Privacy Policy

1. Introduction

BuildLean ("we," "our," or "us") operates buildlean.dev (the "Site"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services, including our AI-powered project scoping tool and booking system.

By using our Site and services, you consent to the data practices described in this policy. If you do not agree with the terms of this Privacy Policy, please do not access or use our services.

2. Information We Collect

2.1 Information You Provide Directly

We collect information that you voluntarily provide when using our services:

• Project Scoper Form: Project descriptions, industry/use case information, timeline expectations, and budget range preferences you submit for AI-powered project analysis.
• Booking Information: Your name, email address, company name, selected appointment time, and any notes you provide when scheduling a discovery call.
• Contact Information: Name, email address, and company name when you submit inquiries or request information.
• Communications: Any information you provide when contacting us via email or other communication channels.

2.2 Information Collected Automatically

When you visit our Site, we may automatically collect certain information:

• Device Information: Browser type, operating system, device type, and screen resolution.
• Usage Data: Pages visited, time spent on pages, click patterns, and navigation paths.
• Network Information: IP address, approximate geographic location, and internet service provider.
• Cookies and Similar Technologies: We use cookies and similar tracking technologies to enhance your experience. See Section 7 for more details.

3. How We Use Your Information

We use the collected information for the following purposes:

• AI-Powered Project Analysis: Your project descriptions and requirements are processed by artificial intelligence systems to generate customized project recommendations, architecture overviews, timeline estimates, and pricing guidance.
• Appointment Scheduling: To schedule and manage discovery calls, send calendar invitations, and provide appointment reminders.
• Communication: To respond to your inquiries, send service-related notifications, and provide customer support.
• Service Improvement: To analyze usage patterns, improve our website functionality, and enhance our service offerings.
• Lead Management: To track and follow up on potential business opportunities and maintain records of client interactions.
• Legal Compliance: To comply with applicable laws, regulations, and legal processes.

4. AI Processing and Third-Party Services

4.1 Artificial Intelligence Processing

Our project scoping tool uses artificial intelligence services (such as Anthropic's Claude or OpenAI) to analyze your project requirements and generate recommendations. When you submit project information:

• Your project description and related inputs are transmitted to AI service providers for processing.
• AI providers may process this data according to their own privacy policies and data handling practices.
• We do not use your project information to train AI models.
• The AI-generated recommendations are stored in our systems alongside your contact information for follow-up purposes.

4.2 Third-Party Service Providers

We use the following third-party services to operate our platform:

• Google Cloud Platform: For hosting, data storage (Firestore), and computing infrastructure.
• Firebase Hosting: For website hosting and content delivery.
• Google Calendar API: For managing appointment scheduling and calendar integrations.
• Email Services (SendGrid/Gmail API): For sending transactional emails, booking confirmations, and notifications.
• AI Services (Anthropic/OpenAI): For processing project scoping requests and generating recommendations.
• Google Analytics: For website analytics and usage tracking (if enabled).

Each third-party service provider has its own privacy policy governing the use of your information. We encourage you to review these policies.

5. Data Storage and Security

5.1 Data Storage

Your information is stored on secure servers provided by Google Cloud Platform. Lead information and booking data are stored in Google Firestore, a secure NoSQL database. We implement industry-standard security measures to protect your data.

5.2 Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Specifically:

• Lead and booking information is retained for up to 3 years after your last interaction with us.
• Project scoping data is retained for up to 2 years for service improvement and follow-up purposes.
• You may request deletion of your data at any time (see Section 8).

5.3 Security Measures

We implement appropriate technical and organizational measures to protect your personal information, including:

• Encryption of data in transit using TLS/SSL protocols.
• Encryption of data at rest in our databases.
• Access controls and authentication requirements for our systems.
• Regular security assessments and updates.

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Information Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information in the following circumstances:

• Service Providers: With third-party vendors who assist us in operating our website and providing services (as described in Section 4.2).
• Legal Requirements: When required by law, regulation, legal process, or governmental request.
• Protection of Rights: To protect our rights, privacy, safety, or property, or that of our users or others.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.
• With Your Consent: When you have given us explicit consent to share your information.

7. Cookies and Tracking Technologies

7.1 Types of Cookies We Use

• Essential Cookies: Required for the website to function properly, including session management and security features.
• Analytics Cookies: Used to collect information about how visitors use our website, including pages visited and time spent. This helps us improve our website.
• Functional Cookies: Used to remember your preferences and settings to enhance your experience.

7.2 Managing Cookies

Most web browsers allow you to control cookies through their settings. You can set your browser to refuse cookies or alert you when cookies are being sent. However, disabling cookies may affect the functionality of our website.

7.3 Do Not Track

Some browsers include a "Do Not Track" feature. Our website currently does not respond to "Do Not Track" signals, but you can manage your tracking preferences through your browser settings.

8. Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal information:

• Access: You can request a copy of the personal information we hold about you.
• Correction: You can request that we correct inaccurate or incomplete information.
• Deletion: You can request that we delete your personal information, subject to certain legal exceptions.
• Opt-Out: You can opt out of receiving marketing communications from us at any time.
• Data Portability: You can request a copy of your data in a structured, commonly used format.
• Withdraw Consent: Where processing is based on consent, you can withdraw your consent at any time.

To exercise any of these rights, please contact us at hello@buildlean.dev. We will respond to your request within 30 days.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States, where our service providers are located. These countries may have data protection laws that differ from your country. By using our services, you consent to the transfer of your information to these countries.

We take appropriate safeguards to ensure that your personal information remains protected in accordance with this Privacy Policy when transferred internationally.

10. Children's Privacy

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us immediately. If we become aware that we have collected personal information from a child without parental consent, we will take steps to delete that information.

11. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• The right to know what personal information we collect, use, disclose, and sell.
• The right to request deletion of your personal information.
• The right to opt out of the sale of your personal information (we do not sell personal information).
• The right to non-discrimination for exercising your privacy rights.

To exercise these rights, contact us at hello@buildlean.dev.

12. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have rights under the General Data Protection Regulation (GDPR):

• Legal Basis: We process your personal data based on: (a) your consent, (b) performance of a contract, (c) compliance with legal obligations, or (d) our legitimate interests.
• Data Subject Rights: You have the right to access, rectify, erase, restrict processing, data portability, and object to processing.
• Supervisory Authority: You have the right to lodge a complaint with your local data protection authority.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of any material changes by posting the updated policy on this page with a new "Last updated" date. We encourage you to review this Privacy Policy periodically.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at: