Privacy Policy

1. Scope of This Policy

This Privacy Policy describes how BuildPulse handles Personal Data collected through our marketing website, web application, APIs, command-line tools, GitHub Action, MCP server, and related services (collectively, the “Services”).

This Policy does not apply to Personal Data we process on behalf of our business customers as a service provider or processor. Where a customer uses the Services to process Personal Data about its own end users or employees, that customer is the controller of such data, our processing is governed by our Data Processing Agreement at https://buildpulse.io/dpa, and the customer’s own privacy policy governs how that data is collected and used.

This Policy also does not apply to Personal Data collected other than through the Services, or to any unsolicited information you provide (for example, content posted to public areas, product ideas, or other unsolicited submissions), all of which is deemed non-confidential.

2. Information We Collect

When you interact with us through the Services, we may collect Personal Data and other information from you, as described below.

Information you provide. We collect Personal Data when you voluntarily provide it — for example, when you register for an account, create or join an organization, contact us with inquiries, respond to a survey, subscribe to a plan, or use certain features. This may include your name, username, email address, organization name, role, billing contact details, and the content of your communications with us.

Service and usage data. To provide the Services, we process data you connect to BuildPulse, including repository and organization metadata, test results, CI run data, code coverage data, logs, and configuration. This data may incidentally contain Personal Data such as committer names, email addresses, and usernames present in your CI metadata.

Information from third-party services. When you connect a third-party service to BuildPulse — such as GitHub, Google Sign-In, Slack, or Jira — we receive information from that service that you have authorized it to share, which may include your name, email, account identifiers, and authorization tokens. We use this information to provide and improve the Services.

Payment information. Payments are processed by our payment processor, Stripe. We do not collect or store full payment card numbers; Stripe processes that information under its own privacy policy. We receive limited billing details such as your billing contact, the last four digits of your card, and subscription status.

Automatically collected information. When you interact with the Services, we and our service providers automatically receive and store certain information using cookies and similar technologies, such as your IP address, device and browser type, pages viewed, referring URLs, and the dates and times of access. Much of this information is non-identifying on its own and is used to operate, secure, and analyze the Services.

3. Cookies and Tracking Technologies

A cookie is a small piece of information that our Services place on your browser. Our cookies provide functionality (such as keeping you signed in) and help us analyze usage of the Services. Most browsers include a “help” section explaining how to receive notice of new cookies and how to disable them; however, some features may not function properly if cookies are disabled.

We may allow third-party service providers to use cookies or similar technologies to collect information about your browsing activities over time and across different websites. For example, we use Google Analytics, a web analytics service provided by Google LLC, to help us understand how the Services are used. You can learn more about how Google uses this data at www.google.com/policies/privacy/partners/.

Our Services do not currently respond to “Do Not Track” signals and operate as described in this Policy whether or not such a signal is received. If this changes, we will describe the change here.

4. How We Use Personal Data

We use Personal Data in a manner consistent with this Policy, including to:

• provide, operate, maintain, secure, and improve the Services;
• create and manage accounts, organizations, and subscriptions, and process payments;
• respond to your inquiries and provide customer support;
• monitor and analyze usage, trends, and performance, and develop new features;
• detect, investigate, and prevent fraud, abuse, security incidents, and other harmful or unlawful activity;
• send you administrative and transactional communications, and — where permitted — marketing communications about products and services that may interest you; and
• comply with legal obligations and enforce our agreements.

Where required by applicable law, we rely on one or more of the following legal bases to process Personal Data: performance of a contract with you, your consent, our legitimate interests in operating and improving the Services and securing them against misuse, and compliance with legal obligations.

Every marketing communication we send includes instructions to opt out of future marketing messages. If you wish to opt out or have your details removed from our marketing lists, contact us at privacy@buildpulse.io. If we ever intend to use Personal Data in a manner not consistent with this Policy, we will inform you before or at the time of collection.

5. How We Share Personal Data

We are not in the business of selling your Personal Data, and we do not sell it or share it for cross-context behavioral advertising as those terms are defined under applicable U.S. state privacy laws. We may share Personal Data in the following circumstances:

Service providers and sub-processors. We engage trusted vendors to perform functions on our behalf — such as cloud hosting, payment processing, analytics, email delivery, and customer support. We provide them only the information they need to perform their function and require them to protect it. A current list of sub-processors is available on request.

Related companies. We may share Personal Data with our subsidiaries and affiliates for purposes consistent with this Policy.

