Skip to main content

Buildify Privacy Policy

Effective Date: August 6, 2026

Introduction​

Welcome to Buildify.dev. Buildify.dev ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, share, and protect your personal data when you use our code generation platform, website (buildify.dev), and related online services (collectively, the "Services").

This policy should be read in conjunction with our Terms of Service ("Terms"), which contain additional important information about how we handle your data and content.

1. Information We Collect​

We collect several types of information to provide and improve our Services.

a. Account Information​

When you create an account, we collect information to set up and manage your profile, including:

  • Full name
  • Email address
  • Payment information (for paid subscription plans)
  • Account preferences and settings

b. Service Usage Data​

When you use our platform, we collect data related to your interactions with our Services, including:

  • Prompts you provide to the platform
  • Code generated by the platform
  • Platform interaction data (e.g., button clicks, feature usage)
  • Error logs and debugging information

The ownership and usage rights of your generated code and prompts are detailed in the "Intellectual Property Rights" section of our Terms.

c. Automatically Collected Information (Log Files & Analytics)​

We automatically collect certain information when you use our Services:

  • Internet Protocol (IP) addresses
  • Browser type and version
  • Device information and operating system
  • Internet Service Provider (ISP)
  • Date and time stamps of access
  • Referring and exit pages

2. How We Use Your Information​

We use the information we collect for the following purposes:

  • To Provide and Improve Our Services: To operate our platform, process payments, enhance functionality, and develop new features.
  • Support and Operations: To provide customer support, send service-related updates, and respond to inquiries.
  • Security and Maintenance: To maintain the security and integrity of our platform, prevent fraud and abuse, analyze usage patterns, and debug technical issues.
  • Service Improvements and AI Training: We may use Service Usage Data (like prompts and generated code) to train our AI models and improve service quality. Users on our Enterprise plan are excluded from AI model training. Data accessed through third-party connectors — including Google Workspace data such as Gmail, Google Drive, and Google Calendar — is never used to train our AI models; it is used only to provide the connector features you have enabled. See "Data Usage, Training, and Learning" in our Terms.

3. Data Sharing and Disclosure​

We do not sell or rent your personal data. We may share your data under the following circumstances:

a. With Third-Party Service Providers​

We use trusted providers for specific services:

  • PostHog – for product analytics and user behavior insights
  • Datadog – for infrastructure monitoring, system logging, and performance diagnostics
  • GitHub – if you connect your GitHub account, we access repo metadata (e.g., file structure, commits) to support code sync and version control
  • Supabase – if you integrate your own Supabase account, we may access project metadata, schemas, or API keys solely for enabling real-time database and storage functionality within your Buildify project

All providers are contractually bound to safeguard your data and may only use it for the intended service.

We may disclose your data when legally required to do so or in response to valid governmental requests (e.g., subpoenas or court orders).

c. To Protect Our Rights​

We may share data to protect our legal rights, enforce our Terms, or respond to suspected illegal activity.

4. Analytics and Tracking Technologies​

We use cookies and analytics tools to enhance functionality and understand user behavior.

  • Cookies: Used to maintain sessions, remember preferences, and improve your experience. Cookie settings can be controlled in your browser.
  • Analytics Tools:
    • Google Analytics – website traffic tracking (opt-out available)
    • PostHog – for session analytics and feature usage tracking
    • Datadog – to monitor infrastructure performance and log metadata for diagnostics

These tools may collect pseudonymized data such as IP address, browser type, device info, and platform interaction events.

5. User Content and Project Visibility​

The code and prompts you generate are private by default.

a. Private Projects​

Your private projects are accessible only to you and authorized Buildify.dev personnel for support and platform maintenance.

b. Public Projects​

If you set a project to "public," its contents become visible to other users and may be remixed or used as a starting point.

c. Connected Accounts and Connectors​

If you connect third-party accounts or tools to Buildify — for example, to let the platform and its AI agents work with your files, code, email, calendar, or other data — that access is described in Section 6, "Third-Party Connectors and Google User Data."

6. Third-Party Connectors and Google User Data​

Buildify offers connectors that let the platform and its AI agents access your data in third-party services on your behalf.

a. How connectors work​

  • We connect using industry-standard OAuth 2.0, or — where a provider requires it — an access token that you generate and provide. We never receive or store your third-party account password.
  • Access is limited to the specific permissions (scopes) you approve on the provider's own consent screen, for only the connectors you choose to enable.
  • We use connector data solely to provide the features you enable (for example, reading or sending email, accessing files, or managing calendar events).
  • You can disconnect any connector at any time from your account settings, which revokes Buildify's access. We keep connector credentials only while the connector is connected and only as needed to provide the feature.
  • Your use of each third-party service remains subject to that provider's own terms and privacy policy.

b. Google user data and Limited Use​

Some connectors access Google Workspace data, such as Gmail, Google Drive, and Google Calendar.

