1. Scope and Roles
This Privacy Policy explains how BuilderStudio collects, uses, discloses, and protects information when you use our website, applications, workspaces, canvas and workflow tools, APIs, MCP surfaces, integrations, billing features, published sites, and related services. It also serves as our general notice at collection.
Workspace owners and administrators control much of the content and personal information submitted to their workspaces. If you use the service through an organization, that organization may also control your access, content, exports, retention, billing, and member activity.
2. Information We Collect
We collect information you provide directly, information generated when you use BuilderStudio, information needed to operate paid or authenticated services, and information received from services you connect.
- Account and profile information, such as name, email address, authentication records, access-code or invite status, workspace membership, roles, settings, and support messages.
- Workspace and customer content, such as prompts, instructions, files, uploaded media, generated outputs, code, documents, canvas state, workflow configuration, imports, exports, published-site content, form submissions, and comments or collaboration activity.
- Integration information, such as OAuth account details, installation IDs, repository or file metadata, webhook configuration, provider selections, API-key metadata, credential status, and connected-service activity needed to perform the action you request.
- Billing and commercial information processed through our payment providers, such as plan selections, subscription status, top-ups, invoices, tax details, payment status, usage events, and payment-provider customer identifiers.
- Usage, device, and diagnostic information, such as log data, IP address, approximate location derived from network data, browser and device details, page and feature interactions, performance events, telemetry, error reports, model/provider usage metadata, and security signals.
- Communications and public interactions, such as contact-form messages, waitlist or alpha requests, template referrals, public creator/profile data, published-site visitor submissions, and other information you choose to send us.
3. How We Use Information
We use information to provide, secure, maintain, bill for, support, and improve BuilderStudio, and to communicate with users about their accounts, workspaces, and requests.
- Operate product features, authenticate users, manage workspaces, process invitations, run workflow executions, store project state, process uploads, deliver generated content, publish sites, and support API or MCP access.
- Send content, instructions, metadata, and credentials to third-party providers and integrations when needed to perform the action you request.
- Process subscriptions, top-ups, USD balance activity, invoices, taxes, chargebacks, refunds, promotional grants, usage settlement, account notices, and billing support.
- Monitor reliability, debug failures, prevent fraud and abuse, enforce our terms, protect users and the service, investigate security events, and maintain audit, usage, and operational logs.
- Analyze aggregate or de-identified usage trends, improve product quality, prioritize features, test performance, support onboarding, and maintain documentation and support workflows.
- Comply with law, respond to valid legal process, protect rights and safety, and complete corporate transactions such as a merger, financing, acquisition, reorganization, or asset transfer.
4. AI Providers and Integrations
BuilderStudio helps you route content to AI model providers, media-generation providers, Google Workspace, GitHub, webhooks, payment processors, hosting and storage infrastructure, and other services you authorize.
- When you select a model, provider, integration, import, export, or webhook, we may send the content, files, metadata, credentials, and request details needed to complete that action.
- Third-party services process information under their own terms, policies, settings, and account relationships. Review those terms before sending confidential, regulated, or sensitive information to an external service.
- We do not sell personal information. We do not use private workspace content to train BuilderStudio-owned foundation models. We may use aggregate, de-identified, diagnostic, or operational information to improve reliability, safety, billing, and product quality.
- If you use a bring-your-own-key provider configuration, your provider account may receive the request directly, apply its own retention and training settings, and bill you separately.
Our current list of core subprocessors, AI/media providers, and customer-directed integrations is available on the Subprocessors page.
7. Data Retention
We retain information for as long as reasonably needed for the purposes described in this Policy, including account operation, workspace collaboration, billing, tax, security, abuse prevention, dispute resolution, legal compliance, backup integrity, and product reliability.
- Workspace content generally remains until deleted by an authorized user, removed through product flows, or deleted as part of account or workspace closure, subject to backup, legal, security, and abuse-prevention limits.
- Billing, transaction, tax, security, audit, usage, and support records may be retained longer where needed for accounting, compliance, fraud prevention, chargeback handling, operational integrity, and legal obligations.
- Operational telemetry, logs, generated-media records, asset events, API usage records, and analytics summaries are kept for limited reliability, security, billing, and product-quality windows that vary by data type.
- Content sent to third-party providers or integrations may be retained by those services according to their terms, policies, and your settings. Deleting information in BuilderStudio may not delete copies already processed by a connected service.
8. Security
We use administrative, technical, and organizational safeguards designed to protect information against unauthorized access, loss, misuse, alteration, and disclosure. These safeguards include access controls, scoped credentials, operational monitoring, and credential-storage protections appropriate to the service.
No method of transmission or storage is completely secure. You are responsible for protecting your credentials, managing workspace access, reviewing connected integrations, and promptly notifying us about suspected unauthorized activity.
9. Your Choices and Privacy Rights
Depending on your location and the context of the data, you may have rights to access, know, correct, delete, export, restrict, or object to certain processing of personal information. You may also have rights to opt out of sale, sharing, targeted advertising, certain profiling, or to limit use of sensitive personal information where those rights apply.
- You can update some account, workspace, billing, integration, and content information directly in the product.
- For requests that cannot be completed in-product, contact legal@builder.studio. We may need to verify your identity, workspace authority, residence, and request scope before completing a request.
- If your data is controlled by an organization using BuilderStudio, we may direct you to that organization or coordinate with it to handle the request.
- We will not discriminate against you for exercising privacy rights, but some requests may limit our ability to provide the service or preserve workspace functionality.
10. California and Other US State Notices
For US state privacy laws that require category disclosures, we may collect the categories of personal information described below, depending on how you use the service.
- Identifiers and contact information, such as name, email address, account identifiers, IP address, device identifiers, OAuth or integration identifiers, and workspace membership details.
- Commercial and transaction information, such as plan, invoice, subscription, top-up, billing status, provider usage, and support records.
- Internet, network, device, and approximate location information, such as logs, browser details, performance data, security signals, feature usage, and approximate location derived from network data.
- User-generated content and communications, such as prompts, files, media, generated outputs, documents, code, published-site content, form submissions, support messages, and collaboration activity.
- Sensitive personal information only when you or your organization provide it or when needed for security and account access, such as account credentials, API keys, OAuth tokens, payment-provider identifiers, or sensitive content embedded in workspace material. We use sensitive personal information only for permitted service, security, compliance, and support purposes.
- Inferences or derived information, such as product usage summaries, reliability metrics, fraud and abuse signals, and workspace analytics derived from your activity.
As of the Last updated date above, we do not sell personal information or share personal information for cross-context behavioral advertising. If that changes, we will update this Policy and provide any required opt-out controls.
11. International Transfers
We and our service providers may process and store information in the United States and other countries where we or they operate. Those countries may have privacy laws different from where you live.
When required, we use appropriate safeguards for cross-border transfers, such as contractual protections, vendor commitments, or other lawful transfer mechanisms.
12. Children's Privacy
BuilderStudio is not directed to children under 13, and we do not knowingly collect personal information from children under 13.
If you believe a child has provided personal information to BuilderStudio, contact us so we can review and delete the information where appropriate.
13. Policy Updates
We may update this Privacy Policy from time to time. Updates will be posted on this page with a revised "Last updated" date.
If a change materially affects your rights or obligations, we may provide additional notice through the product, by email, or by another reasonable method. Continued use of BuilderStudio after an update is governed by the updated Policy and our Terms of Service.
14. Contact
For privacy-related requests, contact legal@builder.studio.