Summary in 60 seconds
- We store the minimum data needed to run your workspace.
- We do not sell, rent, or share customer data with third parties.
- We do not train AI models on customer data.
- You can export your data in JSON or CSV at any time.
- GDPR delete is a one-click action.
1. What we collect
Account data (name, email), workspace and project data you create, audit-log events, billing data via our payment processor, and standard server logs (IP, user agent, timestamps) for security.
2. How we use it
Only to operate BuildFlow: authentication, billing, sending transactional emails, security monitoring, and providing the features you signed up for.
3. Sub-processors
We rely on a small set of providers (hosting, email, payments). The full list is published in our security center and updated whenever it changes.
4. Your rights
You can access, export, correct, or delete your data at any time from the dashboard. GDPR and CCPA requests are honored within 30 days; most are handled in minutes via the self-service tools.
5. Contact
Privacy questions go to privacy@buildflow.io.
This is a template policy. Replace with your own legal text before launch — your lawyer will know what to do.