Buildify's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

  • We access your Google data only to provide the connector features you enable, as described in the app.
  • We do not use Google user data for advertising.
  • We do not sell Google user data, and we do not transfer it except as needed to provide or improve these features with your consent, for security, or to comply with law.
  • We do not use Google user data to train generalized or non-personalized AI or machine-learning models.
  • We do not allow humans to read your Google data, except: with your explicit consent for specific items, as necessary for security or to comply with applicable law, or where the data has been aggregated and anonymized for internal operations.

c. Google permissions (scopes) we request​

When you connect a Google connector, Google's consent screen asks you to approve a specific set of permissions, called scopes. Below is every Google scope Buildify requests, what it is used for, and how Google classifies it. We request nothing beyond this list.

ConnectorScopeWhy Buildify needs itGoogle category
All Google connectorsopenid, emailIdentifies which Google account you connected, so we can label the connection in your settings and prevent the same account being connected twice.Non-sensitive
Gmailhttps://www.googleapis.com/auth/gmail.modifyLets the agent read messages for context, draft and send mail, and apply labels — on your instruction. This scope does not permit permanent deletion of your mail.Restricted
Google Drivehttps://www.googleapis.com/auth/driveLets the agent open, create, and update the documents and files you ask it to work with in your Drive.Restricted
Google Calendarhttps://www.googleapis.com/auth/calendar.eventsLets the agent read and manage the events you ask it to create, move, or summarise.Sensitive
Google Calendarhttps://www.googleapis.com/auth/calendar.calendarlist.readonlyLists the calendars on your account so you can choose which one an event should go on. Grants no access to event contents by itself.Sensitive
Firebasehttps://www.googleapis.com/auth/datastoreLets the agent read and write Firestore data in the Google Cloud project you connect. This reaches your own project's data, not Google Workspace user data.Non-sensitive

Why we request full Drive access. Google offers a narrower Drive scope, https://www.googleapis.com/auth/drive.file, which reaches only files that were created through the requesting app or that you explicitly open with it. That scope cannot support Buildify's use case: if you ask the agent to find an existing document in your Drive and revise it, a drive.file grant cannot see that document, because you did not create it through Buildify. Accessing files you already own is the point of the connector, so the broader drive scope is required.

Each connector is authorised separately. Every Google connector runs its own authorisation flow and holds its own token, covering only the scopes listed above for that connector. We do not use Google's include_granted_scopes option, which would combine permissions across flows. Connecting Gmail therefore grants Buildify no access to your Drive or Calendar, and disconnecting one connector does not affect the others.

d. Securing connector credentials​

  • Connector access tokens are stored encrypted, and tokens for higher-sensitivity Google scopes (such as Gmail and Drive) receive additional key-management protections.
  • Access tokens are short-lived and refreshed automatically; if a connector's authorization becomes invalid, we ask you to reconnect.

You can revoke Buildify's access to a connected Google account at any time from your Buildify account settings or from your Google Account permissions page.

7. Data Security, Retention, and Deletion​

  • Security: We use industry-standard security practices including HTTPS encryption, secure data storage, and strict access controls.
  • Retention: We retain your data as long as your account is active or as necessary to provide Services.
  • Deletion: You can request deletion of your personal data by contacting support@buildify.dev. We will honor such requests in accordance with applicable laws and retention obligations.

8. Your Rights and Choices​

You may:

  • Access personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your personal data
  • Export your data in a machine-readable format
  • Opt out of certain types of processing

To exercise these rights, email: support@buildify.dev

9. Children's Privacy​

Our Services are not intended for anyone under 18. We do not knowingly collect data from children. If we become aware that a child has submitted data, we will delete it promptly.

10. International Data Transfers​

We may transfer your data across borders to trusted service providers. Where applicable, we implement safeguards (e.g., Standard Contractual Clauses) consistent with data protection laws.

11. Relationship to Terms of Service​

This Privacy Policy is part of our Terms of Service. If there is a conflict between this policy and the Terms, the Terms shall prevail.

12. Changes to This Policy​

We may update this policy. If material changes occur, we will post the revised policy here and update the Effective Date. Please review it periodically.

13. Contact Information​

If you have questions or concerns:

We aim to respond to privacy-related inquiries within 10 business days. For urgent issues, mark your subject line: "URGENT - Privacy Concern."