1. Introduction
BuildBio ("BuildBio," "we," "us," or "our") operates BuildBio.app and its associated services (the "Platform"). BuildBio is operated by Blakeley King as an individual; incorporation is pending. This Privacy Policy describes how we collect, use, share, and protect information about you when you use the Platform. By using the Platform, you agree to the practices described in this Policy.
This Policy is designed to comply with the California Consumer Privacy Act (CCPA) and the CAN-SPAM Act. If you are a California resident, Section 9 contains additional disclosures and rights specific to you.
2. Information We Collect
2.1 Information You Provide Directly
- Account registration information: name, email address, password (hashed), and optional phone number
- Vehicle information: year, make, model, trim, color, VIN (where provided), and modification details
- Profile photographs and media you upload
- Social media account links you connect to your profile
- For Sale listing information including vehicle description, asking price, and contact preferences
- Product review content and ratings
- Communications you send to BuildBio support
2.2 Information Collected Automatically
- QR code scan data: timestamp, approximate geographic location of scan, device type
- Platform usage data: pages viewed, features accessed, browsing patterns, time spent on profiles
- Transaction data: purchase history, affiliate click events, revenue share earnings
- Device information: IP address, browser type, operating system
- Cookie and similar tracking technologies as described in our Cookie Policy
2.3 Information from Third Parties
- If you register via Google or Apple Sign-In, we receive your name, email address, and profile identifier from those services
- For Trusted Influencer Program verification, we receive aggregate follower count and engagement data from connected social platforms
- Carfax vehicle history data for vehicles listed for sale (accessed by buyers, not stored by BuildBio)
3. How We Use Your Information
We use the information we collect to:
- Create and maintain your account and vehicle profiles
- Generate and manage your dynamic QR codes
- Facilitate affiliate purchases and calculate revenue share earnings
- Process payments and payouts through Stripe
- Send transactional emails including QR code delivery, account confirmations, and earnings statements
- Send marketing communications where you have opted in or as permitted by law
- Deliver NHTSA/DMV recall notifications applicable to your vehicle profile
- Verify Trusted Influencer Program eligibility
- Provide scan analytics to APEX members
- Improve the Platform through aggregate analytics and research
- Detect and prevent fraud, abuse, and violations of our Terms of Service
- Comply with legal obligations
- Create and sell aggregated, anonymized data products to manufacturers and aftermarket brands as described in Section 6
4. How We Share Your Information
4.1 Public Information. Your vehicle profile, modification list, photographs, and Verified Build Badge status are public by default and accessible to any internet user. Your personal contact information is never publicly displayed.
4.2 Service Providers. We share information with vendors who help us operate the Platform, including Vercel (website hosting), GitHub (version control), Supabase (database, authentication, and file storage), Stripe (payments and payouts), MailerSend (email delivery), Printful (merchandise fulfillment), Zapier (automation), and Google Analytics (Google LLC -- anonymous site usage and traffic analytics). These vendors are contractually obligated to use your information only to provide services to us.
4.3 Affiliate Partners. When you click a Buy Now affiliate link, we share necessary transaction attribution data with our affiliate partners to track and process commissions.
4.4 Carfax. When a buyer clicks a Carfax report button on a For Sale listing, the buyer is redirected to Carfax's platform. BuildBio does not share your personal information with Carfax.
4.5 B2B Data Sales. BuildBio sells aggregated, anonymized data derived from platform activity to aftermarket manufacturers and marketing companies. This data is used for industry research, targeted marketing campaigns, and business intelligence. The following data fields are eligible for sale in aggregated, anonymized form:
- Zip+4 postal code
- County
- State
- Last name
- Email address
- Phone number
- All vehicle modification data (year, make, model, parts installed)
The following data is never sold under any circumstances:
- First name
- Exact street address
- Social Security number or government ID
- Financial account information
You may opt out of B2B data sale by submitting a request to privacy@buildbio.app. California residents have additional opt-out rights under Section 9.
