BuildOrder.ai ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information.
1. Information We Collect
Account information: When you create an account, we collect your email address and password (stored as a hashed credential — we never see your password in plain text).
Business profile: When you complete onboarding, you provide your contractor name, business name, address, phone number, license number, insurance information, and payment preferences. This information is stored to auto-populate your generated documents.
Job and document data: We store the information you input when creating jobs and generating documents, including client names, project addresses, work descriptions, and line items. We also store the text content of generated documents.
Payment information: We do not store your full credit card details. Payment processing is handled by Stripe. We store a Stripe customer ID and subscription status to manage your plan.
Usage data: We collect information about how you use the Service, including which features you use and when documents are generated, to improve the product and enforce plan limits.
Client data: When you use the email delivery or eSign features, we store the name and email address of the client you sent a document to, along with view and signature timestamps.
Feedback: If you submit feedback through the app, we store your message and the page you submitted it from.
2. How We Use Your Information
- To provide, operate, and improve the Service
- To generate documents using the information you provide
- To process payments and manage your subscription
- To send documents to your clients on your behalf
- To notify you when clients view or sign documents
- To enforce plan usage limits
- To send important account and service notifications
- To respond to support requests
We do not sell your personal information. We do not use your data to train AI models.
3. Third-Party Services
We use the following third-party services to operate the platform. Each has its own privacy practices:
| Service | Purpose | What they receive |
|---|---|---|
| Supabase | Database & authentication | All account and document data is stored in Supabase's hosted PostgreSQL database |
| Stripe | Payment processing | Payment card details, billing address, subscription status |
| Anthropic | AI document generation | The job description and form data you enter when generating a document is sent to Anthropic's API to produce the document text. Anthropic does not retain this data for model training per their API data use policy. |
| Resend | Transactional email | Recipient email address, document content, and sender info when you use the email delivery feature |
| Vercel | Hosting & infrastructure | Server request logs including IP addresses |
4. Data Retention
We retain your account data and documents for as long as your account is active. If you delete your account, we will delete your profile, documents, and associated data within 30 days. Some data may be retained longer if required by law or to resolve disputes.
5. Your Rights
You have the right to:
- Access the data we hold about you — contact us at support@buildorder.ai
- Correct inaccurate data through your account settings
- Delete your account and associated data using the "Delete Account" option in your settings
- Export your documents by copying or downloading them from the app
- Opt out of non-essential communications by contacting us
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA). If you are in the European Economic Area, you have rights under GDPR. Contact us to exercise these rights.
6. Security
We use industry-standard measures to protect your data, including encryption in transit (HTTPS/TLS) and at rest. Authentication is handled by Supabase with hashed passwords and secure session tokens. However, no system is perfectly secure. We encourage you to use a strong, unique password for your account.
7. Children
The Service is intended for use by contractors and business owners. We do not knowingly collect personal information from anyone under 18 years of age. If you believe we have inadvertently collected such information, contact us and we will delete it.
8. Changes to This Policy
We may update this Privacy Policy periodically. We will notify you of material changes by email or by displaying a notice in the app. The "last updated" date at the top of this page reflects the most recent revision.
9. Contact
For privacy-related questions or to exercise your rights, contact us at: