Builder & Co.

Privacy Policy

Last updated: February 2026

1. Who We Are

Builder & Co. is operated by Ctrl AI, Inc. (“we”, “us”, “our”). This policy explains how we collect, use, store, and protect your data when you use our platform at builderandco.com (the “Service”).

2. Data We Collect

We collect the following categories of data:

  • Account data: name, email address, and profile information you provide
  • Authentication data: if you sign in with Google, we receive your name, email address, and profile picture from your Google account (see Section 3 for details)
  • Payment data: processed securely by Stripe — we never store your card details
  • Content: products, reviews, screenshots, and videos you submit
  • Usage data: basic analytics to improve the service

3. Google User Data

When you choose to sign in with Google, we access the following data from your Google account:

  • Email address: used to create and identify your account
  • Display name: used as your default profile name
  • Profile picture: used as your default avatar

How we use Google user data

Google user data is used solely to authenticate you, create your account, and populate your profile. We do not use Google user data for advertising, analytics, or any purpose beyond providing the Service.

Sharing of Google user data

We do not sell, rent, or share your Google user data with any third parties, except as necessary to operate the Service (see Section 5). Your email is stored in our database hosted by Supabase. Your name and avatar may be displayed to other members on your public profile.

Storage and protection of Google user data

Google user data is stored securely in our Supabase database with encryption at rest and in transit. Access to the database is restricted to authorized personnel only. We do not store Google authentication tokens beyond the active session.

Retention and deletion of Google user data

Your Google user data is retained for as long as your account is active. You may request deletion of your account and all associated data at any time by emailing hello@builderandco.com. Upon receiving a deletion request, we will remove your data within 30 days.

4. How We Use Your Data

  • To provide and maintain the Service
  • To authenticate your identity and manage your account
  • To process your subscription payments
  • To display your products and reviews to other members
  • To send you important account notifications
  • To compile the Weekly 10 and other editorial features

5. Third-Party Services

We use the following services to operate the platform. These services may process your data as described in their respective privacy policies:

  • Supabase: authentication and database hosting
  • Stripe: payment processing
  • Cloudflare: media storage and delivery (R2)
  • Vercel: application hosting
  • Resend: transactional email delivery
  • Google: OAuth authentication (sign-in only)

We do not sell your personal data to any third party. Data is shared with the above services only as necessary to operate the Service.

6. Data Storage and Security

Your data is stored in secure, encrypted databases provided by Supabase (PostgreSQL with encryption at rest). Media files (screenshots, videos, avatars) are stored on Cloudflare R2 with access controls. All data is transmitted over HTTPS with TLS encryption.

We implement industry-standard security measures including row-level security policies, encrypted connections, and access-restricted administrative controls. However, no method of transmission over the internet is 100% secure.

7. Data Retention and Deletion

Your data is retained while your account is active. If you cancel your subscription, your products are archived after 30 days but your account data is preserved so you can resubscribe.

You may request full deletion of your account and all associated data by emailing hello@builderandco.com. Upon receiving a deletion request, we will permanently remove your personal data, products, reviews, and uploaded media within 30 days.

8. Your Rights

You have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Request deletion of your data
  • Export your data
  • Revoke Google OAuth access via your Google account settings

To exercise any of these rights, contact us at hello@builderandco.com.

9. Changes

We may update this policy periodically. Material changes will be communicated via email to registered users.

Contact

Questions about your data or this policy? Email hello@builderandco.com.