Legal requirements and protection. We may disclose Personal Data if required to do so by law, or in the good-faith belief that such action is necessary to (i) comply with a legal obligation or valid legal process, (ii) protect and defend the rights or property of BuildPulse, (iii) act in urgent circumstances to protect the personal safety of users of the Services or the public, or (iv) protect against legal liability.

Business transfers. As we develop our business, we may buy or sell businesses or assets. In the event of a corporate sale, merger, reorganization, financing, dissolution, or similar event, Personal Data may be among the transferred assets.

6. Hosting, Storage, and International Transfers

The Services are operated from the United States and hosted on Amazon Web Services. By using the Services or providing Personal Data, you acknowledge that your Personal Data may be transferred to, stored in, and processed in the United States and other countries where we or our service providers operate, which may have data-protection laws that differ from those in your jurisdiction.

Where we transfer Personal Data of individuals located in the European Economic Area, the United Kingdom, or Switzerland to a country that has not received an adequacy decision, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses (and the UK Addendum, where applicable). You may request a copy of the relevant transfer mechanism by contacting privacy@buildpulse.io.

7. Your Privacy Rights

Depending on where you live, you may have rights regarding your Personal Data. We honor these rights to the extent they apply to you under applicable law.

EEA, UK, and Switzerland (GDPR)

If you are located in the EEA, the UK, or Switzerland, you may have the right to: access the Personal Data we hold about you; request correction or deletion; restrict or object to certain processing; request portability of data you provided to us; and, where processing is based on consent, withdraw that consent at any time without affecting prior processing. You also have the right to lodge a complaint with your local supervisory authority.

United States (California and other states)

If you are a resident of California or another U.S. state with a comprehensive privacy law, you may have the right to: know and access the categories and specific pieces of Personal Data we collect, use, and disclose; request correction or deletion of your Personal Data; and opt out of the “sale” or “sharing” of Personal Data and certain profiling. We do not sell or share Personal Data as those terms are defined under these laws. We will not discriminate against you for exercising any of these rights.

How to exercise your rights

To exercise any of these rights, contact us at privacy@buildpulse.io. We will respond within the time required by applicable law. To protect your privacy, we will take reasonable steps to verify your identity before fulfilling a request, and an authorized agent may submit a request on your behalf with proof of authorization. If your Personal Data was provided to us by a business customer acting as the controller, we may refer your request to that customer and assist them in responding.

8. Data Retention

We retain Personal Data only for as long as necessary to fulfill the purposes for which it was collected, including to provide the Services, comply with our legal, accounting, and reporting obligations, resolve disputes, and enforce our agreements. To determine the appropriate retention period, we consider the amount, nature, and sensitivity of the Personal Data, the potential risk of harm from unauthorized use or disclosure, the purposes for which we process it, whether we can achieve those purposes by other means, and applicable legal requirements. When Personal Data is no longer needed, we delete or de-identify it.

9. Security

We take reasonable and appropriate technical and organizational measures to protect Personal Data from loss, misuse, and unauthorized access, disclosure, alteration, or destruction, including encryption in transit and at rest, least-privilege access controls, and monitoring. You can learn more on our Security page at https://buildpulse.io/security. However, no method of transmission over the Internet or electronic storage is fully secure. In particular, email sent to or from the Services may not be secure, so please use care in deciding what information you send to us by email.

10. Children’s Privacy

The Services are intended for business users and are not directed to children. We do not knowingly collect Personal Data from children under the age of 16. If you are under 16, please do not submit any Personal Data through the Services. If you believe a child under 16 has provided Personal Data to us, please contact us and we will take steps to delete that information.

11. Links to Other Websites

The Services may contain links to websites not operated or controlled by BuildPulse. This Policy does not apply to those third-party sites, and a link does not imply our endorsement or review of them. We encourage you to review the privacy policies of any third-party sites you visit.

12. Changes to This Policy

Our Services and business may change over time, and we may update this Policy accordingly. We will post the updated Policy with a revised “Last updated” date and, where required by law or for material changes, provide additional notice. Please review this Policy periodically. Your continued use of the Services after an update indicates your acceptance of the revised Policy.

13. Contacting Us

To access, update, correct, or delete your Personal Data, or if you have any questions about this Policy or our information practices, please contact us. We will take reasonable steps to respond.

BuildPulse LLC — privacy@buildpulse.io. The data controller for Personal Data collected through the Services is BuildPulse LLC.