BuildQ, Inc. (“BuildQ,” “we,” “our,” and/or “us”) values the privacy of individuals who use our websites and related services (collectively, our “Services”). This privacy policy (the “Privacy Policy”) explains how we collect, use, and disclose information from users of our Services, including individual consumers who visit our website and our customers’ End Users and Guest Users. By using our Services, you agree to the collection, use, disclosure, and procedures this Privacy Policy describes. Beyond the Privacy Policy, your use of our Services is also subject to our Services Agreement (www.buildq.ai/legal/services-agreement). We are the data controller for Services we provide to you. Terms used but not defined in this Privacy Policy have the meaning given to them in the Terms of Service.
This Privacy Policy does not apply to the extent we process information in the role of a processor or service provider on behalf of our customers. In that context, our customers are the data controllers and their privacy policies will apply to the processing of your Personal Data. We are not responsible for the privacy or data security practices of our customers, which may differ from those explained in this Privacy Policy.
In this Privacy Policy, “Personal Data” means any information relating to an identified or identifiable natural person. We may collect a variety of information from or about you or your devices from various sources, as described below.
A. Information You Provide to Us.
Registration and Account Information. As part of the account creation process, we collect your name, email address, profile picture, company address, phone number, username, account name, and user ID.
Communications. If you contact us directly, we may receive additional information about you, such as your name, email address, phone number, address, title, company name, and the contents of a message or attachments that you may send to us, and other information you choose to provide. When you communicate with us online, third party vendors receive and store these communications on our behalf. When we send you emails, we may use embedded pixels or other technologies to track information about your receipt and interaction with our emails, such as whether and when you open them, whether you access any links included in our emails, how long you read our emails, whether you forward our emails and to whom, your location information and your Device Information (described below), to learn how to deliver a better customer experience and improve our Services.
Cloud Data Synchronization with Our Services. If you connect your cloud accounts for existing file management systems, CRMs, or project tools with our Services, we collect your (encrypted) cloud account credentials and all materials stored in the accounts, such as project documents, financials, and contracts. We may also incidentally collect Personal Data of your employees, customers, or vendors that the materials may contain. We collect the materials to facilitate data sharing with those individuals you invite, centralize data, automate analysis, and unify deal execution.
Payment Information. If you make a payment on our Services, your payment-related information, such as credit card or other financial information, is collected by our third-party payment processor on our behalf.
B. Information We Collect When You Use Our Services.
Device Information. We receive information about the device and software you use to access our Services, including IP address (which may be used to determine your location information).
Usage Information. We automatically receive information about your interactions with our Services, like the pages or other content you view, and the searches you conduct.
Information from Cookies and Other Tracking Technologies. We and our third-party partners collect information about your activities on our Services using cookies, pixel tags, SDKs, or other tracking technologies. Our third-party partners, such as advertising, analytics and security partners, may also use these technologies to collect information about your online activities over time and across different services.
Prompts and Outputs. Our Services allow you to submit text, audio, images, video, documents, and other materials to the Services (“Prompts”), which generate responses based on your Prompts (“Outputs”). We will collect any information you choose to provide in your Prompts and this information may be reproduced in the Outputs.
Guest User Information. If you invite Guest Users to use our Services or share information or content with them from our Services, we will receive the contact information of the Guest Users that you provide.
We use the information we collect:
Affiliates. We may disclose any information we receive to our current or future affiliates for any of the purposes described in this Privacy Policy.
Guest Users. You can choose to invite Guest Users to your project. If you do, your name, profile picture, and contact information will be viewable by them. Guest Users will also be able to access, view, edit, download, or share any materials that you have uploaded to that project. You are responsible for managing the permissions and invitations related to your materials. We do not monitor or accept responsibility for the actions of these invitees or how they may use or disclose any data shared with them.
End Users at Your Organization. Other End Users at your organization may be able to view your name, profile picture, or contact information. For example, your information is viewable by other End Users at your organization when you collaborate with them on a project. Your information is also viewable by the entity that has authority to control a corporate email domain if you purchase the Services using an email address on that domain.
Vendors and Service Providers. We may disclose any information we receive to vendors and service providers retained in connection with the provision of our Services.
Analytics Partners. We use analytics services to collect and process certain analytics data. You can learn more about Google’s practices by visiting https://www.google.com/policies/privacy/partners/.
AI Service Providers. We may disclose information we receive to vendors that provide artificial intelligence services that provide backend support for our Services.
Advertising Partners. We work with third-party advertising partners to collect and process your information in order to show you ads that we think may interest you. Some of our advertising partners are members of the Network Advertising Initiative (https://optout.networkadvertising.org) or the Digital Advertising Alliance (https://optout.aboutads.info) and serve ads through cookie-based technologies. Please visit their opt-out pages to learn about how you may opt out of receiving certain web-based personalized ads from member companies. These opt-outs will apply only to our third-party advertising partners that are members of these organizations. These opt-outs will not apply when our partners serve ads through non-cookie based technologies.
