Privacy Policy

1. Information We Collect

Information You Provide

When you create an account or use our services, we collect information you voluntarily provide:

• Account information: name, email address, password (hashed)
• Profile information: company name, role/persona, phone number
• Payment information: processed securely through Stripe (we do not store card numbers)
• Property addresses: addresses you search and analyze. When a lookup succeeds, the address, coordinates, and resulting public-record report facts are also stored server-side in a shared parcel-facts cache so repeat lookups of the same parcel are fast; that cache is keyed to the parcel, not to you, and holds no name, email, or account identifier
• Communications: messages sent to support or feedback

Information Collected Automatically

When you use our services, we automatically collect:

• Usage data: pages visited, features used, reports generated, search queries
• Device information: browser type, operating system, screen resolution
• IP address and approximate location (city/state level)
• Cookies and similar technologies for session management and analytics
• Referral source and UTM parameters

Information from Third Parties

We may receive information from third-party authentication providers (Google, GitHub) when you sign in using OAuth. We receive only the information you authorize the provider to share (typically name and email).

2. How We Use Your Information

We use collected information to:

• Provide, maintain, and improve the Buildability™ platform
• Generate property reports and Buildability™ Scores for addresses you search
• Process payments and manage your subscription
• Send transactional emails (welcome, report delivery, billing)
• Send marketing communications (with your consent; you can opt out anytime)
• Analyze usage patterns to improve product features and user experience
• Detect and prevent fraud, abuse, and security incidents
• Comply with legal obligations and respond to lawful requests
• Provide customer support and respond to inquiries

3. How We Share Your Information

We do not sell your personal information. We share data only in these circumstances:

• Service providers: Stripe (payments), Supabase (database & auth), Netlify (hosting), Resend (email), Mapbox (mapping), Regrid and RentCast (parcel & market data), Anthropic (AI reasoning), ElevenLabs (voice mode), Sentry (error monitoring), PostHog (analytics — only after you opt in)
• Government data sources: We send property addresses (not your personal info) to government APIs to generate reports
• Legal compliance: When required by law, subpoena, or court order
• Business transfers: In connection with a merger, acquisition, or sale of assets (with notice)
• With your consent: When you explicitly authorize sharing

We require all service providers to maintain confidentiality and use your data only for the purposes we specify.

4. Data Retention

We retain your data as follows:

• Account data: retained while your account is active. Deleting your account (Account Settings, or a request to team@buildability.us) removes your account and the rows it owns — saved parcels, reports, certificates, keys — immediately and irreversibly
• Shared parcel-facts cache: entries hold public-record facts about parcels, are keyed to the parcel rather than any person, and are refreshed or replaced as parcels are re-queried
• Payment records: retained by us and by Stripe as required by tax and financial regulations
• Usage analytics: collected only after opt-in consent; retained in anonymized/aggregated form
• Support communications: retained as needed to resolve and document the issue
• Marketing preferences: retained until you unsubscribe or delete your account

5. Your Privacy Rights

All Users

Regardless of your location, you have the right to:

• Access your personal data and request a copy
• Correct inaccurate or incomplete data
• Delete your account and associated data
• Opt out of marketing communications
• Export your data in a portable format

GDPR Rights (EU/EEA Residents)

If you are in the EU/EEA, you additionally have the right to:

• Object to processing based on legitimate interests
• Restrict processing in certain circumstances
• Data portability (receive data in a structured, machine-readable format)
• Withdraw consent at any time (without affecting prior processing)
• Lodge a complaint with your local data protection authority

CCPA Rights (California Residents)

If you are a California resident, you have the right to:

• Know what personal information we collect, use, and share
• Delete your personal information (with certain exceptions)
• Opt out of the sale of personal information (we do not sell personal data)
• Non-discrimination for exercising your privacy rights

To exercise any of these rights, email team@buildability.us or use the account deletion option in your Account Settings. We will respond within 30 days.

6. Cookies and Tracking

We use cookies and similar technologies for:

• Essential cookies: session management, authentication, security (required)
• Analytics cookies: PostHog for usage analytics — loaded only after you opt in (can be declined)
• Functional cookies: theme preference, saved views, recent properties
• Error tracking: Sentry for crash reporting (anonymized)

You can manage cookie preferences through your browser settings. Declining non-essential cookies will not affect core functionality but may limit personalization features.

7. Data Security

We implement industry-standard security measures including:

• TLS/SSL encryption for all data in transit (256-bit)
• Encryption at rest for sensitive data in our database
• Supabase Row Level Security (RLS) policies for data isolation
• Regular security audits and vulnerability assessments
• Payment processing through PCI-DSS compliant Stripe
• Access controls and authentication for all internal systems
• Incident response procedures for security breaches

No system is 100% secure. If we become aware of a security breach affecting your data, we will notify you promptly in accordance with applicable law.

8. AI and Automated Processing

Buildability™ uses Anthropic's Claude models (Opus 4.7, Sonnet 4.6, and Haiku 4.5) to analyze property data and generate reports, scores, and recommendations. Anthropic acts as our AI sub-processor for this reasoning. A complexity router selects the appropriate Claude tier per query. Our AI processing:

• Processes property addresses and public government data (not your personal information)
• Does not use your personal data to train AI models
• Generates analysis that may contain errors or inaccuracies
• Produces outputs that are informational only and not professional advice

Separately, voice features (where available) use ElevenLabs for speech-to-text transcription (Scribe) and text-to-speech audio synthesis. These services process audio you choose to record or play back, and are limited to that audio modality — they are not used for reasoning over your property data.

You have the right to request human review of any AI-generated analysis. Contact team@buildability.us for manual review.

9. Children’s Privacy

Buildability™ is not intended for children under 13 (or under 16 in the EU/EEA). We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact team@buildability.us and we will delete it promptly.

10. International Data Transfers

Buildability™ processes data in the United States through Supabase (hosted on AWS). If you are located outside the United States, your data will be transferred to and processed in the U.S. We rely on Standard Contractual Clauses and other approved transfer mechanisms for EU/EEA data transfers.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through prominent notices on our website at least 30 days before the changes take effect. Continued use of the Services after changes constitutes acceptance.

12. Contact Us

For privacy questions, data requests, or concerns:

• Privacy: team@buildability.us
• Support: team@buildability.us
• General: team@buildability.us
• Website: buildability.us/contact