Privacy Policy

Updated October 15, 2026

Girder AI, a Delaware company, operates BuilderDo and is responsible for the personal information described in this notice. “BuilderDo,” “we” and “us” mean Girder AI. This notice describes information handled through our homeowner project, contractor profile, account and matching services. Contact the BuilderDo team at info@BuilderDo.com for privacy questions and requests. It does not cover an independent contractor’s separate records or a third-party website’s own practices.

1. Information we collect

• Homeowner projects: name, email, phone, postal code, descriptions, photos, availability, time zone, optional project address, follow-up answers, preferences and project status.
• Accounts and activity: account identifier, authentication information handled by our sign-in provider, linked projects, introductions, reviews, support messages, consent records and notification delivery/opt-out records.
• Contractor information: business and representative details, contact information, trade, service area, experience, license information, logos, portfolio images, submitted credential documents and administrative verification records.
• Technical information: our hosting, authentication and automation providers may process IP addresses, request and device information, cookies, security events and operational logs to run and protect the service.
• Other sources: business listings and reviews from services such as Google Places; contractor responses; and information entered by the BuilderDo team during project coordination or credential review.

Photos and free-text answers can unintentionally contain faces, addresses, documents or other personal information. Remove details not needed for your project. Do not submit passwords, entry codes, payment-card details, Social Security numbers or other unnecessary sensitive records.

2. Why we use information

We use information to save and manage projects, analyze project needs, ask follow-up questions, search and rank potential professionals, coordinate requested introductions, operate accounts and public profiles, send project updates, review credentials and feedback, respond to requests, prevent misuse and troubleshoot the service. We also use operational records to understand service performance and meet applicable legal obligations. Submission does not grant permission to publicly advertise a private homeowner project.

3. AI analysis and automation

Optional AI preview: before submitting a project, you can ask for a preliminary brief. When you select Create my AI brief, BuilderDo sends your description and small copies of up to three selected photos to OpenAI. The preview endpoint does not save the photos, description or generated brief in our project database or photo storage, create a project, or contact professionals. Your browser holds the form during the visit. We retain short-lived request counters using a hashed network identifier to limit misuse. OpenAI may retain data under its applicable provider policies; requesting that the API not store a response does not guarantee immediate deletion from all provider systems. Selecting Submit my project saves the information you submit under the retention practices below.

n8n coordinates project workflows and may process project and contact information needed for those workflows. The OpenAI API receives project descriptions, photos, service location, availability and saved estimate answers to classify the trade and generate follow-up questions. The current analysis request does not separately include your name, phone, email or structured street-address field. However, information you include in text or photos may still be sent; those contents are not automatically guaranteed to be anonymized.

AI can be inaccurate. Its suggestions assist project handling and do not guarantee a quote, diagnosis, contractor qualification or outcome. You can correct project information or ask the team to review a suggestion. Provider processing and retention may continue under their applicable terms and our service arrangements; an API setting or private-link expiry is not a promise that every provider copy is immediately deleted.

4. Who receives information

• Service providers: website hosting and Cloudflare database/object storage; Supabase for customer and contractor authentication; n8n for automation; OpenAI for analysis; and email/SMS providers when configured. These services receive information needed for their functions. Administrator sign-in uses ChatGPT authentication.
• Business search providers: Google Places receives location and trade searches. The search request does not require homeowner name, phone or email. Google’s own processing is described in its Privacy Policy.
• Approved project inquiries: when you approve outreach, the chosen businesses receive a private, time-limited link to the description, selected photos, postal code and availability you reviewed. Your structured street address, account access, phone and email are excluded from that inquiry; information inside text and photos is shared as shown. We record recipient approval, replies, communication preferences, delivery status and opt-outs. Businesses may provide their preferred contact details to share with you. Public business websites may be checked for published contact information; we retain the source of a discovered address.
• Professionals: when you request an introduction, the selected professional may receive your contact information, project description, estimate answers and requested callback details. Professionals handle information they receive under their own responsibilities. Tell us if additional information should not be shared.
• Public visitors: approved business profiles, public contact information, logos, portfolio images and published reviews are public and may be indexed by search engines. Homeowner project pages are accessed through private links or authorized accounts, rather than published as public listings.
• Other necessary disclosures: where reasonably necessary to comply with law or valid legal process, protect rights or safety, investigate misuse, or carry out a business transfer subject to applicable privacy obligations.

