Privacy Policy

1. Introduction

This Privacy Policy describes how bldrAgent ("bldrAgent," "we," "us," or "our") collects, uses, and shares personal information when you access or use our AI-powered website and mobile app builder platform (the "Platform") and our website at bldragent.com (the "Website").

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above and, where appropriate, notify you by email or via an in-platform notification. We encourage you to review this page periodically.

For HIPAA-regulated projects, review our Business Associate Agreement (BAA) summary.

2. Information We Collect

a. Information You Provide Directly

• Account registration: When you create an account, we collect your name, email address, and password (stored in hashed form).
• Profile & billing: When you subscribe to a plan, we collect billing information (processed securely by our payment processor, Stripe). We do not store your full payment card details.
• Content & prompts: Text prompts, project descriptions, uploaded assets, and any other content you submit to the Platform ("Input Data").
• Communications: Messages you send to our support team or through any contact forms on the Website.

b. Information Collected Automatically

• Usage data: Pages visited, features used, clicks, session duration, and referring URLs.
• Device & connection data: IP address, browser type and version, operating system, and device identifiers.
• Cookies and similar technologies: We use cookies and local storage to keep you signed in, remember preferences, and analyze Platform usage. See Section 7 for details.
• Log data: Server logs that record requests made to our services, including timestamps and error information.

c. Information from Third Parties

• OAuth / SSO providers: If you sign in with Google or GitHub, we receive your name, email address, and profile picture from that provider, subject to your authorization.
• Analytics partners: Aggregated or anonymized data about how visitors interact with the Website.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Platform and Website.
• Process your account registration and authenticate your identity.
• Process payments and manage your subscription.
• Generate websites, mobile apps, and other output in response to your prompts ("Generated Output").
• Respond to support requests, feedback, and inquiries.
• Send transactional emails (e.g., account confirmations, invoices, password resets).
• Send product updates and marketing communications where you have given consent or where permitted by law (you may opt out at any time).
• Detect, investigate, and prevent fraudulent, unauthorized, or illegal activity.
• Enforce our Terms of Service and other policies.
• Improve and develop the Platform by analyzing usage patterns and aggregated data.
• Comply with legal obligations and respond to lawful government requests.

4. Legal Basis for Processing

Where required by applicable law (e.g., GDPR), we rely on the following legal bases:

• Contract performance: Processing necessary to provide the Platform services you have subscribed to.
• Legitimate interests: Improving and securing the Platform, detecting fraud, and conducting analytics, where these interests are not overridden by your rights.
• Legal obligation: Compliance with applicable laws, regulations, court orders, or government requests.
• Consent: For marketing communications and non-essential cookies, where required by law.

5. How We Share Your Information

We do not sell your personal information. We may share it with:

• Service providers: Third-party vendors that help us operate the Platform, including cloud hosting (AWS), payment processing (Stripe), AI model providers (Anthropic Claude), transactional email services, and analytics tools. These providers are contractually bound to protect your data and may only use it as directed by us.
• Affiliates: Our subsidiaries and affiliated companies, subject to this Privacy Policy.
• Business transfers: In connection with a merger, acquisition, financing, or sale of all or part of our assets, your information may be transferred as part of the transaction.
• Legal compliance: When required by law, subpoena, court order, or to protect the rights, property, or safety of bldrAgent, our users, or others.
• With your consent: In any other circumstances where we have your explicit consent.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Platform services. Upon account termination, we will delete or anonymize your personal information within 30 days, except where we are required to retain it longer by applicable law, for dispute resolution, fraud prevention, or enforcement of our agreements. Aggregated, anonymized data may be retained indefinitely.

7. Cookies and Tracking Technologies

We use cookies and similar technologies (such as local storage and session tokens) to:

• Maintain your authenticated session.
• Remember your preferences and settings.
• Analyze how users interact with the Platform and Website.
• Detect and prevent fraudulent activity.

You can control cookie behavior through your browser settings. Disabling certain cookies may limit the functionality of the Platform. We may use Google Analytics to measure usage; you can opt out via the Google Analytics Opt-out Browser Add-on.

8. Data Security

We implement commercially reasonable technical, administrative, and organizational safeguards designed to protect your personal information against unauthorized access, disclosure, alteration, and destruction. These measures include TLS encryption in transit, encrypted storage at rest, access controls, and regular security reviews. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

9. International Data Transfers

bldrAgent operates globally. Your personal information may be transferred to and processed in countries outside your country of residence, including the United States, which may have different data protection laws. Where required, we take appropriate safeguards to ensure your data is treated in accordance with this Privacy Policy and applicable law.

10. Your Privacy Rights

Depending on your jurisdiction, you may have the following rights with respect to your personal information:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request correction of inaccurate or incomplete personal information.
• Deletion: Request deletion of your personal information, subject to legal retention obligations.
• Portability: Request your personal information in a structured, machine-readable format.
• Objection / Restriction: Object to or request restriction of certain processing activities.
• Withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at [email protected]. We will respond within the timeframe required by applicable law. We may ask you to verify your identity before fulfilling your request.

11. Children's Privacy

The Platform is not directed to individuals under the age of 13 (or 16 in the European Union). We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us at [email protected] and we will take steps to delete such information.

12. Third-Party Links and Services

The Platform and Generated Output may contain links to or integrations with third-party websites and services. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies before providing any personal information.

13. Contact Us

If you have any questions, concerns, or complaints about this Privacy Policy or our data practices, please contact us at: