Privacy Policy

Last updated: April 27, 2026

1. Who We Are

Build Speedy ("Build Speedy", "we", "us", "our") is an independently operated product owned and run by a solo developer based in Vietnam. We provide Build Speedy as a desktop application and a marketing website at buildspeedy.pro. For privacy questions, contact support@buildspeedy.pro.

2. Information We Collect

We only collect what we need to operate the Service:

• Account & subscription information: Your email address (provided at signup, waitlist signup, or subscription) and subscription status.
• Payment information: Processed and stored by Paddle.com, our merchant of record. We never see or store your full card number, bank details, or billing address — Paddle returns only a transaction reference and the country/region needed for tax.
• Product analytics: Anonymous and pseudonymous usage events from the Build Speedy desktop app and website (page views, feature usage, button clicks, error events) collected via PostHog. These help us understand how the product is used and where it breaks. We do not collect the contents of your prompts, project files, generated code, or AI provider credentials in our analytics.
• Technical data: Standard server logs from our hosting provider (IP address, browser/OS, request URL, timestamp) used to operate the website and prevent abuse.
• Support correspondence: Anything you send to support@buildspeedy.pro, kept for as long as needed to resolve your request and meet our records obligations.

3. What We Do Not Collect

To be explicit about how the desktop app works:

• We do not see, transmit, or store the source code of projects you generate or edit with Build Speedy. It lives in the folder you choose on your own machine.
• We do not see or store your AI provider credentials. Build Speedy runs through your own locally installed Claude Code CLI or OpenAI Codex CLI — your subscription, your keys, your usage limits. Prompts and completions flow directly between your machine and your AI provider; they do not pass through our servers.
• We do not act as a proxy or reseller of AI inference. We do not retain a copy of your prompts or AI responses on our infrastructure.
• We may, in the future, offer optional API or credit-based features that do route through our infrastructure. If and when that launches, we will update this Policy and clearly disclose what is collected before you opt in.

4. How We Use Your Information

• To provide, maintain, and secure the Service.
• To process subscriptions, refunds, and tax obligations (via Paddle).
• To send transactional email (receipts, password resets, security notices, material policy changes). We do not send marketing email without your consent.
• To respond to your support requests.
• To improve the product through aggregated, pseudonymous usage analytics (PostHog).
• To detect, prevent, and respond to fraud, abuse, or violations of our Terms.

5. Legal Bases (EEA / UK Users)

If you are in the European Economic Area or United Kingdom, we rely on the following legal bases under the GDPR / UK GDPR:

• Contract — to provide the Service you subscribed to.
• Legitimate interests — to secure the Service, prevent abuse, and improve the product through analytics in a privacy-respecting way.
• Legal obligation — to keep tax and accounting records.
• Consent — for any optional cookies or analytics that require it in your jurisdiction. You can withdraw consent at any time.

6. Third-Party Services

We share the minimum data necessary with these processors:

• Paddle.com — Merchant of record for payments, subscriptions, refunds, invoicing, and global tax. Receives your email and payment details directly from you. See Paddle's Privacy Policy.
• Cloudflare, Inc. — Hosts our website, runs our edge functions, and stores our waitlist database (Cloudflare D1). Processes standard request metadata as part of operating the network. See Cloudflare's Privacy Policy.
• PostHog — Product analytics. Receives pseudonymous event data from the desktop app and website. See PostHog's Privacy Policy.
• Your AI provider (Anthropic, OpenAI, or others) — When you use Build Speedy with your own Claude Code or Codex CLI, your prompts and project context go directly to your AI provider under your account. Build Speedy is not a party to that data exchange. Their privacy policies apply to that traffic — see Anthropic and OpenAI.

7. International Transfers

Build Speedy is operated from Vietnam and the processors listed above operate globally. If you access the Service from outside Vietnam, your data may be processed in countries with different data protection laws. Where required, we rely on standard contractual clauses or equivalent safeguards offered by our processors.

8. Data Retention

• Account email and subscription records: retained while your account is active and for up to 24 months after cancellation, or longer where law requires (e.g., tax records typically retained for up to 10 years).
• Waitlist email: retained until you ask us to remove it or we close the waitlist.
• Product analytics: retained in pseudonymous form for up to 12 months.
• Server logs: typically retained for up to 30 days.
• Support email: retained for up to 24 months after resolution.
• Your project files, prompts, and generated code: never stored by us; retention is entirely under your control on your device.

9. Your Rights

Subject to your local laws (including GDPR, UK GDPR, CCPA/CPRA, LGPD, PIPEDA, and Vietnam's Personal Data Protection Decree), you may have the right to:

• Access the personal data we hold about you.
• Request correction or deletion of your data.
• Object to or restrict processing.
• Receive your data in a portable format.
• Withdraw consent where processing is based on consent.
• Opt out of the "sale" or "sharing" of personal information (we do not sell personal information).
• Lodge a complaint with your local data protection authority.

To exercise any of these rights, email support@buildspeedy.pro. We respond within 30 days.

10. Cookies & Similar Technologies

Our website uses a small number of cookies and local storage entries:

• Essential — session and authentication cookies, CSRF tokens. Required for the Service.
• Analytics — PostHog cookie / local storage for pseudonymous usage analytics. You can opt out by blocking third-party storage or by using a browser tracking-protection feature.

We do not use advertising or cross-site tracking cookies.

11. Security

We use TLS for all network traffic, scope access to processors on a least-privilege basis, and rely on Paddle to handle cardholder data so we never store it. No system is perfectly secure; you remain responsible for protecting your own AI provider credentials and your local device. If we discover a breach affecting your personal data, we will notify you and the relevant authorities as required by law.

12. Children's Privacy

Build Speedy is intended for software developers and is not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact support@buildspeedy.pro and we will delete it.

13. Changes to This Policy

We may update this Policy from time to time. The "Last updated" date above reflects the latest revision. For material changes that reduce your rights or expand the data we collect, we will notify subscribers by email or a prominent website notice before the changes take effect.

14. Contact

For privacy questions, requests, or complaints, email support@buildspeedy.pro.