1. Introduction
BuildBio ("BuildBio," "we," "us," or "our") operates BuildBio.app and its associated services (the "Platform"). BuildBio is operated by Blakeley King as an individual; incorporation is pending. This Privacy Policy describes how we collect, use, share, and protect information about you when you use the Platform. By using the Platform, you agree to the practices described in this Policy.
This Policy is designed to comply with the California Consumer Privacy Act (CCPA) and the CAN-SPAM Act. If you are a California resident, Section 9 contains additional disclosures and rights specific to you.
2. Information We Collect
2.1 Information You Provide Directly
- Account registration information: email address, username, password (hashed), and optional first and last name
- Vehicle information: year, make, model, trim, color, nickname, optional VIN, and modification details
- Profile photographs and media you upload
- Optional social handles you add to your profile (Instagram, X, YouTube, TikTok, Facebook)
- Product review content and ratings, when that feature launches
- Communications you send to BuildBio support
2.2 Information Collected Automatically
- QR code scan data: timestamp, device type (operating system), and the event window the scan was attributed to. BuildBio does not collect the location of a scan.
- Platform usage data: pages viewed, features accessed, browsing patterns, time spent on profiles
- Transaction data, once affiliate purchase links and the revenue share program launch: purchase history, affiliate click events, revenue share earnings. None of this is collected today.
- Device information: IP address, browser type, operating system
- Cookie and similar tracking technologies as described in Section 6 (Cookies and Tracking Technologies) of this Policy
2.3 Information from Third Parties
- When the Trusted Influencer Program launches, we may receive aggregate follower count and engagement data from connected social platforms for verification purposes. We do not receive this data today.
3. How We Use Your Information
We use the information we collect to:
- Create and maintain your account and vehicle profiles
- Generate and manage your dynamic QR codes
- Facilitate affiliate purchases and calculate revenue share earnings, once those programs launch
- Process subscription payments and payouts through a payment processor such as Stripe, once paid tiers and payouts launch
- Send transactional emails including QR code delivery, account confirmations, and, once the revenue share program launches, earnings statements
- Send marketing communications where you have opted in or as permitted by law
- Deliver NHTSA/DMV recall notifications applicable to your vehicle profile, when that feature launches
- Verify Trusted Influencer Program eligibility, when that program launches
- Provide scan analytics to members
- Improve the Platform through aggregate analytics and research
- Detect and prevent fraud, abuse, and violations of our Terms of Service
- Comply with legal obligations
- In the future, create aggregated, de-identified insights for manufacturers and aftermarket brands as described in Section 4.4; we will update this Policy before doing so
4. How We Share Your Information
4.1 Public Information. Your vehicle profile, modification list, photographs, and Verified Build Badge status are public by default and accessible to any internet user. Your personal contact information is never publicly displayed.
4.2 Service Providers. We share information with vendors who help us operate the Platform, including Supabase (database, authentication, and file storage), Vercel (website hosting), MailerSend (email delivery), Google Wallet (Google LLC -- digital wallet passes you choose to add), and Google Analytics (Google LLC -- anonymous site usage and traffic analytics). When those features launch, we may also use Stripe (payments and payouts), Printful (merchandise fulfillment), and Zapier (automation); none of these receives your information today. These vendors are contractually obligated to use your information only to provide services to us.
4.3 Affiliate Partners. Affiliate purchase links are not yet live. Once they launch, when you click an affiliate link we will share necessary transaction attribution data with our affiliate partners to track and process commissions.
4.4 Aggregated Insights (Future Program). BuildBio does not sell personal information today. BuildBio may in the future offer aggregated, de-identified insights derived from platform activity to aftermarket manufacturers and marketing companies for industry research, marketing, and business intelligence. We will update this Policy and provide any required opt-out before doing so. If that program launches, the following data fields would be eligible for inclusion in aggregated, de-identified form:
- State
- Last name
- All vehicle modification data (year, make, model, parts installed)
The following data will never be sold under any circumstances:
- First name
- Exact street address
- Social Security number or government ID
- Financial account information
You may opt out of any future data sale at any time by submitting a request to privacy@buildbio.app. California residents have additional opt-out rights under Section 9.
