PRIVACY
Privacy, in plain English.
We collect the minimum information needed to run a source-linked research workspace.
Who is responsible
Buildthis.now, operating in British Columbia, Canada, is responsible for the personal information described here. Contact our privacy contact at smit@smitt.ca for access, correction, deletion, consent withdrawal, or a privacy complaint.
Account and workspace data
When you sign in, Clerk provides a site-specific account identifier, email address, and optionally a display name. We store the identifier with saved ideas, validation notes, alert and report preferences, plan status, and feedback you submit.
Usage analytics
PostHog helps us understand anonymous page visits and product actions. We do not send your email address, feedback text, or research notes to PostHog. Analytics use in-memory browser state, and session replay is disabled.
Public research data
Editorial research may store a public source URL, original publication date, source name, minimal attributed excerpt, and reviewer analysis. Signed-in readers can see a short request excerpt, its original source link, and the earliest verified source date. The homepage also shows attributed public post previews, including author names, handles, avatars, and original attached images. A reviewed Reddit text snapshot is stored with its source and review date; X and Bluesky post data is retrieved on our server. Images may load from X’s and Bluesky’s image services, which receive normal connection information such as an IP address and browser details. We do not intentionally collect private, gated, or sensitive personal data for opportunity cards.
Service providers
Vercel hosts the application, Neon hosts the database, and Clerk handles authentication. Stripe processes paid subscriptions; payment card details do not pass through our servers. Resend delivers requested reports, alerts, and support notifications. PostHog processes anonymous usage analytics. Official public feeds and embeds are used for keyless source intake; authenticated source APIs are used only when configured under their applicable terms.
How we use and retain data
We use data to provide the workspace, deliver requested messages, administer subscriptions, prevent misuse, address corrections and removals, and improve research quality. We do not sell personal information. Workspace data is retained while the account is active or as needed for legitimate legal and operational purposes.
Your choices
Account settings let you download your account data, pause reports, manage billing, and delete workspace data. Account deletion removes saves, validation notes, alerts, report preferences, and the local subscription record; submitted feedback is anonymized so the review history remains auditable. You may also submit an access, correction, removal, or privacy request.
International processing and security
Providers may process data in countries other than yours. We use authenticated access, server-side authorization, signed billing webhooks, least-privilege source credentials, and encrypted provider connections, but no online service can promise absolute security.
Contact
Use the privacy request form. You can also email smit@smitt.ca. If a privacy concern remains unresolved, you may contact the Office of the Information and Privacy Commissioner for British Columbia.
Effective: November 3, 2026.