Privacy Policy

This Privacy Policy explains what information BLDGDeck collects, how we use it, who we share it with, and the choices you have. It applies to the BLDGDeck website and application.

1. Information we collect

• Account information: your name, email address, and password hash (managed by our authentication provider).
• Documents and Project content: the documents you upload, notes you create, and the outputs of AI workflows you run against them.
• Billing information: Stripe customer and subscription identifiers and receipts. BLDGDeck does not receive or store your full card number or CVC.
• Usage information: which pages you visit, which features you use, and basic device / browser metadata, subject to your cookie choices.
• Support communications: emails you send us.

2. How we use it

• To provide, operate, and improve the Service.
• To run the AI workflows you request against the documents in your Projects.
• To process payments, prevent fraud, and enforce our Terms.
• To send transactional messages (receipts, security notices, trial reminders).
• To respond to your support and sales inquiries.
• To generate aggregate, non-identifying analytics about how the Service is used.

3. AI processing

When you run an AI workflow, the text needed to answer the request is sent to a third-party large-language-model provider via the Lovable AI Gateway. Only the content required for the request is transmitted. Providers process the request under their own privacy commitments; we do not authorize them to use your content to train their models.

4. Subprocessors

We rely on the following subprocessors to operate the Service:

• Supabase — hosted Postgres, authentication, and object storage for uploaded documents and Project data.
• Stripe — payment processing, subscription lifecycle, customer billing portal.
• Lovable AI Gateway — routing prompts to third-party AI model providers.
• Cloudflare — content delivery and application runtime.

5. Sharing

We do not sell your personal information. We share information only with the subprocessors listed above, with people you explicitly invite to a Project, when required by law, or in connection with a merger or acquisition.

6. Retention

We keep your account and Project data for as long as your account is active. You can delete individual documents and Projects. When you delete your account we delete your Projects and documents from our primary systems within 30 days; provider-level backups may retain data for a limited additional period before being purged.

7. Security

See our Security page for the controls we have implemented, including row-level access isolation, TLS in transit, and provider-managed encryption at rest.

8. Your choices

• Access and correction: you can view and update your account information in the app.
• Deletion: email hello@bldgdeck.com to request deletion of your account and associated data.
• Cookies: manage your cookie preferences from the footer of any page. See our Cookie Policy.
• Marketing email: BLDGDeck does not send marketing emails at this time.

9. Children

The Service is not directed to children under 13 and we do not knowingly collect their information.

10. International users

The Service is operated from and hosted in the United States. If you access it from outside the U.S., your information will be transferred to and processed in the U.S.

11. Changes

We may update this Privacy Policy. Material changes will be announced in advance and, where required, we will ask for renewed consent.

12. Contact

Privacy questions: hello@bldgdeck.com. Security disclosures: security@bldgdeck.com.