Privacy Policy

1. Who We Are and What This Policy Covers

BuildVault is a scale-modeling product and promotional website owned and operated by BLG Studios LLC ("we," "us," or "our"). This Privacy Policy explains how we handle information when you visit getbuildvault.com, submit a website support inquiry, contact us by email, or use a BuildVault Android or iOS application made available to authorized testers.

The promotional website and mobile application have different release schedules. The public website describes BuildVault and provides support contact options; it does not offer BuildVault account registration or paid subscriptions. The mobile application is still in development and limited testing, not yet generally available to the public. The application-related sections below describe practices where testing features are actually used; they do not imply that every listed feature is publicly available.

Our initial public mobile-application launch is intended for the United States. The website may be accessible elsewhere. We may expand availability later and review our privacy practices before doing so.

Questions about this policy or your information can be sent to support@getbuildvault.com.

2. Information We Handle

Account and authentication information (mobile-app testing). If you register for an account in an available test version of the mobile application, we collect a display name, email address, and password. Supabase Auth handles passwords and authentication; passwords are not stored in BuildVault's application profile tables. We also process account identifiers, account status, and authentication/session information needed to keep you signed in and secure your account. Viewing the promotional website does not create a BuildVault app account.

Modeling records (mobile-app testing). Information you choose to enter through available app features may include model-build titles and descriptions, dates, progress, Stash items and quantities, wishlist entries, kits, product identifiers, bench-session times and notes, recipes, and other hobby-related details. Feature availability varies during testing. Free-text fields may contain personal information if you include it.

Photographs (mobile-app testing). If you choose to add photos to a build using an available app feature, we process and store the selected image and associated record information. Uploaded photographs may retain embedded metadata, potentially including location, device, or date information. We do not currently guarantee removal of that metadata.

Support inquiries. Our website's support form asks for your name, email address, inquiry category, and message. We use those details to deliver and respond to your inquiry and may send an acknowledgment to your email address. If you contact us by email, we also process the correspondence you send.

Technical and security information. Our website's infrastructure may process your IP address, request and browser information, a Turnstile verification response, and a submission identifier to validate requests, prevent abuse, and operate the service. Our rate limiter derives pseudonymous HMAC-based identifiers from network and recipient information. Those identifiers are not the same as anonymous data.

Information stored on your device. The application keeps authentication-session information and certain preferences or temporary feature state on your device. On supported mobile platforms, authentication sessions use secure device storage; the app's web runtime, where used, may use local browser storage.

3. Why We Use Information

We use information to create and secure accounts; authenticate and recover access; save and display modeling records; store and retrieve selected photographs; answer support requests; deliver required service-related email; enforce access controls; detect or limit misuse; troubleshoot service issues; and comply with applicable legal obligations.

We do not currently use BuildVault user information for behavioral advertising or operate advertising-network integrations in the reviewed application and website. We do not currently operate a dedicated behavioral analytics SDK in those products. If these practices change, we will review and update our disclosures before introducing the change.

4. Service Providers and Disclosures

We use service providers to operate BuildVault:

• Supabase supports account authentication, databases, storage, and application backend functions.
• Cloudflare, including Turnstile and Durable Objects, supports website delivery, bot checks, network security, and support-form rate limiting.
• Resend delivers supported authentication and website transactional messages, including support notifications and acknowledgments.
• Google Workspace hosts the support mailbox used to receive and respond to customer inquiries.

These providers process information needed for their respective services under their applicable terms and practices. We may disclose information when required by law or as reasonably necessary to protect our rights, users, and services.

BLG Studios LLC does not sell personal information or share it for cross-context behavioral advertising as part of BuildVault's current business practices. If our practices change, we will review and update the relevant disclosures and requirements.

5. Modeling Content and Photo Privacy

The current personal modeling experience is private by default; BuildVault does not automatically publish your records or photographs to a public gallery. Access is controlled using authentication, authorization rules, and private file storage. Time-limited signed links may be used to display stored photographs.

Only select and upload images you want BuildVault to process. Consider removing sensitive image details or metadata before uploading. Future optional sharing or collaboration features would require updated disclosures and appropriate product controls before they are offered.

6. Website Form Protection and Temporary Security Records

When you submit the website support form, Cloudflare Turnstile helps verify the request. The website Worker validates the request, obtains a coordinated rate-limit reservation, and then uses Resend to deliver the message to the BuildVault support inbox and, when applicable, an acknowledgment to you.