4.6 Legal Requirements. We may disclose information as required by law, court order, or governmental authority, or when we believe disclosure is necessary to protect the rights, property, or safety of BuildBio, our members, or the public.
4.7 Business Transfers. In the event of a merger, acquisition, or sale of all or substantially all of our assets, your information may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy.
5. Email Communications and Opt-Out
5.1 BuildBio sends two categories of email: transactional and marketing.
5.2 Transactional emails include account creation confirmations, QR code delivery, password resets, earnings statements, For Sale inquiry notifications, and security alerts. These emails are necessary for the operation of your account and cannot be opted out of.
5.3 Marketing emails include product recommendations, event announcements, earnings insight reports, and promotional communications. You may opt out of marketing emails at any time by clicking the unsubscribe link in any marketing email. Opt-out requests are processed automatically and immediately. Your opt-out preference is synchronized in real time to your account notification settings.
5.4 You may also manage all email preferences directly in your account settings under Notification Preferences.
6. Cookies and Tracking Technologies
BuildBio uses cookies and similar tracking technologies to operate the Platform, maintain your session, and analyze usage patterns. BuildBio also uses Google Analytics cookies to collect anonymous traffic and usage data; this data is processed by Google in accordance with its privacy policy. You may control cookie preferences through your browser settings. Disabling cookies may affect Platform functionality.
7. Data Security
BuildBio implements industry-standard security measures including Vercel-managed infrastructure with DDoS mitigation, HTTPS/TLS encrypted transmission, Supabase Auth with MFA support, Google reCAPTCHA v3 bot prevention, and regular security audits. No data transmission over the internet is 100% secure. We cannot guarantee absolute security but are committed to protecting your information using reasonable technical and organizational measures.
8. Data Retention and Deletion
8.1 Account Deletion. When you delete your account, your public profile is deactivated. BuildBio retains anonymized data associated with your account for platform modeling, research, and aggregate analytics. This data cannot be linked back to you as an individual.
8.2 Total Data Deletion Request. A Total Data Deletion Request is a separate and explicit process. To submit a Total Data Deletion Request, send a written request to privacy@buildbio.app from the email address associated with your account, including the subject line "Total Data Deletion Request." Upon receipt of a verified request, BuildBio will:
- Permanently delete all personally identifiable data from our active systems
- Remove your data from all marketing lists and third-party data sale records
- Process your request within 45 days as required by CCPA
- Issue a Certificate of Data Deletion confirming the scope and completion date of deletion
BuildBio retains records of deletion requests for compliance purposes only.
9. California Privacy Rights (CCPA)
If you are a California resident, you have the following rights under the California Consumer Privacy Act:
Right to Know. You may request disclosure of the categories and specific pieces of personal information BuildBio has collected about you, the categories of sources, the business purposes for collection, and the categories of third parties with whom we share information.
Right to Delete. You may request deletion of personal information we have collected about you, subject to certain exceptions permitted by law.
Right to Opt Out of Sale. You may opt out of the sale of your personal information to third parties by submitting a request to privacy@buildbio.app with the subject line "Opt Out of Data Sale."
Right to Non-Discrimination. BuildBio will not discriminate against you for exercising any of your CCPA rights.
How to Submit a Request. Submit CCPA requests to privacy@buildbio.app. We will respond within 45 days. We may require identity verification before processing deletion requests.
10. Children's Privacy
The Platform is not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If we become aware that a minor has created an account, we will terminate the account and delete associated information.
11. Changes to This Policy
BuildBio may update this Privacy Policy from time to time. Material changes will be communicated by email or in-app notification before taking effect. Continued use of the Platform after the effective date constitutes acceptance of the updated Policy.
12. Contact
For privacy questions, requests, or concerns:
BuildBio — Privacy Team
Operated by Blakeley King, incorporation pending
privacy@buildbio.app
Westlake Village, California