Privacy Policy

Last Updated: October 21, 2025

1. Introduction

Welcome to BildOut ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our invoicing platform at bildout.com (the "Service").

Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the Service.

2. Information We Collect

2.1 Information You Provide to Us

We collect information that you voluntarily provide to us when you:

  • Register for an account
  • Create invoices and manage clients
  • Subscribe to a paid plan
  • Contact us for support
  • Participate in surveys or provide feedback

This information may include:

  • Account Information: Email address, name, business name, phone number
  • Business Information: Company name, address, logo, tax identification numbers
  • Client Information: Client names, email addresses, billing addresses, phone numbers
  • Invoice Data: Invoice details, line items, amounts, payment information
  • Payment Information: Payment processing is handled by Stripe. We do not store your full credit card details on our servers

2.2 Information Automatically Collected

When you access the Service, we automatically collect certain information, including:

  • Log Data: IP address, browser type, operating system, pages visited, time spent on pages, access times
  • Device Information: Device type, unique device identifiers
  • Usage Data: Features used, actions taken, performance metrics
  • Cookies and Tracking: We use cookies and similar tracking technologies to track activity and store certain information

3. How We Use Your Information

We use your information for the following purposes:

  • Provide and Maintain the Service: To operate, maintain, and improve our invoicing platform
  • Account Management: To create and manage your account, authenticate users
  • Process Transactions: To process payments and send invoices to your clients
  • Customer Support: To respond to your inquiries and provide technical support
  • Communications: To send you service-related emails, updates, and notifications
  • Analytics: To understand how users interact with the Service and improve functionality
  • Security: To detect, prevent, and address technical issues and fraudulent activity
  • Legal Compliance: To comply with applicable laws, regulations, and legal processes
  • Marketing: With your consent, to send promotional materials about new features, products, or services

4. How We Share Your Information

We may share your information in the following situations:

4.1 Service Providers

We share information with third-party service providers who perform services on our behalf:

  • Stripe: Payment processing and Stripe Connect for accepting payments
  • Supabase: Database hosting and authentication services
  • Vercel: Application hosting and content delivery
  • Resend: Transactional email delivery
  • Analytics Providers: Service usage analytics and performance monitoring

4.2 Business Transfers

If we are involved in a merger, acquisition, asset sale, or bankruptcy, your information may be transferred as part of that transaction. We will notify you via email and/or prominent notice on our website of any change in ownership.

4.3 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., court orders, subpoenas).

4.4 With Your Consent

We may share your information for any other purpose with your consent.

We do not sell your personal information to third parties.

5. Data Retention

We retain your information for as long as your account is active or as needed to provide you the Service. We will also retain and use your information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.

If you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it for legal, tax, or regulatory purposes.

6. Data Security

We implement appropriate technical and organizational security measures to protect your information against unauthorized access, alteration, disclosure, or destruction. These measures include:

  • Encryption of data in transit using SSL/TLS
  • Encryption of sensitive data at rest
  • Regular security assessments and updates
  • Access controls and authentication requirements
  • Row-level security policies on database tables

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee its absolute security.

7. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

  • Access: Request a copy of the personal information we hold about you
  • Correction: Request correction of inaccurate or incomplete information
  • Deletion: Request deletion of your personal information
  • Data Portability: Request a copy of your data in a machine-readable format
  • Opt-Out: Opt-out of marketing communications at any time
  • Withdraw Consent: Withdraw consent where we rely on consent to process your information

To exercise these rights, please contact us at privacy@bildout.com. We will respond to your request within 30 days.

8. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

  • Right to know what personal information is collected, used, shared, or sold
  • Right to delete personal information
  • Right to opt-out of the sale of personal information (we do not sell personal information)
  • Right to non-discrimination for exercising your CCPA rights

9. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR). Our legal basis for processing your information includes:

  • Contract Performance: Processing necessary to provide the Service you requested
  • Legitimate Interests: Processing for our legitimate business interests (e.g., improving our Service)
  • Consent: Where you have given explicit consent
  • Legal Obligation: Processing required to comply with legal obligations

10. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to:

  • Maintain your session and keep you logged in
  • Remember your preferences
  • Analyze usage patterns and improve the Service
  • Provide personalized features

You can control cookies through your browser settings. However, disabling cookies may affect the functionality of the Service.

11. Third-Party Links

The Service may contain links to third-party websites. We are not responsible for the privacy practices of these websites. We encourage you to read the privacy policies of every website you visit.

12. Children's Privacy

The Service is not intended for children under 18 years of age. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

13. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws different from those in your country. We take appropriate safeguards to ensure your information is protected in accordance with this Privacy Policy.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. We will also send you an email notification for material changes.

You are advised to review this Privacy Policy periodically for any changes. Your continued use of the Service after changes are posted constitutes your acceptance of the updated Privacy Policy.

15. Contact Us

If you have questions or concerns about this Privacy Policy or our privacy practices, please contact us:

This privacy policy is effective as of October 21, 2025 and will remain in effect except with respect to any changes in its provisions in the future, which will be in effect immediately after being posted on this page.