Draft — pending legal review. This page has not been reviewed by an attorney and should not be treated as final before BuildFlow AI accepts real paying customers.

Privacy Policy

1. What we collect

Account and company-profile information you provide; the customer, project, estimate, and proposal data you enter or generate through the product; documents and photos you upload (e.g. for AI-assisted estimating and document scanning); and payment and billing records associated with your subscription and with payments you collect from your customers.

2. How we use it

To provide the product: generating estimates and proposals with AI assistance, processing payments, delivering proposals and notifications by email and SMS, and (if you connect it) syncing payment records to QuickBooks Online.

3. Who we share it with

We share data with the third-party providers necessary to run the service: Supabase (application database and authentication), Anthropic (AI processing of estimate/proposal content and uploaded documents), Stripe and PayPal (payment processing), Intuit QuickBooks Online (only if you connect it), and Resend and Twilio (email and SMS delivery). We do not sell your data.

4. Data security

Application data is isolated per account with database-level row-level security. OAuth tokens (e.g. for QuickBooks) and sensitive extracted document metadata are encrypted at rest with AES-256-GCM, in addition to row-level security — not as a substitute for it.

5. Data retention & deletion

[Placeholder — a specific retention period and account-deletion process are not yet defined and must be decided and documented here before this page is final.]

6. Your rights

[Placeholder — applicable data-subject rights (e.g. access, correction, deletion) depend on the operating entity's jurisdiction and customer base, and should be drafted or reviewed by qualified counsel before this page is final.]

7. Contact

Questions about this policy: support@buildflowai.pro.