Privacy Policy

Information we collect

• Account information - the email address and password you provide to sign up. Passwords are stored in hashed form by our authentication provider; we never see them.
• Information you provide in the chat - your business name, description, style preferences, the pages you want, your domain and email preferences, and the rest of the conversation transcript.
• Technical information - basic request data (such as approximate IP and timestamps) used to keep the service secure and prevent abuse.

We do not ask for passwords to your other accounts, and our assistant is instructed to refuse them. Payment details and domain-registration details (legal name, address, phone) are only collected if and when you purchase paid services (see below).

How we use your information

• To run the intake conversation and generate your website preview.
• To create and secure your account, and to send you service emails (such as email verification and your preview link).
• To check domain availability when you ask us to.
• To prevent abuse and enforce our Terms.

Service providers we share data with

We use a small number of trusted providers to operate Buildthru. They process data only to provide their service to us:

• Google Firebase - hosting, database, authentication, and storage.
• Google (Gemini & generative APIs) - to power the intake assistant and generate your website. We use paid tiers, which do not use your content to train models.
• Resend - to deliver our emails (receives your email address).
• Porkbun - our domain registrar (receives the domain name you ask us to check, and, for paid registrations, your registrant details).
• Unsplash - to source preview photography (receives a search term based on your business description).
• Cloudflare (Turnstile) - a privacy-preserving "are you human" check that runs when the site loads, to protect our forms and AI features from bots and automated abuse. It processes limited technical and interaction signals from your browser to make that determination, and does not use them to track you or for advertising. See Cloudflare's Turnstile Privacy Addendum.

Where your data is stored

Your data is stored in Buildthru's Google Cloud / Firebase project, in data centres located in the United States. By using Buildthru you understand your information is processed there and by the providers listed above.

Retention and deletion

We keep your information for as long as your account is active or as needed to provide the service. You can delete your account and all associated data at any timefrom your dashboard ("Delete account & data"), which removes your projects, conversation transcripts, and account. You can also email us at hello@buildthru.ca to request deletion. Generated preview sites are temporary and expire automatically within 7 days.

Your rights

Consistent with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), you may access, correct, or delete your personal information, and withdraw consent. Contact us at hello@buildthru.ca and we will respond within a reasonable time.

Paid services (when available)

When we introduce paid features (website launch, hosting, domain registration, and business email), additional information will be processed: payment details (handled by our payment processor, Stripe - we never store full card numbers) and domain-registration details shared with our registrar to register a domain in your name. We will update this policy before those features go live.

Changes & contact

We may update this policy from time to time; the effective date above will change accordingly. Questions? Email hello@buildthru.ca. This policy is governed by the laws of the Province of Ontario, Canada.