Privacy Policy

BuildMy.Directory ("we", "us", "our") operates the website at buildmy.directory and provides a platform for creators to turn their social media content into searchable directories. This Privacy Policy explains how we collect, use, and share information about you when you use our service.

We collect the following categories of information:

• Account data: email address, name, password (hashed), and your chosen plan. Collected when you sign up.
• Content data: the social media handles you provide, and the posts, captions, transcripts, and media we scrape and process on your behalf.
• Payment data: handled entirely by Stripe. We never see or store your card details — only a customer ID Stripe provides us.
• Visitor analytics:when someone visits a directory, we log the page viewed, session ID, referrer, device type, browser, and approximate country (from IP, but we don't store the IP itself).
• Subscriber data:if a visitor subscribes to your directory's newsletter, we store their email and category preferences.

• To operate the service — scraping, transcribing, categorizing, and publishing your directory.
• To authenticate you and secure your account.
• To process payments and manage subscriptions via Stripe.
• To send transactional emails (verification, digests, account notifications).
• To provide you with analytics about your directory's performance.
• To improve the service and develop new features.

We rely on a small number of trusted third-party services. Each has their own privacy policy and only receives the data necessary to perform its function:

• Supabase — authentication (email, password hash)
• Neon / Supabase Postgres — primary database hosting
• Vercel — hosting, Edge network, and Blob storage for media
• Stripe — payment processing
• Resend — transactional email delivery
• Apify — scraping Instagram and TikTok profiles
• Deepgram — video transcription
• Anthropic (Claude) — AI-powered content categorization
• Inngest — background job orchestration

We use strictly necessary cookies for authentication (Supabase sessions) and to prevent spam. We also use sessionStorage for analytics (generating a temporary session ID that resets when you close the tab). We do not use third-party advertising cookies or cross-site trackers.

Account and content data are retained for as long as your account is active. Analytics data is retained for up to 24 months. If you delete your account, we permanently delete your sites, posts, subscribers, and personal data within 30 days (except where we're legally required to retain certain records — e.g. payment/tax records up to 7 years).

Depending on your location, you may have the right to: access the personal data we hold about you; correct inaccurate data; delete your data; restrict or object to processing; and request data portability. You can exercise most of these rights directly from your account settings, or by emailing us at hello@buildmy.directory.

Our primary services are hosted in the European Union (Supabase in Ireland, Vercel Edge globally). Some third-party services (Apify, Deepgram, Anthropic, Stripe) may process data in the United States. We rely on Standard Contractual Clauses and each provider's compliance framework to protect transferred data.

The service is not directed at children under 16. We do not knowingly collect data from children. If you believe a child has provided us information, please contact us and we'll delete it.

We may update this policy from time to time. Material changes will be communicated via email or a prominent notice on the site. The "last updated" date at the top of this page always reflects the current version.

Questions about this policy? Email hello@buildmy.directory.