Privacy Policy
Last updated: January 2025 · Your privacy is important to us.
Summary: We collect only what we need to generate your compliance documents. We never sell your data. You can delete your account and all associated data at any time by contacting us at privacy@BuildShield AI.
1. Information We Collect
We collect information you provide directly to us:
?Account Information: Name, email address, company name, phone number when you register.
?Form Data: Company profile, trade type, state, hazard selections, competent person details, and project information submitted through our document wizard.
?Payment Information: Processed by Stripe. We store only your Stripe customer ID ?we never see or store your full credit card number.
?Company Logo: Uploaded images are stored in Supabase Storage and used solely to brand your generated documents.
We also collect usage data automatically:
?Browser type, IP address, pages visited, and interaction data via standard web analytics.
2. How We Use Your Information
We use your information to:
?Generate and deliver customized OSHA compliance documents.
?Process payments and manage your subscription.
?Send transactional emails (document delivery, payment receipts, account notifications).
?Send abandoned cart recovery emails if you start a document but don't complete checkout (you can unsubscribe at any time).
?Improve our document templates and platform based on aggregate usage patterns.
?Comply with legal obligations.
We do not sell, rent, or trade your personal information to third parties.
3. Data Storage & Security
Your data is stored on Supabase infrastructure (hosted on AWS), protected by:
?Row Level Security (RLS): Your documents are only accessible to your user account.
?AES-256 encryption at rest for all database data.
?TLS/SSL encryption for all data in transit.
?Stripe PCI DSS Level 1 compliance for all payment processing.
Generated documents are stored in private Supabase Storage buckets accessible only via signed, time-limited URLs.
4. Information Sharing
We share your information only with service providers necessary to operate our platform:
?Supabase (database and storage infrastructure)
?Stripe (payment processing)
?Resend (transactional email delivery)
?OpenAI (AI-powered document enhancement ?only de-identified form data is sent)
?Vercel (application hosting)
All service providers are contractually bound to protect your data and use it only for the services they provide to us.
5. Cookies & Tracking
We use essential cookies required for authentication (Supabase session cookies) and basic analytics. We do not use third-party advertising cookies or tracking pixels.
You can disable cookies in your browser settings, though this may affect authentication and site functionality.
6. Your Rights
Depending on your location, you may have rights to:
?Access: Request a copy of all data we hold about you.
?Deletion: Request deletion of your account and all associated data.
?Correction: Update inaccurate information in your account settings.
?Data Portability: Export your generated documents at any time from your dashboard.
?Opt-out: Unsubscribe from marketing emails at any time via the unsubscribe link.
To exercise these rights, email privacy@BuildShield AI with subject "Privacy Request."
7. California Privacy Rights (CCPA)
California residents have additional rights under the California Consumer Privacy Act (CCPA):
?Right to know what personal information we collect, use, and share.
?Right to delete personal information (subject to certain exceptions).
?Right to opt-out of the sale of personal information (we do not sell personal information).
?Right to non-discrimination for exercising privacy rights.
To submit a CCPA request, email privacy@BuildShield AI or use the contact form on our website.
8. Data Retention
We retain your data for as long as your account is active or as needed to provide services. After account deletion:
?Account data is deleted within 30 days.
?Generated documents are deleted within 90 days.
?Aggregated, anonymized usage data may be retained indefinitely.
?Payment records are retained for 7 years as required by financial regulations.
9. Children's Privacy
BuildShield AI is designed for business use by adults (18+). We do not knowingly collect personal information from individuals under 18 years of age.
10. Changes to This Policy
We may update this Privacy Policy periodically. We will notify registered users of material changes via email. The "Last updated" date at the top of this page reflects the most recent revision.
11. Contact Us
BuildShield AI Privacy Team
Email: privacy@BuildShield AI
Website: https://BuildShield AI
For urgent privacy concerns, please use the subject line "URGENT: Privacy" in your email.