Privacy Policy

BuildBox is the controller of the personal data described in this policy. You can reach our privacy team at privacy@buildboxapp.com.

When you sign in we receive your email address and, depending on the provider, your name and avatar. When you place an order we collect a delivery address, a contact phone number, and any notes you add. When you contact support we keep a copy of the message.

When you visit the site we record technical data such as your IP address, browser type, device type, language, the pages you visit, the parts you view, and the builds you save. This is needed to run the service, secure it, and improve it.

We use your data to: provide and run the service, fulfil your orders, communicate with you about your account and orders, secure the service against fraud and abuse, improve the product, comply with our legal obligations, and — only if you have asked for them — send marketing emails.

We do not sell your personal data.

We process your data on the basis of: performance of a contract with you (when you place an order), our legitimate interests (running and securing the service), your consent (analytics cookies, marketing emails), and our legal obligations (tax, accounting, consumer protection).

We share data with the third parties we need to run the service: cloud hosting, email delivery, payment service providers, delivery carriers, error monitoring, and analytics. Each processor receives only the data they need and is bound by a data-processing agreement.

We also disclose data when required by law or to protect our rights.

We use cookies and similar technologies. The categories we use, what they do, and how to control them are described in our Cookies Policy.

We keep account data for as long as your account exists, plus the period required by tax and accounting law. Order records are kept for the period required by Ukrainian law (currently 1095 days for tax purposes).

Aggregated and anonymised data may be kept indefinitely.

We use industry-standard safeguards including TLS in transit, encryption at rest for sensitive fields, role-based access controls, and audit logging. No service is 100% secure — please notify us at security@buildboxapp.com if you believe there has been a breach.

Some of our processors are located outside Ukraine. When we transfer personal data abroad we use the safeguards required by applicable law, including standard contractual clauses where appropriate.

Depending on the law that applies to you, you have the right to: access your data, correct it, ask us to delete it, restrict or object to processing, withdraw consent, port your data, and complain to a supervisory authority — in Ukraine, the Verkhovna Rada Commissioner for Human Rights.

To exercise any of these rights, write to privacy@buildboxapp.com.

BuildBox is not directed at children under 18. If you believe a minor has given us personal data, please contact us and we will delete it.

We will update this policy when our practice changes. We will post the new version on this page and update the "Last updated" date. If the change is material we will notify you in the app or by email.

Privacy team BuildBox buildboxapp.com Kyiv, Ukraine privacy@buildboxapp.com