Personal Data Processing Policy

1. General provisions

This policy explains how BuildSell processes personal data. By creating an account or submitting a public form, a user confirms that they have reviewed this policy.

2. Data we process

We may process names, email addresses, interface language, project and team data, service settings, activity history, technical logs, IP addresses, and session data. For payments, BuildSell stores the payment status, amount, plan, and provider identifier, but never receives or stores full bank card details.

For aggregate public landing analytics, BuildSell does not retain visitor IP addresses or User-Agent values. Unique visitors are identified using a one-way HMAC hash; the referring domain and campaign UTM parameters may be stored separately.

3. Purposes and legal grounds

Data is used to create accounts, provide the service, support users, prevent abuse, perform agreements, account for payments, and deliver notifications selected by users.

4. Providers and infrastructure

Data may be processed by infrastructure and feature providers, including hosting and database services, YooKassa for payments, Yandex Cloud for AI, and Telegram or email providers when the corresponding integrations are enabled.

5. Retention and security

Data is retained while required to operate the account and meet legal obligations. BuildSell uses access controls, encrypted transport, backups, and technical event logging.

6. User rights

Users may request access, correction, restriction, or deletion of their data and may withdraw consent. A data copy can be downloaded and the account deleted under Settings → Export. Records required by law may be retained after account deletion.