Private should mean
you know what happens.

What we collect

The consultation form collects your name, business name, email, optional website, the improvement you want, and your permission for us to reply. If you enter a private working room, we also keep your project answers, decisions, notes, approved images, draft versions, and the timestamps needed to preserve a clear working record.

Our hosting and sign-in providers may also process ordinary network, browser, device, security, and account information needed to deliver and protect the service.

How we use it

We use this information to review fit and capacity, respond to you, prepare and revise private website work, keep your decisions attached to the correct version, protect the service, and maintain the business records reasonably needed to provide support.

We do not sell personal information, use it for third-party targeted advertising, or enroll consultation requests in an automated campaign.

Where AI fits

Some working-room text is sent to the OpenAI API only when the room prepares the next question or website draft. The site excludes contact names and email addresses from those model requests, does not send the uploaded project images to the model, and sets model requests not to store generated responses as application history.

OpenAI states that API data is not used to train its models unless the customer opts in. Its standard abuse-monitoring logs may retain some prompts and responses for up to 30 days. Read the current OpenAI API data controls.

Who helps us operate the service

We use service providers for hosting, protected sign-in, database and file storage, AI generation, and—when connected—transactional email. They receive only the information needed to perform those services. We may also disclose information when required by law, to protect the service or another person, or as part of a business transfer subject to appropriate safeguards.

Retention, access, and deletion

We keep consultation and project records only as long as reasonably needed for review, client service, security, dispute resolution, and legal or accounting obligations. Test requests can be permanently removed from the protected owner desk.

To ask what we have, correct it, or request deletion, use the consultation form and begin your message with “Privacy request.” We may need to verify your identity, and some records may need to be retained when the law or an active agreement requires it.

Security and audience

Consultation records are stored behind a protected owner desk. Working rooms are tied to an invited email and require sign-in. We limit what is placed in notification emails so the request itself remains in the protected desk. No internet service can promise absolute security, but we use access controls and data minimization to reduce unnecessary risk.

Built & Backed is a business service for adults. It is not directed to children, and the forms should not be used to submit a child’s personal information.

Changes to this notice

If our data practices materially change, we will update this page and its effective date. If a change affects an active client in a meaningful way, we will also provide a direct notice when reasonably possible.