Privacy Policy

Last updated: May 2026

1. What We Collect

We collect information you provide directly (name, email, company details, build data, photos) and information generated automatically by your use of the Platform — the pages you view, the actions you take in the product, your device and browser, and an approximate location derived from your IP address. See “Product Analytics” below.

2. How We Use It

We use your information to provide and improve the Platform, process payments, send transactional emails (build updates, decision notifications, account management), and comply with legal obligations. We do not sell your data.

3. Data Storage

Your data is stored on DigitalOcean infrastructure in the United States. Images and documents are stored on DigitalOcean Spaces (S3-compatible). We use industry-standard encryption in transit and at rest.

4. Third-Party Services

We use: Stripe (payment processing), Postmark (transactional email), OneSignal (push notifications), PostHog (product analytics), Anthropic/OpenAI (AI features), and Twilio (SMS alerts). Each processes only the data necessary for their function.

5. Product Analytics

We use PostHog to understand how the Platform is used so we can improve it. When you are signed in, we record the pages you view and the actions you take in the product — for example, composing and publishing build updates, creating and completing decisions, uploading and viewing photos, and opening shared links. Each event is recorded together with your account role and an internal account identifier, your device type, browser and operating system, an approximate location derived from your IP address, and a timestamp.

We deliberately do not send your name or email address to our analytics provider — activity is associated with an internal identifier only. This applies to all users, including homeowners. We use this information solely to operate and improve the Platform, never for advertising, and we do not sell it. Analytics data is processed by PostHog on infrastructure in the United States. You can request access to or deletion of this data at any time (see “Your Rights”).

6. Data Retention

Active account data is retained for the duration of your subscription. After account termination, data is retained for 90 days then permanently deleted, unless you request earlier deletion.

7. Your Rights

You have the right to access, correct, export, or delete your personal data — including the analytics data described above — at any time. Contact us at privacy@buildmaison.com to exercise these rights.

California residents have the right, under the CCPA/CPRA, to know what personal information we collect and how it is used, and to request its deletion. We honor these requests and we do not sell or share personal information for advertising.

8. Cookies

We use essential cookies for authentication and session management. We also use first-party analytics cookies and local storage (through PostHog) to measure how the Platform is used and to improve it. We do not use third-party advertising cookies, and we do not sell your data.

9. Contact

Privacy questions: privacy@buildmaison.com