4.5 Legal Requirements. We may disclose information as required by law, court order, or governmental authority, or when we believe disclosure is necessary to protect the rights, property, or safety of BuildBio, our members, or the public.
4.6 Business Transfers. In the event of a merger, acquisition, or sale of all or substantially all of our assets, your information may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy.
5. Email Communications and Opt-Out
5.1 BuildBio sends two categories of email: transactional and marketing.
5.2 Transactional emails include account creation confirmations, QR code delivery, password resets, security alerts, and, once the revenue share program launches, earnings statements. These emails are necessary for the operation of your account and cannot be opted out of.
5.3 Marketing emails include product recommendations, event announcements, earnings insight reports, and promotional communications. You may opt out of marketing emails at any time by clicking the unsubscribe link in any marketing email. Opt-out requests are processed automatically and immediately. Your opt-out preference is synchronized in real time to your account notification settings.
5.4 You may also manage all email preferences directly in your account settings under Notification Preferences.
6. Cookies and Tracking Technologies
BuildBio uses cookies and similar tracking technologies to operate the Platform, maintain your session, and analyze usage patterns. BuildBio also uses Google Analytics cookies to collect anonymous traffic and usage data; this data is processed by Google in accordance with its privacy policy. You may control cookie preferences through your browser settings. Disabling cookies may affect Platform functionality.
7. Data Security
BuildBio implements industry-standard security measures including Vercel-managed infrastructure with DDoS mitigation, HTTPS/TLS encrypted transmission, Supabase Auth with MFA support, and regular security audits. No data transmission over the internet is 100% secure. We cannot guarantee absolute security but are committed to protecting your information using reasonable technical and organizational measures.
8. Data Retention and Deletion
8.1 Account Deletion. When you delete your account, your public profile is deactivated. BuildBio retains anonymized data associated with your account for platform modeling, research, and aggregate analytics. This data cannot be linked back to you as an individual.
8.2 Total Data Deletion Request. A Total Data Deletion Request is a separate and explicit process. To submit a Total Data Deletion Request, send a written request to privacy@buildbio.app from the email address associated with your account, including the subject line "Total Data Deletion Request." Upon receipt of a verified request, BuildBio will:
- Permanently delete all personally identifiable data from our active systems
- Remove your data from all marketing lists and third-party data sale records
- Process your request within 45 days as required by CCPA
- Issue a Certificate of Data Deletion confirming the scope and completion date of deletion
BuildBio retains records of deletion requests for compliance purposes only.
9. California Privacy Rights (CCPA)
If you are a California resident, you have the following rights under the California Consumer Privacy Act:
Right to Know. You may request disclosure of the categories and specific pieces of personal information BuildBio has collected about you, the categories of sources, the business purposes for collection, and the categories of third parties with whom we share information.
Right to Delete. You may request deletion of personal information we have collected about you, subject to certain exceptions permitted by law.
Right to Opt Out of Sale. You may opt out of the sale of your personal information to third parties by submitting a request to privacy@buildbio.app with the subject line "Opt Out of Data Sale."
Right to Non-Discrimination. BuildBio will not discriminate against you for exercising any of your CCPA rights.
How to Submit a Request. Submit CCPA requests to privacy@buildbio.app. We will respond within 45 days. We may require identity verification before processing deletion requests.
10. Children's Privacy
The Platform is not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If we become aware that a minor has created an account, we will terminate the account and delete associated information.
11. Changes to This Policy
BuildBio may update this Privacy Policy from time to time. Material changes will be communicated by email or in-app notification before taking effect. Continued use of the Platform after the effective date constitutes acceptance of the updated Policy.
12. Contact
For privacy questions, requests, or concerns:
BuildBio — Privacy Team
Operated by Blakeley King, incorporation pending
privacy@buildbio.app
Westlake Village, California