BUILDER / PRIVACY NOTICE · VERSION 1

Your ideas are yours.
So are your details.

Who is responsible?

Fraser James Baillie, trading as Builder, is the individual responsible for your personal data. hello.builderapp@gmail.com

What we collect and why

We ask for your first name and email address to send Builder early-access availability and product updates with your consent. We record your subscription status, consent wording/version and timestamps. Our lawful basis for these emails is your consent. Our lawful basis for necessary abuse prevention and maintaining an unsubscribe suppression record is our legitimate interest in protecting the service and respecting your preferences. We do not ask for your business idea or use these details for unrelated marketing.

Your consent: “Send me Builder early-access availability and product updates by email. I can unsubscribe at any time.” You confirm ownership of your email before becoming subscribed. You can withdraw consent at any time.

How we protect and use it

We use Supabase for the waitlist database and Resend for email delivery. Records are accessible only to authorised operators and server processes. Email links contain random tokens, never your email address. Public registration is currently closed and the homepage does not request your name or email. The excuse activity runs in your browser. An operator testing page uses Cloudflare Turnstile to reduce automated abuse; opening that page alone does not load the challenge. Cloudflare processes browser and network signals for this security check. Our backend validates the result without forwarding an IP address and keeps short-lived keyed identifiers for signup limits and challenge replay prevention. Verification and unsubscribe do not require Turnstile. We do not use advertising trackers or place personal details in analytics.

Retention

Verification links expire after 24 hours. The database cleanup routine is designed to remove pending registrations older than 7 days and active registrations verified more than 12 months ago. No automatic cleanup schedule is currently configured, so these are cleanup thresholds, not guaranteed deletion times. Authorised testing records require manual review and cleanup. On unsubscribe, we remove your name and email from the waitlist and keep a keyed suppression identifier and hashed unsubscribe token to prevent accidental re-enrolment. An encrypted email address may remain in the delivery queue until the email provider acknowledges suppression; failed jobs require operator review. Provider delivery-log and suppression retention arrangements have not yet been confirmed. The cleanup routine removes abuse-control records more than 48 hours after their expiry, when it is run. Suppression identifiers are retained to prevent accidental re-enrolment. Their review and deletion policy must be confirmed before registrations open.

Unsubscribe and your rights

Every Builder marketing email must include an unsubscribe link. You do not need an account. Opening the link shows a confirmation button; selecting it stops future marketing. You may also request access, correction, deletion, restriction or portability using the privacy contact above. You can complain to the UK Information Commissioner’s Office at ico.org.uk.

International processing

Before controlled testing collects personal data or registration opens, Builder must confirm its chosen database region, processor agreements and appropriate safeguards for any processing outside the UK. This notice must be updated with the confirmed arrangements.

Builder is a pre-launch trading name, not a registered limited company. This is a fictional government department operated for Builder. It is not a government service.