The Durable Object used for rate limiting stores a submission identifier, a keyed fingerprint of the validated submission, HMAC-derived visitor or recipient identifiers, category-of-limit information, and timestamps. It does not store your raw IP address, raw email address, name, message body, or Turnstile token in its reservation tables. Your actual support message is transmitted to Resend and stored in the support mailbox so it can be handled.

The visitor limit uses a rolling 10-minute window; recipient and global limits and submission reservations use periods of up to 24 hours. Automatic cleanup and request-time cleanup remove expired limiter records. Physical removal may take longer than these logical windows during infrastructure failures or other interruptions. Other providers may retain separate security or delivery records under their own applicable policies.

7. Device Permissions, Browser Storage, and Cookies

BuildVault requests access to selected photographs when you use photo features. Its current core experience does not require continuous device GPS tracking. Information typed into a location-related note or embedded in a photograph may nevertheless describe a location.

The app may retain authentication sessions, appearance settings, and temporary feature state locally. The promotional website does not currently use advertising cookies or a dedicated behavioral analytics service. Cloudflare and other service providers may use browser or network technologies that are needed to protect and operate the website. We will revisit this section if new website tracking or consent-requiring technologies are introduced.

8. Emails and Support Correspondence

We use email for account verification, password recovery, support inquiries, and related service communications. Website form submissions may trigger an acknowledgment message. We do not currently send marketing email through the reviewed BuildVault application or website integration.

Support email and delivery records may remain with Google Workspace and Resend under applicable operational and provider retention practices. We do not claim a universal fixed retention period for correspondence or provider logs.

9. How Long We Keep Information

Account information and modeling records generally remain associated with an account while the service needs them. Some in-app deletion actions soft-delete records: they disappear from ordinary views but are not necessarily erased immediately from databases, logs, backups, or other systems. Selected photo removal attempts to delete the stored image, but a storage-operation failure may delay that removal.

Temporary website limiter data has the logical expiration and cleanup behavior described above. Authentication, support correspondence, operational logs, and backup retention vary with operational needs, vendor policies, and applicable legal obligations. We do not promise that all data is permanently removed immediately after a user-visible deletion action.

10. Account Access, Correction, and Deletion

In available test versions of the mobile application, you can access or update certain modeling records and remove supported individual items. A complete self-service account-deletion feature is not yet operational in the currently assessed mobile app. Removing an individual record is not the same as deleting an account and all associated data. The promotional website does not offer app account registration or an account-deletion portal.

If you have questions about personal information, wish to request access or correction, or need information about account or data deletion, email support@getbuildvault.com. We will review requests, explain available steps or limitations, and respond as applicable law requires. We will not represent a request as completed until the relevant action has been verified.

11. Age Eligibility and Younger Users

BuildVault is intended for people 13 years of age or older. Children under 13 should not register for an account or submit personal information through the service. We do not knowingly seek personal information from children under 13.

If you believe someone under 13 has submitted personal information, contact support@getbuildvault.com so we can review the situation and take steps required by applicable law. We encourage teenagers to avoid placing unnecessary personal information in notes, photographs, and support messages.

The current mobile-app testing signup interface does not independently verify age. We will review applicable age-related requirements and practices before wider distribution of the application.

12. Security

We use measures intended to help protect information, including authentication, access controls, private photo storage, secure handling of operational secrets, and website form abuse protection. No method of transmission or storage is completely secure. We review safeguards as the product develops.

13. Your Privacy Rights

Depending on applicable law and circumstances, you may have rights to access, correct, or request deletion of personal information. Send inquiries to support@getbuildvault.com. We may need to verify that you are authorized to make a request before disclosing or changing account-related information. We will evaluate requests under applicable law and explain relevant limits or permitted retention.

14. Processing Locations and Future Changes

Our initial intended market is the United States. Information may be processed by us or our service providers in the United States or other locations where they operate. If we introduce additional features, regions, providers, or materially different information uses, we will review the corresponding disclosures and any applicable notice or consent requirements.

We may update this policy from time to time. Material changes will be communicated as required by law, and the published policy will state its effective date.

15. Contact

BuildVault Privacy & Support
BLG Studios LLC
Email: support@getbuildvault.com
Website: getbuildvault.com