Privacy Policy

Last updated: August 29, 2026

Builvio is an app-building service operated from British Columbia, Canada. This policy explains what we collect, why, and what we do with it. The short version: we collect the minimum needed to run the service, we don’t sell data, and the apps you build live in accounts you own, not ours.

What we collect

Account information. Your email address, and your name if you choose to give one. If you sign up with a password we store it hashed (scrypt) and never in readable form; if you sign in with Google or GitHub we store the account identifier they give us instead of a password. For email-and-password sign-ups we also record the IP address used, which is how we catch bulk automated sign-ups.

Your prompts and projects. The instructions you type, the code generated from them, version history, and build logs. This is the product working, not surveillance.

Connected-service tokens. If you connect GitHub, Vercel, or Supabase, we store those access tokens encrypted (AES-256-GCM) and use them only when you publish. They are never shown to, or processed by, AI models.

Usage and billing. Counts of builds, compute usage, and — if you subscribe — a Stripe customer reference. Your card details go directly to Stripe and never touch our servers.

Cookies. One essential session cookie so you stay signed in.

Advertising measurement. Our public pages include the Meta Pixel, which tells us whether our ads on Facebook and Instagram lead to sign-ups. Meta may set its own cookies and receives standard event data (pages viewed, sign-up completed) — never your prompts, projects, or connected-service data. You can opt out with a content blocker or via Meta’s ad settings; the product works identically either way.

Who processes it

We use a small set of service providers to run Builvio: Vercel (hosting), Supabase (database), Stripe (payments), Meta (advertising measurement, public pages only), and OpenRouter together with the AI model providers it routes to (currently DeepSeek and Anthropic models) — your prompts and project code are sent to these model providers to generate your app. Some providers process data in the United States or other countries outside Canada.

What we don’t do

We don’t sell your data. We don’t use your private projects to advertise to you. We don’t train our own models on your data.

Apps you build

Apps you publish run in your own GitHub, Vercel, and Supabase accounts and may collect data from their visitors. You are the operator of those apps and responsible for their privacy practices.

Retention and deletion

We keep your data while your account is active. Ask us to delete your account and we will remove your projects, prompts, and tokens from our systems, and revoke stored provider tokens, within 30 days. Published apps in your own accounts are untouched — they’re yours.

Your rights

Under Canadian privacy law (PIPEDA) you may request access to, correction of, or deletion of your personal information. Email us and we’ll act on it.

Contact

Privacy questions: builvio.support@gmail.com

We’ll update this page as the service evolves; material changes will be dated here.