Privacy Policy

1. Information We Collect

• Account and identity information, such as your email address, verification sign-in records, third-party sign-in identifiers, and basic account profile data.
• Session and workspace data, such as prompts, chat messages, workspace files, generated output, build artifacts, preview links, and session identifiers.
• Device and log information, such as browser type, operating system details, request timing, error logs, operation logs, and security event records. Where network identifiers are involved, we apply masking or anonymization as needed for security and analytics.
• Usage information, such as pages visited, feature usage, workspace type, build and export status, interaction preferences, and language settings.
• Third-party source information, when you use Google sign-in or another identity provider and that provider returns profile or account details within the scope of your authorization.

2. How We Use Information

• To provide, maintain, and improve the account system, chat workspace, AI generation, build, preview, and delivery features.
• To authenticate users, establish sign-in sessions, validate verification codes, prevent abuse, and protect platform security.
• To preserve session context, workspace files, and generated output so you can continue editing, review history, and access previews.
• To troubleshoot service issues and monitor reliability, performance, security incidents, and abnormal activity.
• To comply with legal obligations and respond to regulatory, law enforcement, complaint, or rights-protection requests.

3. Legal Bases for Processing

Depending on where you are located and which data protection laws apply, we may process personal information on the basis of contract performance, responding to your requests, your consent, compliance with legal obligations, and our legitimate interests in securing and improving the service and preventing abuse.

4. Cookies and Session Technologies

vBuild uses only necessary cookies or similar technologies required to provide the service and secure accounts, including maintaining sign-in state, preserving session continuity, and supporting basic language and preference settings.

Our anonymized baseline analytics does not rely on non-essential cookies by default. Site analytics is primarily based on anonymized visitor/session keys and event batching, and is not used for cross-site advertising tracking.

If your browser blocks necessary cookies, some authentication, sign-in, or session-dependent features may not function properly.

5. Monitoring, Logging, and Security Processing

To prevent abuse, maintain system stability, investigate security incidents, comply with legal obligations, and satisfy monitoring compliance requirements, we record and analyze sign-in events, request metadata, workspace operations, build states, error logs, risk signals, and other necessary security records related to the service.

The anonymized analytics model works by collecting minimum necessary fields (such as page path, referrer, device summary, and engagement time), avoiding plain-text IP storage, and generating pseudonymous identifiers from masked network signals, low-entropy device hints, and a server-side salt for in-site aggregation.

These logs and analytics records may be used for automated security detection, manual investigation, policy enforcement, audit trails, evidence preservation, and product reliability improvements.

6. How We Share Information

• With service providers acting on our behalf, including cloud infrastructure providers, authentication vendors, email providers, object storage services, and security support providers, where needed to operate the service.
• When required by law, court order, regulatory request, law enforcement request, rights protection, dispute handling, or security incident investigation.
• As part of a corporate transaction such as restructuring, financing, merger, acquisition, or asset transfer, where permitted by law.

7. International Transfers

Because vBuild serves users globally, your information may be transferred to, stored in, or processed by service providers located outside your country or region. Where required by law, we take reasonable measures to protect personal information in cross-border transfers.

8. Data Retention

We retain personal information and related logs for as long as needed to fulfill the purposes described in this Policy, comply with legal obligations, resolve disputes, enforce agreements, and protect security.

Retention periods may differ by data type. Account information, authentication logs, workspace files, chat records, and security audit records may be retained for different periods depending on business necessity, legal obligations, and risk-control needs.

9. Your Rights

• Subject to applicable law, you may have rights to access, correct, delete, restrict processing, object to processing, request data portability, withdraw consent, or lodge a complaint.
• We may need to verify your identity before acting on a request, and some requests may be limited by law, technical feasibility, security requirements, or the rights of others.
• Certain information may be retained even after a deletion request where necessary for audit, dispute handling, legal obligations, fraud prevention, or security purposes.

10. Children's Privacy

Unless permitted by applicable law, vBuild is not directed to children as defined under relevant law and we do not knowingly collect children's personal information. If you believe a child has provided information without proper authorization, please contact us so we can take appropriate action.

11. Data Security

We use reasonable technical, organizational, and access-control measures to reduce the risk of unauthorized access, disclosure, alteration, or loss, including account authentication, security isolation, logging, audit mechanisms, and boundary controls.

However, no internet transmission or storage system can be guaranteed to be completely secure, and we cannot promise that security incidents will never occur.

12. Changes to This Policy

We may update this Privacy Policy to reflect product changes, legal or regulatory requirements, or security governance needs. The updated version will be posted on this page and, where appropriate, communicated through in-product notice, email, or another reasonable method.

If any provision of this Policy conflicts with mandatory applicable law, that mandatory law will prevail to the extent of the conflict.