Privacy Policy
Effective Date: June 11, 2026
1. Introduction
BuildWithPXL (“we,” “us,” or “our”) respects your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our website, App Builder, agent services, and related products (collectively, the “Services”).
2. Information We Collect
2.1 Information You Provide
- Account Information: Name, email address, company name, and authentication data when you sign in with Google.
- Profile Information: Customer type, how you heard about us, marketing preferences, and account settings.
- Payment Information: We do not store credit card numbers. Stripe processes all payments. We receive billing confirmation and subscription status from Stripe.
- Content: Prompts, messages, uploaded files, and generated outputs you create through the App Builder and chat services.
2.2 Information We Collect Automatically
- Usage Data: IP address, browser type, pages visited, features used, and interaction timestamps.
- Device Information: Operating system, device type, and screen resolution.
- Cookies and Similar Technologies: We use cookies for authentication, preferences, and analytics. See Section 8 for details.
3. How We Use Your Information
- Provide, maintain, and improve the Services.
- Process payments and manage subscriptions.
- Communicate with you about your account, products, and updates.
- Personalize your experience and recommend relevant features.
- Detect and prevent fraud, abuse, and security incidents.
- Comply with legal obligations.
- Train and improve our AI models using anonymized usage patterns, never your personal information or private prompts.
4. How We Share Your Information
We do not sell your personal information. We share data only with:
- Service Providers: Supabase, Cloudflare, Stripe, Google authentication, and other providers needed to operate the Services. These providers are bound by Data Processing Agreements where applicable.
- AI Model Providers: When you use the App Builder or chat, your prompts may be sent to AI model providers such as OpenAI, Anthropic, or DeepSeek. We do not share your account information with these providers.
- Legal Requirements: If required by law, subpoena, or to protect our rights and safety.
5. Data Storage and Security
Your data is stored in Supabase databases hosted in the United States. We implement industry-standard security measures including encryption in transit, encryption at rest for sensitive data where supported, Row Level Security (RLS), regular security audits, and access controls.
While we take reasonable precautions, no system is completely secure. You use the Services at your own risk.
6. Your Privacy Rights
Depending on your location, you may have the following rights:
6.1 California Residents (CCPA/CPRA)
To exercise your CCPA rights, email privacy@buildwithpxl.com or use the contact form in your account dashboard. We will respond within 15 business days.
- Right to Know: Request disclosure of personal information we collect, use, and share.
- Right to Delete: Request deletion of your personal information, subject to legal exceptions.
- Right to Opt-Out: We do not sell personal information. If this changes, we will provide a Do Not Sell or Share My Personal Information link.
- Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.
6.2 EU/UK Residents (GDPR)
To exercise your GDPR rights, email privacy@buildwithpxl.com. We will respond within 30 days.
- Right of Access: Request a copy of your personal data.
- Right to Rectification: Request correction of inaccurate data.
- Right to Erasure: Request deletion of your data.
- Right to Restrict Processing: Limit how we use your data.
- Right to Data Portability: Receive your data in a structured, machine-readable format.
- Right to Object: Object to processing based on legitimate interests.
- Right to Withdraw Consent: Withdraw consent at any time.
7. Data Retention
We retain your personal information for as long as necessary to provide the Services and fulfill the purposes described in this policy:
- Account Data: Retained while your account is active. Deleted within 30 days of account closure unless legal obligations require longer retention.
- Payment Records: Retained for 7 years for tax and accounting purposes.
- Chat Messages: Retained for service quality and troubleshooting. Anonymized after 12 months.
- Usage Analytics: Anonymized and retained indefinitely for product improvement.
8. Cookies and Tracking
We use the following types of cookies:
- Essential: Required for authentication and core functionality. Cannot be disabled.
- Preferences: Remember your settings and choices.
- Analytics: Help us understand how users interact with the Services. We use privacy-focused analytics where possible.
You can manage cookie preferences through your browser settings. We honor Global Privacy Control (GPC) signals where technically feasible.
9. Children’s Privacy
The Services are not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.
10. International Data Transfers
Your data may be transferred to and processed in the United States. If you are located outside the United States, you consent to this transfer. We use standard contractual clauses and Data Processing Agreements with our service providers to ensure adequate protection.
11. Changes to This Policy
We may update this Privacy Policy periodically. We will notify you of material changes via email or through the Services. The Effective Date at the top indicates when the current version took effect.
12. Contact Us
For privacy-related questions, data subject requests, or concerns, email privacy@buildwithpxl.com. Business Address: BuildWithPXL, California, USA.