We do not offer homeowner contact lists for sale. The current website does not implement third-party advertising pixels or cross-site targeted-advertising tracking. Project introductions requested by you and service-provider processing are described above. If our practices change, we will update this notice and provide any required choices before introducing those uses.

5. Public profiles, documents and reviews

Contractors choose the business details and portfolio content submitted for publication. License/insurance uploads and internal verification evidence are restricted to the contractor and authorized administrative access, rather than displayed as public portfolio content. A badge may display the type, scope and date of a check. A check of one individual does not cover every worker.

Reviews may be submitted by homeowners or entered by the BuilderDo team, and external business ratings may come from their identified source. Public review content can identify its author through the displayed name or the information the author includes. Do not include private contact details in a review. Report sensitive information or inaccuracies to us.

6. Cookies, accounts and private links

We use cookies and browser storage for authentication, sessions and project access. Supabase handles Google sign-in or email/password authentication; BuilderDo does not need your Google password. Disabling these technologies may prevent sign-in or private-project access. Our current site does not use advertising cookies; it does not change its essential operation in response to a Do Not Track signal. You may contact us about any privacy preference, including an opt-out signal.

A private project link normally expires after 30 days, but anyone who has a valid link may be able to access the project. Keep it confidential and contact us to revoke or replace a disclosed link. Account-linked access may continue beyond that period. Link expiration does not delete the project.

7. Communications and your choices

Project-related emails may include AI questions, private project links and introduction updates. Optional account email preferences are available in My Projects; essential service or security messages may still be needed. Contact us to stop project follow-up emails or close a request. Questions sent by email or text can be answered through the private project page; inbound replies are not guaranteed to be processed.

Text updates are optional, depend on provider configuration and require the applicable opt-in. Reply STOP to opt out when delivery is active, or email us for help. We keep suppression records to respect opt-outs. Message frequency varies; message and data rates may apply. Project submission or text opt-in does not authorize unrelated marketing or automated marketing calls. Contractor outreach preferences are managed separately in the contractor portal.

8. Retention and security

Projects, photos, follow-up answers, profiles and related records are retained while needed to operate the requested service, maintain accounts, resolve issues and meet legal obligations. The service does not currently automatically delete projects when a link expires or a project closes. You may request deletion. Retention depends on the record’s purpose, account/project status, legal requirements and dispute or fraud-prevention needs; limited consent, suppression, audit or legal records may need to remain. Provider logs and backups may follow separate retention cycles.

We use access controls and authenticated or private-link access for restricted records. No system or transmission is guaranteed completely secure. Please report suspected unauthorized access promptly; we will address incidents and provide notices as applicable law requires. Providers may process information in the United States or other locations where they operate.

9. Access, correction and privacy rights

Email info@BuilderDo.com to request access, correction, a copy, deletion or account closure, or to raise a privacy complaint. Include enough information to identify your account or project; do not email identity documents unless we arrange a suitable verification method. We may verify your identity or an authorized agent’s authority before releasing or changing private records.

Depending on where you live and which laws apply to BuilderDo, you may also have rights to know about processing, data portability, opt out of sale/sharing or targeted advertising, limit certain sensitive-information uses, or appeal a decision. California privacy rights, where applicable, are not waived by using BuilderDo. We will handle requests and appeals under applicable requirements and will not unlawfully discriminate against someone for exercising their rights. To appeal a response, reply to it with “Privacy appeal”; you may also contact your applicable privacy regulator. Some requests have lawful exceptions, which we will explain where required.

10. Age limits and changes

BuilderDo is intended for adults 18 and older. We do not knowingly seek personal information from children under 13. If a child has submitted information, contact us so we can review and address it. We will update the date on this policy when practices change and provide additional notice or obtain consent when required. Contact us before providing information if you have questions about its use.

Terms of Service · Return to BuilderDo