Privacy Policy

When you create an account, we collect:

• Email address (required for login and communication)
• Name (first and last, as provided at registration or in your profile)
• Password (stored as a one-way hash; we never store your plaintext password)
• User profile information you choose to provide: mailing address, phone number, professional title
• Company profile information: company name, address, license number, business type
• Profile photo (if you upload one)

We collect the construction planning data you enter into the Service, including: project descriptions, structure specifications (type, dimensions, materials), customer records you create (name, contact details, address), estimates, proposals, material lists, buy lists, and related documents you generate or upload.

When you make a purchase, payment is processed by Stripe, Inc. We do not store your full credit card number, CVV, or bank account details on our servers. We receive from Stripe: your Stripe customer ID, a billing address (if provided), and purchase confirmation data (amount, product, timestamp, payment status).

We automatically collect:

• Pages visited and features used within the Service
• Browser type and version, operating system, device type
• IP address and general location derived from IP (country/region only)
• Referring website (how you arrived at BuildaDraft)
• Session duration and interaction timestamps

We use session cookies to keep you logged in and to maintain application state. BuildaDraft uses the NextAuth.js library with a JWT-based session strategy; session tokens are stored in a secure, httpOnly cookie. We do not use third-party advertising cookies or behavioral tracking cookies. We use Vercel Analytics for anonymized aggregate usage statistics; this does not set cross-site tracking cookies.

If you contact us by email or submit feedback through the Service, we retain that correspondence to help us respond and improve the product.

Stripe, Inc. processes all payments. When you purchase a product, you are also subject to Stripe’s Privacy Policy. We share with Stripe: your email address, purchase details, and billing address (if provided). Stripe stores your payment card data on its PCI-compliant infrastructure.

Resend, Inc. delivers transactional emails on our behalf (account confirmation, password reset, purchase receipts). We share your email address and the content of those emails with Resend solely for delivery purposes. Resend is subject to its own Privacy Policy.

The Service is hosted on Vercel’s edge network. Vercel processes server request logs (including IP addresses) as part of providing hosting services. Vercel is subject to its own Privacy Policy.

Your account data and project data are stored in a PostgreSQL database hosted by Neon Technologies, Inc. Neon is subject to its own Privacy Policy. Your data is stored in the United States.

You may view and update most of your account information at any time through your account settings. If you need to correct information that you cannot update yourself, contact us at support@buildadraft.com.

You may request deletion of your account and associated personal information by emailing support@buildadraft.com. We will process deletion requests within 30 days, subject to the retention exceptions described in Section 4.

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):

• Right to Know: You may request disclosure of the categories and specific pieces of personal information we have collected about you.
• Right to Delete: You may request deletion of your personal information, subject to certain exceptions.
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.
• Right to Opt Out of Sale: We do not sell personal information. There is nothing to opt out of.

To exercise your CCPA rights, email us at support@buildadraft.com with “CCPA Request” in the subject line. We will respond within 45 days.

We only send transactional emails (account-related, password reset, purchase receipts). We do not send marketing emails. Each transactional email includes a contact address if you need to unsubscribe from non-essential communications.