Privacy Policy
Last updated: 14 August 2026
1. Who we are
BuildPlot3D is operated by Rafael Araújo, Rua do Fraz nº148, Várzea, Barcelos, Portugal. We are the data controller for the personal data described here. You can reach us at privacy@buildplot3d.com.
2. What we collect
- Account data, email address and, if you use social sign-in, your name and profile email from Google.
- Content you create: saved deck designs, their measurements, materials and any project name you add.
- Billing data, handled by Stripe. We store only your plan, subscription status and customer reference; we never see or store card numbers.
- Technical data, minimal server logs needed to keep the service secure and running.
We do not run advertising or analytics trackers, and we do not sell or share personal data with advertisers.
3. Why we use it, and our legal basis
- To provide the service (accounts, saved designs, estimates), performance of a contract, Art. 6(1)(b) GDPR.
- To take payment, performance of a contract, Art. 6(1)(b) GDPR.
- To keep the service secure and prevent abuse Legitimate interests, Art. 6(1)(f) GDPR.
- To send service emails (sign-in, password reset, billing), contract and legal obligation.
- Marketing emails, if we ever send them, only with your consent, Art. 6(1)(a) GDPR, withdrawable at any time.
4. Your designs
Your saved designs belong to you. A design only becomes public if you choose to share it, and you can delete any design, or your whole account, at any time from Settings.
6. Who processes data for us
| Provider | Purpose | Transfers |
|---|---|---|
| Supabase | Database, authentication and file storage | EU / US (Standard Contractual Clauses) |
| Stripe | Subscription payments and billing | EU / US (Standard Contractual Clauses) |
| Lovable | Application hosting | EU / US (Standard Contractual Clauses) |
| Optional social sign-in (only if you use it) | EU / US (Standard Contractual Clauses) |
Where data leaves the European Economic Area, transfers rely on the European Commission's Standard Contractual Clauses or an adequacy decision.
7. How long we keep it
- Account and content data: while your account is active.
- After you delete your account: erased within 30 days, except backups that expire on their own cycle.
- A design started without an account: kept only in your own browser until you sign in or clear your browser data. It never reaches our servers before that.
- Invoices and billing records: kept as long as tax law requires.
8. Your rights
Under the GDPR you can request access, rectification, erasure, restriction, portability, and object to processing based on legitimate interests. Where processing is based on consent, you can withdraw it at any time without affecting past processing.
Email privacy@buildplot3d.com and we will answer within one month. You can also delete your account and its data yourself from Settings. If you are unhappy with our response, you may complain to your local supervisory authority, for us that is the Comissão Nacional de Proteção de Dados (CNPD), Portugal.
9. Cookies and advertising measurement
We use strictly necessary cookies and local storage: keeping you signed in, remembering your sidebar state, and holding a design you started before signing in. These are exempt from consent under the ePrivacy Directive.
We also run ads on Google Search and use Google Ads measurement cookies to see which ads lead to someone saving or sending a take-off. This sends your IP address, browser information and the page you were on to Google, which acts as our advertising partner; see how Google uses data from sites that use its services. The purposes are measurement and ad optimisation; we do not send Google your name, email or the content of your designs.
Visitors in the EEA, the United Kingdom, Switzerland and Canada see a cookie notice and these cookies are only set after acceptance. You can change or withdraw your choice at any time by clearing this site's cookies and local storage in your browser, or by writing to us; the notice will appear again.
10. Security
Data is encrypted in transit, access to your workspace is enforced at the database level with row-level security, and payment details never touch our servers. No system is perfectly secure, but if a breach affects your rights we will notify you and the supervisory authority as required.
11. Children
BuildPlot3D is a business tool and is not intended for anyone under 16. We do not knowingly collect data from children.
12. Changes
We may update this policy as the product evolves. Material changes will be announced by email or in the app before they take effect.
See also our Terms of Service.
