payment ProcessingTo facilitate subscription billing (via Stripe, Apple, or Google) and to allow you to collect payments from your clients (via Stripe Connect).
• CommunicationTo send you updates, security alerts, and support messages.
• ModerationTo monitor and moderate messaging content for safety. Administrators may review flagged or reported messages to enforce our Terms of Service.
• ImprovementTo analyze usage trends and improve user experience.

3. Legal Basis for Processing

Under the General Data Protection Regulation (GDPR), we process your personal data under the following legal bases:

• Contractual Necessity: To fulfill our contract with you (e.g., providing the App's core features like invoicing and estimating).
• Legitimate Interests: To improve our Services, ensure security, and prevent fraud.
• Consent: For marketing communications or optional features like Voice AI (where you explicitly upload recordings). You can withdraw consent at any time.
• Legal Obligation: To comply with tax and accounting laws (e.g., retaining invoice records).

4. Sharing Your Information

We do not sell your personal data. We disclose your information only to the following categories of third parties:

• Legal Requirements: If required to do so by law or in response to valid requests by public authorities (e.g., a court or a government agency).
• Business Transfers: In connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.

5. International Data Transfers

Our servers are located in secure data centers. If you are accessing our Services from outside the country where our servers are located (e.g., accessing from the UK/EU while our servers are in the US), your information may be transferred to, stored, and processed in a country that may not have the same data protection laws as your jurisdiction.

We ensure appropriate safeguards are in place for such transfers, such as the use of Standard Contractual Clauses (SCCs) approved by the European Commission or the UK Information Commissioner's Office (ICO).

6. Data Security

We implement industry-standard security measures to protect your data, including encryption in transit (TLS/SSL) and at rest. Access to personal data is restricted to employees and contractors who have a legitimate business need to access such information. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

7. Your Rights (GDPR & CCPA)

Depending on your location, you may have the following rights:

• Access & Portability: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your account and associated data ("Right to be Forgotten").
• Opt-Out: Unsubscribe from marketing communications via the link in our emails.

To exercise these rights, please contact us at privacy@builtup.io.

8. Data Retention

We retain your personal information only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use your information to the extent necessary to comply with our legal obligations (for example, keeping financial records for tax purposes), resolve disputes, and enforce our legal agreements and policies.

9. Children's Privacy

Our Services are not intended for use by children under the age of 18 ("Minors"). We do not knowingly collect personally identifiable information from Minors. If you become aware that a Minor has provided us with Personal Data, please contact us immediately.

10. Changes to This Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. You are advised to review this Privacy Policy periodically for any changes.

11. Contact Us