Privacy Policy
How Build intends to collect, use and protect personal information.
Review draft · 17 October 2026 · Effective date pending sign-off
1. Operator and contact
Build AI Marketing OS is operated by BUILD 2DAY (PTY) LTD, registration number 2026/469720/07, a South African private company. Privacy enquiries can be sent to privacy@build2day.org. Customer-support enquiries can be sent to support@build2day.org.
2. Information handled by Build
Depending on the features used, Build handles account and workspace information, business and brand information, uploaded audience contact records and source/permission information, marketing content and review decisions, campaign configuration, and identifiers and credentials for authorised third-party connections. Its audience import supports CSV and spreadsheet data. This is not an exhaustive production data inventory.
3. Purposes and responsibilities
Build uses information to provide account access, maintain workspaces, manage customer-directed marketing operations, generate and review proposed content, connect authorised platforms, keep operational records and support security and legal obligations. A customer supplying audience records is responsible for establishing an appropriate lawful basis, privacy notices and required permissions. The allocation of responsible-party/operator roles must be confirmed for each customer arrangement.
4. Infrastructure and connected services
The reviewed application integrates with Supabase, Meta services and its Render-hosted environment. Data may be transmitted to a connected service when a user authorises relevant operations. Connected platforms operate under their own terms. Supplier agreements, hosting regions, cross-border transfer safeguards and any further service providers require a final operational check.
5. Security, cookies and retention
The reviewed application includes authenticated sessions, workspace permission checks and functionality for protected connection credentials. Session and authentication cookies are used. No claim is made here that these measures eliminate all risk. Our initial approved approach is to keep customer information needed to provide services while an account remains active, subject to applicable law and customer instructions. Following cancellation, we will review account and audience data for deletion and preserve only information where there is an applicable lawful reason to retain it. Backups may retain information temporarily until their lifecycle expires. Exact retention periods, backup schedules, third-party processor handling and incident-response arrangements still need operational verification before this policy is final.
6. Requests and rights
You may ask about access, correction, objection or deletion, where applicable, at privacy@build2day.org. We aim to acknowledge privacy and deletion requests within two business days. We may verify your identity or authority and coordinate with the customer organisation responsible for relevant audience information. We will handle valid requests as promptly as reasonably practicable in line with applicable law and explain any lawful reasons for retention.
7. Changes
A final effective date will be inserted after approval. Changes to this policy will be published on this page. This draft is not a substitute for a verified production data inventory or professional South African privacy-law review.