Privacy Policy

1. Information We Collect

We collect information you provide directly to us, for example when you book a demo or contact us, which may include your name, email address, and company name. We also automatically collect certain information when you visit, use, or navigate our website. This may include your IP address, browser and device characteristics, operating system, referring URLs, approximate location derived from your IP address, and information about how and when you use the site. This information is primarily needed to maintain the security and operation of the site, and for our internal analytics and reporting purposes. Subject to your choices in section 3, we use service providers to measure site usage and identify businesses and eligible US business visitors who may be interested in Buildbox. These services may process IP address, browser and device information, first-party identifiers, visited pages, referring URLs, approximate location, and visit timestamps. Our analytics providers also use session replay to help diagnose errors and improve the website; form inputs are masked and are not captured.

2. Cookies and Similar Technologies

We use a small number of cookies, grouped into the categories below and configurable as described in section 3.

Strictly necessary

Required to operate the site, including remembering your consent choice and the region in which it was given. These cannot be switched off.

Analytics and visitor identification

Used to measure how visitors use the site and identify interested businesses and eligible US business visitors. If you decline this category, these technologies and their persistent identifiers are disabled.

Advertising

Not used. We do not deploy advertising pixels or retargeting tags. Should this change, this policy and the cookie notice will be updated accordingly.

3. Your Choices and Opt-Out Signals

We present a cookie notice on your first visit. Outside the EEA, the United Kingdom and Switzerland, optional categories are enabled by default and may be disabled using “Opt out”, or configured individually under “Manage preferences”. Within those territories, non-essential technologies load only after you provide consent. You may change or withdraw your choices at any time using the “Your Privacy Choices” link in the footer of every page, and disabling a category takes effect immediately. We also honour opt-out preference signals recognised under applicable law, including Global Privacy Control (GPC) and the browser Do Not Track setting: where either is present, optional categories are treated as declined before any information is collected and the notice is not shown.

4. How We Use Information

We use the information we collect to provide, maintain, secure and improve our services, to understand how the site is used, to respond to enquiries, and to comply with legal obligations.

5. Sharing and Disclosure

We do not sell your personal information, and we do not share it for cross-context behavioural advertising. We disclose personal information to the service providers who help us operate the site and our services, covering analytics, session replay, visitor identification, hosting, scheduling, and authentication, each of which is contractually limited to processing it on our behalf. We may also disclose information where legally required, or in connection with a merger, acquisition, or sale of assets.

6. Data Security and Retention

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction, though no method of transmission or storage is completely secure. We retain information for as long as necessary for the purposes described in this policy or as required by law. Analytics events and session recordings are retained by our analytics provider on a rolling retention schedule and are deleted automatically when it expires.

7. Your Privacy Rights

Depending on where you live, including under the California Consumer Privacy Act as amended by the CPRA, and under the GDPR and UK GDPR, you may have the right to know what personal information we hold about you, to obtain a copy of it, to correct it, to delete it, to limit the use of sensitive personal information, and to opt out of its sale or sharing. We will not discriminate against you for exercising any of these rights. To make a request, contact us at legal@heybuildbox.com; we may need to verify your identity before acting on it.

8. Children

This website is intended for business users. We do not knowingly collect personal information from individuals under 16. If you believe a child has provided us with personal information, contact us at legal@heybuildbox.com and we will delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Where we do, we will revise the “last updated” date above. If the meaning of a cookie category materially changes, we will request your consent again rather than relying on a choice given under the previous version.

10. Contact

Buildbox is operated by Oratora, Inc. For questions about this Privacy Policy or to exercise a privacy right, contact us at legal@heybuildbox.com.