Legal and trust
Privacy policy
A plain-language account of the information BuildTraction needs, why it is used, and the choices available to you.
Effective Aug 31, 2026
Who is responsible for your information
Rudhamoy Debbarma, based in India, operates BuildTraction and is responsible for the personal informations described in this policy. Contact rudhamoydebbarma@gmail.com for privacy questions or requests.
Information we collect
- Account information: your authentication identifier, name, email address, profile image, role, account status, and account dates.
- Product information: product names, URLs, descriptions, images, category, stage, target audiences, problems solved, and visibility choices.
- Unfinished product drafts: when you analyze a website before signing up, we temporarily save AI-suggested product details, your corrections, and any requested first-move preview so you can return later. Analyzing a website does not publish a product.
- Website-analysis funnel: a random first-party browser session ID, the domain you analyze, and timestamps for steps such as analysis, first-move preview, continuing to signup, and product creation. We link that session to your account only if you sign up. These records are removed after 30 days.
- Marketplace activity: bounties, questions, participation reservations, product visits, feedback answers, reviews, rejection reasons, support activity, and boosts.
- Credit, subscription, and payment records: balances, reservations, rewards, purchases, plan and subscription status, billing periods, payment and checkout identifiers, refunds, boost spending, and administrative adjustments. BuildTraction does not receive or store your full card number.
- Support information: contact messages, abuse reports, privacy requests, account-data requests, and related URLs you provide.
- Technical information: analytics events, timestamps, page paths, referrer hosts, browser or request information, error diagnostics, and hashed identifiers used for aggregate traffic measurement, rate limiting, and abuse prevention. Raw IP addresses are not stored for product traffic analytics.
How we use information
- Create and secure accounts.
- Operate public product pages, bounties, feedback, reviews, credits, support, and boosts.
- Reserve capacity and prevent duplicate or abusive transactions.
- Measure product funnels and improve usability.
- When requested, use AI to suggest product and bounty text, recommend growth actions, and summarize approved feedback for the bounty creator. Creators review drafts before publishing and retain control of feedback decisions.
- Investigate reports, enforce rules, and protect users.
- Diagnose errors and maintain service reliability.
- Respond to support, correction, export, and deletion requests.
- Comply with legal obligations and resolve disputes.
Legal grounds
Depending on where you live, we process information to provide the service you request, based on your consent, to comply with law, and for legitimate interests such as security, fraud prevention, service improvement, and protecting the integrity of the credit system. You may withdraw consent where consent is the applicable basis, without affecting earlier lawful processing.
Public information
Listed products, public product details, founder display names, product support signals, and active bounty details may be visible without signing in. Feedback answers and review decisions are shown only in the workflows intended for the participant, creator, and authorized administrators unless a user separately chooses to publish them.
Do not place personal, confidential, or sensitive information in public descriptions or feedback fields.
Service providers and sharing
We disclose information only as needed to operate the service, protect users, complete a requested action, or comply with law. Provider categories include:
- Clerk for authentication and account sessions.
- Cloud hosting and PostgreSQL database providers.
- Vercel Web Analytics for aggregate page-visit statistics, referral sources, approximate location, and browser and device information. We remove query strings from tracked page URLs and exclude admin and sign-in pages.
- Cloudinary for storing and serving product logos you upload. Uploaded logos are public images.
- OpenAI for AI-assisted product analysis, traction recommendations, bounty drafts, and on-demand summaries of approved feedback. Relevant product context or approved feedback answers may be sent for these requests; we do not send participant account names with feedback-summary requests.
- Sentry for error monitoring when monitoring is enabled.
- Dodo Payments for hosted checkout, payment and subscription processing, customer billing portals, fraud prevention, tax handling, invoices, and refunds when you buy credits or subscribe to Pro.
- Professional advisers, authorities, or counterparties when legally required or necessary to protect rights and safety.
We do not sell personal information. We do not use personal information for cross-context behavioral advertising.
Cookies and local storage
BuildTraction uses authentication and security technologies, plus a first-party random session ID for the website-analysis funnel. Read the Cookie notice for more detail. If we later add advertising or cross-site behavioral tracking, we will update this policy and provide consent controls where required.
Retention
We keep information for as long as reasonably necessary for the purpose described in this policy. Account and content information generally remains while your account is active. Credit-ledger, moderation, security, and transaction-integrity records may be retained after deletion when needed to prevent fraud, maintain accurate balances, resolve disputes, or comply with law. First-party product traffic events are automatically removed after 90 days. Other error and analytics records are retained only as long as they remain useful for security and product improvement.
Unfinished private product drafts expire after 30 days and are removed sooner when you start over or finish creating the product. Basic analysis of public website content may be cached separately for up to 7 days to avoid repeating the same AI request.
International processing
Our service providers may process information in countries other than the one where you live. Where required, we use contractual or other recognized safeguards for those transfers. Contact us if you need more information about the providers relevant to your account.
Your choices and rights
Depending on your location, you may have the right to:
- Access or receive a copy of your personal information.
- Correct inaccurate information.
- Request deletion.
- Object to or restrict certain processing.
- Withdraw consent where processing relies on consent.
- Complain to the relevant data-protection authority.
Signed-in users can start export, correction, and deletion requests in account settings. You can also use the privacy contact form. We may need to verify your identity before completing a request.
Security
We use authentication, access controls, request validation, transaction safeguards, rate limiting, monitoring, and hashed abuse-prevention identifiers. No online service can guarantee absolute security, so use a secure sign-in method and report suspicious activity promptly.
Children
BuildTraction is intended for people aged 18 and older. We do not knowingly permit younger users to create accounts. Contact us if you believe a younger person has provided personal information.
Changes and contact
We may update this policy as the service, providers, or legal requirements change. We will update the effective date and provide additional notice for material changes. Contact rudhamoydebbarma@gmail.com or use our privacy form with questions.
