Privacy Policy

1. Who we are

BuildScribe AI is a trading name operated by a sole trader based in England. We provide AI-powered proposal generation software for UK contractors. In this policy, "we", "us" and "our" refers to BuildScribe AI. You can contact us at nimmywebdesign@gmail.com.

2. What data we collect

We collect the following personal data when you use BuildScribe AI:

• Your email address and password when you create an account
• Your company name, trading name, address, phone number, and VAT number if you provide them
• Proposal content you enter, including client names, project details, and pricing
• Subscription and billing information processed via Stripe
• Usage data such as number of proposals created and features used
• Technical data such as IP address, browser type, and device information

3. How we use your data

We use your data to:

• Provide and maintain the BuildScribe AI service
• Process your subscription payments via Stripe
• Send you transactional emails such as account confirmation and billing notifications
• Improve the service based on usage patterns
• Respond to support requests
• Comply with legal obligations

We do not sell your personal data to third parties. We do not use your proposal content to train AI models.

4. Legal basis for processing

Under UK GDPR, we process your data on the following bases:

• Contract: processing necessary to provide the service you have signed up for
• Legitimate interests: improving our service and preventing fraud
• Legal obligation: compliance with applicable UK law

5. Third parties we share data with

We use the following third-party services to operate BuildScribe AI:

• Supabase -- database and authentication (data stored in the EU)
• Stripe -- payment processing (subject to Stripe's own privacy policy)
• Google (Gemini API) -- AI text generation for proposal narratives
• Cloudflare -- hosting and content delivery

Each of these providers processes data only as necessary to deliver their service and is bound by their own data protection obligations.

6. Data retention

We retain your account data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or financial compliance purposes (such as billing records, which are retained for 7 years in line with HMRC requirements).

7. Your rights

Under UK GDPR you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict processing
• Request a portable copy of your data
• Lodge a complaint with the ICO (ico.org.uk)

To exercise any of these rights, contact us at nimmywebdesign@gmail.com.

8. Cookies

BuildScribe AI uses essential cookies and local storage to maintain your login session. We do not use advertising or tracking cookies.

9. Changes to this policy

We may update this policy from time to time. We will notify you of significant changes by email or via a notice in the app. Continued use of the service after changes constitutes acceptance of the updated policy.