Privacy Policy

We collect information in three ways: directly from you, automatically as you use the platform, and from the data you upload about your own customers.

• Account and contact information — your name, business name, email, phone, and details you provide when registering, starting a trial, or buying a service.
• Billing information — payments are processed by Stripe, which collects and secures your full card details. We receive only summary information such as the last four digits, card type, and billing name; we do not store full card numbers.
• Usage and technical data — pages visited, features used, IP address, browser type, device identifiers, and server logs, used to operate and improve the service.
• Customer data you provide — if you use the platform to manage your own customers, you upload data about those individuals (names, contact details, job history, invoices). We process this on your behalf and do not sell it or use it for our own purposes.

We use information only for legitimate purposes related to operating and improving the platform:

• Create and maintain your account and deliver the features and website services you purchase.
• Process payments, manage subscriptions, and handle billing through Stripe.
• Send transactional messages — confirmations, invoices, subscription notices, support replies, and service updates.
• Send product and marketing communications, which you can opt out of at any time via the unsubscribe link or by contacting us.
• Analyze aggregated usage to fix bugs and build new features.
• Detect and prevent fraud, abuse, and security threats.
• Comply with legal obligations and enforce our terms.

We do not sell your personal information. We share it only in these circumstances:

• Service providers and sub-processors that help us operate the platform (see the next section), who may access data only to perform services for us and must protect it.
• End-customer data you direct us to share — for example, to deliver a payment link or portal invite to your customer.
• Legal requirements — when required by law, regulation, or legal process, or to protect the rights and safety of BuiltFastCo, our users, or others.
• Business transfers — if BuiltFastCo is involved in a merger, acquisition, or sale of assets, your information may transfer as part of that transaction; we will provide notice beforehand.

We rely on a small set of trusted providers to run the platform, and we update this list as they change.

• Stripe — payment processing for subscriptions and website purchases.
• Supabase — cloud database hosting and authentication; your account and platform data are stored on this infrastructure.
• Email and SMS delivery providers — used to send transactional and marketing messages through the platform.
• Cloud hosting and content-delivery infrastructure — all primary processing occurs in the United States.

We use cookies and similar technologies to keep you signed in, remember preferences, and protect against cross-site request forgery. We may also use privacy-respecting analytics to understand, in aggregate, how visitors use our site. You can control cookies through your browser; disabling some may affect functionality such as staying signed in.

We collect the following categories of personal information as defined by the California Consumer Privacy Act (CCPA/CPRA):

• Identifiers: name, email address, phone number, IP address, account username, device identifiers.
• Commercial information: subscription plan, purchase history, billing records, website build orders.
• Internet or other electronic network activity: pages visited, features used, log data, session data.
• Inferences: preferences and settings inferred from platform usage to personalize the experience.
• Professional or employment-related information: business name, business type, and trade category.

We do not collect sensitive personal information as defined by the CPRA (such as Social Security numbers, financial account credentials, or precise geolocation data beyond IP-based location).

Sources of collection: directly from you (registration, purchases, support requests), automatically through platform usage, and from data you upload about your own customers (which we process on your behalf and do not use for our own purposes).

We do not sell personal information. We do not share personal information for cross-context behavioral advertising. We honor Global Privacy Control (GPC) signals as a valid opt-out of sharing where applicable.

We keep your account and business data while your account is active and for a reasonable period afterward — long enough to allow reactivation, complete pending obligations, and meet legal and financial record-keeping requirements. When data is no longer needed, we delete or de-identify it.

Our general retention schedule is as follows: account data is retained for 3 years after account closure; financial and billing records are retained for 7 years for tax and legal compliance; end-customer data uploaded by tenants is retained for 90 days after the tenant’s account closes, after which it is deleted or anonymized.

Customer data you upload follows the same policy, and you can delete individual records through the platform at any time. See the section on cancellation below.

We use industry-standard safeguards including encryption of data in transit and at rest, access controls, and infrastructure with its own security practices. No system is perfectly secure, but if we become aware of a breach affecting your personal data, we will notify you as required by law.

Depending on where you live, you may have rights over your personal information:

• Access — request a copy of the information we hold about you.
• Correction — ask us to fix inaccurate or incomplete data.
• Deletion — ask us to delete your information, subject to legal retention requirements.
• Portability — export your business data using the platform's export tools.
• Opt out of marketing — unsubscribe from marketing emails any time.
• California residents have rights under the CCPA/CPRA, including to know, delete, and opt out of the sale or sharing of personal information. We do not sell or share your personal information as defined by the CCPA.

To exercise any of these rights, email hello@builtfastco.com. We may need to verify your identity first.

If we deny your request, you may appeal by emailing legal@builtfastco.com with 'Privacy Request Appeal' in the subject line. We will respond within the timeframe required by applicable law.

If you cancel or close your account, export any data you need before access ends; the platform includes export functionality, and you can email hello@builtfastco.com for help.

After closure we retain your data for a reasonable period before permanent deletion, subject to legal obligations, and we do not use it for new purposes after cancellation.

The platform is for businesses and adults aged 18 and older. We do not knowingly collect information from anyone under 18. If you believe a minor has provided us information, email hello@builtfastco.com and we will delete it.

BuiltFastCo is based in the United States and stores and processes data primarily in the US. If you access the platform from elsewhere, your information will be transferred to and processed in the US, where data-protection laws may differ from those where you live.

We may update this policy as the platform grows or laws change. For material changes we will update the effective date above and, where appropriate, notify you by email or in-app. Continued use after changes take effect means you accept them.

Questions, access requests, or deletion requests? Email hello@builtfastco.com.