Privacy Policy

This policy explains what data buildonce.app ("we") collects when you use our studio, render API and MCP server, why we collect it, who we share it with, and the choices you have.

We collect what the product needs to work and to be billed correctly. We do not sell your data, and we do not use your templates or rendered output to train models or advertise to you.

We collect the following categories of data:

• Account data — your email address, name and avatar as provided by your sign-in method, plus the workspaces you belong to and your role in each.
• Workspace content — templates, design documents, brand assets, uploaded images, fonts and icons, and the parameters you send when rendering.
• Usage and technical data — API requests, render counts, timestamps, IP address, browser and device information, and error logs.
• Billing data — your plan, subscription status and invoice history. Card details are handled by our payment processor and never reach our servers.
• Connected account data — tokens and profile identifiers for the social or storage accounts you choose to connect, limited to the scopes you approve.
• Support data — the messages you send us and the context needed to answer them.

Most of this comes directly from you — when you sign in, upload an asset, build a template or call the API. Technical data is collected automatically as you use the Service. Billing status comes from our payment processor, and connected account data comes from the provider once you complete its authorisation flow.

We use your data to:

• Operate the Service — authenticate you, resolve your workspace, store your templates and render your images and PDFs.
• Meter and bill usage against your plan, and enforce seat, workspace and credit limits.
• Publish posts to the accounts you connected, at the times you scheduled.
• Keep the platform secure — detect abuse, investigate incidents and maintain an audit trail of sensitive actions.
• Provide support and respond to your requests.
• Improve the product through aggregate, non-identifying analysis of how features are used.
• Send service communications, such as billing notices and security alerts. Marketing email is opt-in and can be unsubscribed at any time.

Where the GDPR or similar law applies, we process personal data on these bases: performance of our contract with you (running the Service and billing it), our legitimate interests (security, abuse prevention, product improvement), your consent (marketing email and optional integrations), and compliance with legal obligations.

We use a small number of first-party cookies, all of them necessary for the product to function:

• A session cookie that keeps you signed in. It is HttpOnly, so it is never readable by JavaScript in your browser.
• A CSRF token cookie, read by the app and echoed back as a request header to prove a request came from our own pages.
• A workspace cookie that remembers which workspace you last had open. Membership is always re-checked on the server, so this cookie selects but never authorises.

We use no advertising cookies and no cross-site tracking. Every cookie we set is strictly necessary for the product to function.

We share data only with service providers that help us run the platform, and only as far as their role requires:

• Cloud hosting and database providers that store and serve your workspace data and uploaded assets.
• Our payment processor, for subscriptions, checkout and invoices.
• Identity providers you choose to sign in with.
• Social platforms and storage providers you explicitly connect, for the actions you ask us to take.
• Email delivery providers, for sign-in links and service notifications.

We may also disclose data where legally required, or where necessary to protect our rights, our users or the public. If we are ever involved in a merger or acquisition, we will give notice before your data becomes subject to a different privacy policy.

Data is encrypted in transit, sessions are backend-owned and stored as opaque cookies rather than tokens exposed to the browser, and API keys are scoped to a single workspace. Tenant isolation is enforced in the application and independently backstopped by row-level security in the database, so a bug in one layer does not by itself expose another workspace’s data. Sensitive administrative actions are logged with a required reason.

No system is perfectly secure. If a breach affects your data, we will notify you and any regulator within the timeframes the law requires.

We keep your data for as long as your account is active. When you delete a template, asset or workspace, it is removed from the Service and purged from backups on our normal rotation. Some records — invoices, audit logs and abuse reports — are kept longer where we have a legal or security obligation to do so.

Depending on where you live, you may have the right to:

• Access the personal data we hold about you and receive a copy of it.
• Correct data that is inaccurate or incomplete.
• Delete your data, subject to records we must retain.
• Object to or restrict certain processing, including direct marketing.
• Withdraw consent you previously gave, without affecting processing already carried out.
• Lodge a complaint with your local data protection authority.

Most of these can be exercised directly from your workspace settings. For anything else, contact us and we will respond within the time your law allows.

Our infrastructure and service providers may process data in countries other than your own. Where data leaves your region, we rely on appropriate safeguards such as standard contractual clauses.

The Service is not directed at children under 16, and we do not knowingly collect their personal data. If you believe a child has provided us data, contact us and we will delete it.

We update this policy as the product and our providers change. The date at the top of this page always reflects the current version, and we will give notice of material changes before they take effect.

For privacy questions or to exercise any of the rights above, reach our support team through your workspace or write to the contact address listed on our website.