Last updated: April 24, 2026
Your privacy matters. This policy explains what data we collect, how we use it, and the choices you have. BuildSpec does not sell your personal information.
We collect information you provide directly — such as your email address, username, display name, and profile details (bio, garage, skill level, location) when you create an account. We also collect content you post (build threads, part reviews, bounties, comments). When you subscribe, Stripe collects your payment information on our behalf; we do not store full card numbers. We automatically collect usage data including pages visited, features used, and device/browser information through our hosting and analytics providers.
We use your information to operate and improve the Service; to personalize your experience (e.g., feed recommendations, onboarding); to process payments and manage subscriptions; to send transactional emails (account confirmation, subscription receipts); to detect and prevent fraud or abuse; and to comply with legal obligations. We do not sell your personal information to third parties.
Your public profile (username, display name, bio, garage, posts) is visible to other users if your profile is set to public. We share data with service providers who help us operate the platform: Supabase (database and authentication), Stripe (payments), and Vercel (hosting). These providers are bound by their own privacy policies and data processing agreements. We may disclose information if required by law or to protect the rights, property, or safety of BuildSpec, our users, or the public.
Your data is stored in Supabase (PostgreSQL) hosted on AWS infrastructure. We use row-level security policies to ensure users can only access data they are authorized to see. Passwords are managed by Supabase Auth and are never stored in plaintext. While we implement reasonable security measures, no system is completely secure and we cannot guarantee absolute security.
We use cookies and local storage to maintain your session and authentication state. We may use analytics tools to understand aggregate usage patterns. You can disable cookies in your browser settings, but doing so may prevent you from logging in or using certain features.
You may access, update, or delete your profile information at any time through your account settings. You may request deletion of your account and associated data by emailing privacy@thebuildspec.com. We will fulfill deletion requests within 30 days, subject to legal retention requirements. If you are in the EEA or UK, you may also have rights to data portability and to lodge a complaint with your local supervisory authority.
We retain your account data for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or fraud-prevention purposes. Anonymized, aggregated data may be retained indefinitely.
BuildSpec is not directed to children under 13. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal information, we will delete it promptly. If you believe a child has provided us with their information, please contact us at privacy@thebuildspec.com.
The Service may contain links to third-party websites (e.g., parts retailers, YouTube videos, community forums). We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies before providing any information.
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy and updating the "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the updated policy.
If you have questions or concerns about this Privacy Policy or how we handle your data, contact us at privacy@thebuildspec.com.