Privacy Policy

1. Information We Collect

Information you provide: Name, email address, and account details during registration. Payment information is collected and processed by Stripe.

Automatically collected: Browser type, device information, pages visited, usage timestamps, and privacy-masked session replays via cookies and similar technologies. Analytics IP addresses are anonymized.

Usage data: Your queries and preferences are processed to generate analytics and improve service quality.

2. How We Use Your Information

We use your information to: provide and improve the Service; process subscriptions and payments; send transactional communications; generate AI-assisted intelligence; analyze usage patterns; and enforce our Terms of Service. We do not sell your personal information.

3. Third-Party Providers

Supabase provides authentication and database infrastructure. Stripe processes payments - we do not store your full card information. OpenAI powers AI analytics - queries may be sent to OpenAI's API, but we do not send personal account information (name, email, payment) to OpenAI. PostHog provides product analytics and privacy-masked session replay. Sentry provides error monitoring and error-triggered replay.

4. Session Replay Privacy

Session replay helps us understand navigation, clicks, scrolling, rendering problems, and product errors. Form inputs are masked, passwords and payment details are not recorded, sensitive account and report text is masked, URL query strings are removed, and request or response bodies, headers, cross-origin frames, canvas contents, and console logs are not captured by PostHog replay.

5. Cookies

We use essential cookies for authentication and session management, and analytics cookies to understand usage patterns. We do not use advertising or tracking cookies.

6. Data Retention

We retain account information while your account is active. Upon deletion, personal information is removed within 30 days except where required for legal or compliance purposes. Anonymized usage data may be retained for product improvement.

7. Data Security

We implement industry-standard security measures including encryption in transit and at rest, access controls, and regular security reviews. No method of transmission is completely secure - we cannot guarantee absolute security.

8. Your Rights

Depending on your jurisdiction, you may request access to, correction of, or deletion of your personal information. Contact us at team@buildalytic.com and we will respond within 30 days.

9. Children

The Service is not directed at individuals under 18. We do not knowingly collect information from children.

10. Changes

We may update this policy with 15 days notice. The date at the top reflects the most recent revision.

11. Contact

For privacy inquiries, contact team@buildalytic.com.