Privacy Policy

This Privacy Policy describes how Buildcord ("Buildcord," "we," "us," or "our") collects, uses, discloses and otherwise processes personal data in connection with the website located at buildcord.dev, the application located at app.buildcord.dev, and the related services and infrastructure (collectively, the "Service"). Capitalized terms not defined in this Privacy Policy have the meanings given in our Terms of Service.

1. Our Role

Buildcord acts as a controller with respect to personal data relating to its customers and visitors, including Account information, billing information and usage information. Buildcord acts as a processor on behalf of its customers with respect to End User Data processed by Bots. Customers are responsible for the End User Data their Bots collect and for providing any notices and obtaining any consents required by applicable law. Requests from End Users concerning End User Data should be directed to the operator of the relevant Bot.

2. Personal Data We Collect

1. Account information: name, email address, password (stored solely as a one-way cryptographic hash), and the public keys of any passkeys registered to the Account.
2. Authentication and security information: session identifiers, IP addresses, browser and device information, and timestamps associated with sign-in activity.
3. Billing information: subscription status and the customer and subscription identifiers assigned by our payment processor. Payment card details are collected and stored by our payment processor and are not received by Buildcord.
4. Customer Content: Bot configurations, flows, designs and versions; Discord application credentials and secrets, which are encrypted at rest and are not displayed after submission; and data stored by Bots.
5. Operational records: records of each Bot execution, including the flow executed, the Discord user and server identifiers and display names involved, the steps performed and any errors; and logs and performance metrics reported by Bot infrastructure.
6. AI Feature data: prompts submitted to the assistant, the associated conversation, a description of the Bot being edited, and counts of assistant usage.
7. Usage and diagnostic information: information about how the website and application are used, including pages viewed, features used, device and browser characteristics, approximate location derived from IP address, and error reports.

3. Purposes and Legal Bases

We process personal data for the following purposes and, where applicable law requires, on the following legal bases:

1. to provide, operate and maintain the Service, including authenticating users, hosting and executing Bots, and displaying operational records, as necessary for the performance of our contract with you;
2. to process payments and manage Subscriptions, as necessary for the performance of our contract with you;
3. to send transactional communications, including account verification, password resets, invitations and notices regarding the Service, as necessary for the performance of our contract with you;
4. to secure the Service, prevent fraud and abuse, and enforce our Terms of Service, on the basis of our legitimate interests;
5. to analyze and improve the Service and diagnose errors, on the basis of our legitimate interests or, where required, your consent; and
6. to comply with legal obligations and respond to lawful requests from public authorities.

Buildcord does not sell personal data, does not share personal data for cross-context behavioral advertising, and does not use Customer Content or End User Data to train machine learning models.

4. Subprocessors and Disclosures

Buildcord engages the following subprocessors to provide the Service. Each processes personal data only on Buildcord's instructions and for the purposes stated:

1. Cloudflare, Inc.: content delivery and hosting of the website, application and application programming interfaces; encrypted storage of credentials; transactional email delivery; and ingestion of infrastructure logs and metrics.
2. Railway Corporation: managed database hosting for Account information, Customer Content and operational records.
3. Fly.io, Inc.: compute infrastructure on which Bots are executed, in the region selected by the customer.
4. Hetzner Online GmbH: server and infrastructure hosting.
5. PostHog, Inc.: product analytics and error monitoring.
6. OpenRouter, Inc.: routing of AI Feature requests to third-party machine learning model providers, which process such requests to generate responses.
7. Stripe, Inc.: payment processing and subscription billing.

Content transmitted by Bots to the Discord Platform is processed by Discord in accordance with Discord's own privacy policy; Discord is not a subprocessor of Buildcord. Buildcord may also disclose personal data where required by law, regulation or legal process; to protect the rights, property or safety of Buildcord, its users or others; or in connection with a merger, acquisition, financing or sale of all or part of its business, subject to customary confidentiality obligations.

5. International Transfers

Buildcord and its subprocessors may process personal data in the United States and in other countries that may not provide the same level of data protection as your country of residence. Where required by applicable law, Buildcord relies on appropriate safeguards for such transfers, such as the European Commission's Standard Contractual Clauses and their United Kingdom equivalents.

6. Retention

Buildcord retains personal data for as long as the associated Account remains active and thereafter only as necessary for the purposes described in this Privacy Policy. Operational records of Bot executions are retained for three (3) days under the free plan and thirty (30) days under the Paid plan. Infrastructure logs and metrics are retained for no longer than thirty (30) days. Upon deletion of a Bot, its versions, operational records, stored data, credentials and secrets are deleted. Upon deletion of an Account, the personal data described in Section 2 is deleted, except billing records that Buildcord is required to retain under applicable law. Residual copies held in backups are overwritten in the ordinary course of backup rotation.

7. Security

Buildcord implements technical and organizational measures designed to protect personal data against unauthorized access, alteration, disclosure and destruction, including encryption of credentials at rest, encryption in transit, and isolation of each Bot's execution environment. No method of transmission or storage is completely secure, and Buildcord cannot guarantee absolute security.

8. Your Rights

Depending on your jurisdiction, you may have the right to request access to, correction of, deletion of, or a portable copy of your personal data; to restrict or object to certain processing; to withdraw consent where processing is based on consent; and to lodge a complaint with a supervisory authority. Residents of California and other U.S. states with comprehensive privacy laws may have additional rights, including the right to know what personal data is collected and the right not to receive discriminatory treatment for exercising their rights. You may exercise many of these rights directly within the Service, including by deleting a Bot or your Account, or by contacting us atsupport@buildcord.dev. We will respond within the time required by applicable law and may need to verify your identity before doing so.

9. Cookies and Similar Technologies

The Service uses a strictly necessary cookie to maintain authenticated sessions. Buildcord uses PostHog to collect usage and diagnostic information, which may involve storing an identifier in your browser. The application also stores preferences in your browser's local storage, including the most recently opened Bot and assistant conversations. Buildcord does not use advertising cookies.

10. Children

The Service is not directed to children under the age of thirteen (13), or under the minimum age required to use the Discord Platform in their jurisdiction, and Buildcord does not knowingly collect personal data from such children. If you believe a child has provided personal data to Buildcord, please contact us and we will delete it.

11. Changes to This Privacy Policy

Buildcord may update this Privacy Policy from time to time. Buildcord will notify you of any material change by email or through the Service before the change takes effect. The effective date above indicates when this Privacy Policy was last revised.

12. Contact

Questions, requests and complaints regarding this Privacy Policy or Buildcord's processing of personal data may be directed to support@buildcord.dev.