As Required By Law and Similar Disclosures. We may access, preserve, and disclose your information if we believe doing so is required or appropriate to: (a) comply with law enforcement requests and legal process, such as a court order or subpoena; (b) respond to your requests; or (c) protect your, our, or others’ rights, property, or safety. For the avoidance of doubt, the disclosure of your information may occur if you post any objectionable content on or through the Services.
Merger, Sale, or Other Asset Transfers. We may transfer your information to service providers, advisors, potential transactional partners, or other third parties in connection with the consideration, negotiation, or completion of a corporate transaction in which we are acquired by or merged with another company or we sell, liquidate, or transfer all or a portion of our assets. The use of your information following any of these events will be governed by the provisions of this Privacy Policy in effect at the time the applicable information was collected.
Consent. We may also disclose your information with your permission.
Our Services may contain links to other websites, products, or services that we do not own or operate. We are not responsible for the privacy practices of these third parties. Please be aware that this Privacy Policy does not apply to your activities on these third-party services or any information you disclose to these third parties. We encourage you to read their privacy policies before providing any information to them.
The legal basis for which we collect and use the information described above depends on what the information is and why we collected it. The bases upon which we rely include:
Contract. If you decide to use our Services, we will process your Personal Data to perform our contract with you.
Legitimate interests. This means we have a legitimate interest that does not outweigh your privacy rights. When we collect and process information based on our legitimate interests, we consider how we can accomplish what we need to in a way that is the least obtrusive on your privacy. For example, it is in our legitimate interest to provide and improve services requested by the User; to enable us to fight against fraud; and to respond to your inquiries about our Services.
Legal obligations. We may need to use your Personal Data to comply with our legal obligations or to protect the rights of other Users, for example to comply with regulatory reporting, tax and accounting obligations.
Consent. We may also process your Personal Data on the basis of consent in some circumstances. For example, we may ask for your consent to sign up to direct marketing. You may withdraw your consent at any time by contacting us.
We make reasonable efforts to protect your information by using physical and electronic safeguards designed to improve the security of the information we maintain. However, because no electronic transmission or storage of information can be entirely secure, we can make no guarantees as to the security or privacy of your information.
Data Retention
We take measures to delete your Personal Data or keep it in a form that does not permit identifying you when this information is no longer necessary for the purposes for which we process it, unless we need to retain certain information as required by law, including to comply with tax requirements, or for as long as is reasonably necessary to meet regulatory requirements, resolve disputes, prevent fraud and abuse or enforce our terms and conditions. When determining the specific retention period, we take into account various criteria, such as the type of service provided to you, the nature and length of our relationship with you, and mandatory retention periods provided by law and the relevant statute of limitations.
Depending on where you reside, you may have certain rights under applicable data privacy laws. For example, in Europe, you have the following legal rights:
Access and Portability. You may ask us to provide you with a copy of the Personal Data we maintain about you, including a machine-readable copy of the Personal Data that you have provided to us, and request information about its processing.
Rectification and Deletion. You may ask us to update and correct inaccuracies in your Personal Data, or to have the information anonymized or deleted, as appropriate.
Restriction and Objection. You may ask us to restrict the processing of your Personal Data, or object to such processing.
Consent withdrawal. You may withdraw any consent you previously provided to us regarding the processing of your Personal Data, at any time and free of charge. We will apply your preferences going forward and this will not affect the lawfulness of the processing before you withdrew your consent.
Complaint. You may lodge a complaint with a supervisory authority, including in your country of residence, place of work, or where an incident took place. We would, however, appreciate the chance to deal with your concerns before you approach a supervisory authority, so please contact us in the first instance.
You may exercise these rights by contacting us using the contact details at the end of this Privacy Policy.
We do not knowingly collect, maintain, or use Personal Data from children under 18 years of age, and no part of our Service(s) is directed to children. If you learn that a child has provided us with Personal Data in violation of this Privacy Policy, then you may alert us at support@buildq.ai.
BuildQ is based in the United States and processes Personal Data in the United States. If you are accessing the Services from outside the United States, we may transfer your Personal Data to the United States and other countries with different data protection standards. We may also transfer data from the U.S. to other countries or regions in connection with storage and processing of data, fulfilling your requests, and operating the Services.
We take measures to ensure that your Personal Data remains protected in accordance with this Privacy Policy and applicable data protection laws. In particular, for data transfers outside Europe, we will rely on (i) an EU Commission, UK Secretary of State or Swiss government adequacy decision, (ii) contractual protections for the transfer of your Personal Data, including entering into data transfer agreements with relevant parties, or (iii) another valid data transfer mechanism. where required by law. If you are located in Europe, you may contact us as specified below for more information about the safeguards we use to transfer Personal Data outside of Europe.
We will post any adjustments to the Privacy Policy on this page, and the revised version will be effective when it is posted. If we materially change the ways in which we use or disclose Personal Data previously collected from you through the Services, we will notify you through the Services, by email, or other communication.
If you have any questions, comments, or concerns about our processing activities, please email us at support@buildq.ai.
If you are not satisfied with our response to your complaint or if you believe that the processing of your personal data does not comply with data protection laws, you can lodge a complaint with your local supervisory authority. We would, however, appreciate the chance to deal with your concerns before you approach a supervisory authority, so please contact us in the first instance.
