Privacy Policy

Last updated: August 12, 2026

BitBuild (“we,” “us,” or “our”) respects your privacy. This Policy explains how we handle personal information, project files, and service data when you visit bit.bitbuild.cc or use our quantity takeoff, construction quote review, comparison, and reporting services.

1. Scope and controller

This Policy applies to the BitBuild website, workspace, accounts, subscriptions, and support services. BitBuild is currently operated by an independent operator. Contact neohoy@gmail.com for privacy questions or rights requests.

2. Information we collect

2.1 Information you provide

• Account data: name, email address, login method, and identifiers returned by an authorized sign-in provider. Authentication providers securely process passwords; we do not read plaintext passwords.
• Project content: drawings, quotations, PDFs, spreadsheets, images, instructions, analysis results, and exported reports.
• Communications: support emails, feedback, and refund requests.
• Transaction data: plan, order ID, amount, currency, payment status, refunds, and cancellations. We do not receive or store complete card numbers or security codes.

2.2 Information collected automatically

• IP address, browser and device type, operating system, time zone, language, and approximate region.
• Access times, feature usage, job status, error logs, security logs, and performance data.
• Cookies or local storage required for sign-in, language preferences, security, and core functionality.

3. How we use information

• To create accounts, provide AI analysis, retain task history, and generate reports under our contract with you.
• To administer subscriptions, payments, refunds, and billing records.
• To provide support and send security, billing, and policy notices.
• To prevent fraud, abuse, and unauthorized access.
• To troubleshoot and improve service performance and usability.

We may use aggregated or de-identified information for statistics. We do not sell personal information or share it for cross-context behavioral advertising.

4. AI processing and project files

To perform a requested takeoff or review, we send necessary file content, extracted text, and task instructions to contracted AI model providers. The Service currently may use Volcengine Ark and Doubao models and may add or replace providers subject to comparable protections.

We do not use project files to train BitBuild-owned models. Third-party model providers process content under their applicable service and data-processing terms. Do not upload content you lack permission to process, or unrelated highly sensitive information such as identity documents or payment-card data.

5. Service providers and sharing

• Supabase for authentication, database, and user file storage.
• Google Cloud for backend hosting and operational logs.
• Cloudflare for site delivery, performance, and security.
• Volcengine Ark and other AI providers for user-requested analysis.
• Payment providers displayed at checkout, including Waffo Pancake, Lemon Squeezy, or their payment partners. Card data is processed by the payment provider and is not stored on BitBuild servers.

We may also disclose information in response to valid legal requests or transfer it in a merger, acquisition, or asset sale with continued protection obligations.

6. Cookies and local storage

BitBuild uses strictly necessary cookies or browser storage to maintain sign-in, remember language and interface preferences, protect the Service, and provide core features. We do not currently use third-party advertising cookies. Clearing browser data may sign you out or remove preferences.

7. International processing

Because the Service supports multiple regions, information may be processed in mainland China, Taiwan, Singapore, the United States, or other locations where our providers operate. We use contractual safeguards, access controls, encryption in transit, and applicable transfer mechanisms, and transfer only what is needed to provide the Service.

8. Retention

• Account data: while the account remains active and ordinarily deleted or de-identified within 90 days after account deletion, unless law requires otherwise.
• Project files and reports: until you delete the associated conversation or account; backup copies expire through reasonable rotation cycles.
• Security and operational logs: ordinarily no longer than 12 months, except where needed to investigate an incident.
• Transaction and tax records: as required by tax, anti-fraud, and payment rules, commonly up to seven years.

9. Your rights

Depending on applicable law, you may request access, correction, deletion, a portable copy, restriction or objection to processing, or withdrawal of consent, and may complain to a data-protection authority. You may delete conversations or your account in the product or email us. We may verify your identity and ordinarily respond within 30 days.

10. Security

We use HTTPS encryption, access controls, permission isolation, token validation, private file storage, and logging. No internet service can guarantee absolute security. We will notify affected users and authorities of qualifying incidents as required by law.

11. Children

The Service is intended only for users aged 18 or older. We do not knowingly collect personal information from children. Contact us if you believe a child submitted information.

12. Changes

We may update this Policy as the Service, providers, or law changes. We will provide advance notice of material changes by website notice, account message, or registered email and update the date on this page.