Privacy Policy

BuiltDifferent handles two kinds of personal data. The first is about you, the account holder: we decide how that is used, and this policy covers it. The second is about the people who use your projects, like your customers, members and subscribers. You decide how that is used, and we process it on your behalf to run your project.

• Account details: your name, email address and a hashed password, or the profile GitHub or Google shares when you sign in with them.
• Billing details: your plans, invoices and payment status. Card numbers are handled by Stripe and never stored by us.
• Your business profile, if you fill it in: legal name, address and tax ID, used to register your sending and texting. Tax IDs are stored encrypted.
• Domain contact details, which we send to the registrar because you are the registrant. Some domain endings do not allow privacy protection, so these details can appear in public registration records.
• What you put into your projects: code, uploaded files, content, settings and messages.
• Technical logs, like request times and error reports, used to keep the service running and secure.

Depending on the services you turn on, your projects store orders, members, form submissions, subscribers, and the emails and texts sent to and from your addresses and numbers.

Analytics on your projects records the page, referrer, country, device, browser, operating system and language. Visitors are counted with an identifier made by one-way hashing their connection, which changes every day, so no one can be followed from one day to the next. It uses no cookies and does not store IP addresses.

You are responsible for telling the people who use your project what you collect, and for any consent the law requires. Anyone who wants their data from a project should contact that business first. We will help the business respond.

We use your data to provide the service, bill you, keep accounts secure, answer support requests and send you messages about your account. We do not sell personal data, and we do not use it for advertising.

We share only what each provider needs to do its job:

• Cloudflare: DNS, the CDN for your files, storage and email routing
• Hetzner: Servers that build and run hosted projects, in Finland
• Railway: Hosting for the BuiltDifferent dashboard
• Neon: The database behind your account and projects
• Stripe: Plan billing, and checkout on your own Stripe account
• Porkbun: Domain registration, renewal and transfer
• Resend: Sending email from your domains and ours
• Telnyx: Texting numbers and messages, when you turn texting on
• Anthropic: The AI assistant, when you use it
• GitHub and Google: Sign-in and repository access, only if you connect them

These providers operate in the United States, the European Union and other countries.

Files you upload to a project are served from our CDN so your site can use them. Anyone with a file's link can open it, so do not upload anything you need to keep private.

• The dashboard sets a login cookie that lasts seven days, and a cookie for about ten minutes while you sign in with GitHub or Google.
• The dashboard remembers preferences, like light or dark mode, in your browser.
• Projects set a sign-in cookie for members that lasts thirty days, and keep carts in the browser.

We do not use advertising or third-party tracking cookies.

Campaign emails include a way to unsubscribe. Addresses that bounce or report spam stop receiving mail. Texts honor replies like STOP, and we record consent for each number.

Passwords are hashed, sensitive values like tax IDs and secrets are encrypted, and every connection uses HTTPS. No system is perfectly secure, and we will tell you promptly if a breach affects your data.

We keep your account data while your account is open. Messages, submissions and orders stay until you delete them or ask us to. Backups can hold copies for a limited time after that.

You can update your details and delete your account in the dashboard, under Settings. To get a copy of your data or ask us to delete it, email [email protected]. We respond within 30 days. Depending on where you live, you may also have the right to object to or restrict how we use your data, and to complain to your data protection authority.

When you agree to receive texts from a business that uses BuiltDifferent, we store your phone number, your consent and when you gave it, and the messages exchanged, so the business can text you and we can honor your choices. Your number and consent are used only to send that business's texts.

No mobile information is shared with third parties or affiliates for marketing or promotional purposes. Text opt-in data and consent are never sold or shared with anyone except the carriers and our messaging provider, Telnyx, as needed to deliver messages.

Reply STOP to any message to stop receiving texts, or HELP for help.

BuiltDifferent is not intended for children under 16, and we do not knowingly collect their data.

If we change this policy in a way that matters, we will email you before it takes effect. The date at the top shows the latest version.