Privacy Policy

Last updated: March 22, 2026

1. Introduction

BuildLink AI Inc. ("Company", "we", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use BuildLink AI ("Service"), in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and the Alberta Personal Information Protection Act (PIPA).

2. Information We Collect

2.1 Information You Provide

  • Account information: name, email address, password, company name, job title
  • Company profile: company type, service area, region, team size, logo
  • Project data: project details, bid information, contractor records, financial data, documents
  • Communications: messages sent through the platform, support requests

2.2 Information Collected Automatically

  • Usage data: pages visited, features used, actions taken within the platform
  • Device information: browser type, operating system, screen resolution
  • Log data: IP address, access timestamps, referring URLs
  • AI interaction data: queries submitted to AI features and generated responses

3. How We Use Your Information

We use your personal information to:

  • Provide, maintain, and improve the Service
  • Process your registration and manage your account
  • Power AI features (scope analysis, bid estimation, recommendations)
  • Personalize your experience through AI agent memory and learning
  • Send transactional emails (account verification, password resets, activity notifications)
  • Analyze usage patterns to improve the platform
  • Ensure security and prevent fraud
  • Comply with legal obligations

4. AI Features and Your Data

BuildLink AI uses artificial intelligence to provide personalized recommendations and analysis. This includes:

  • Agent memory: The platform stores your preferences, habits, and interaction patterns to provide increasingly personalized AI assistance. Each AI agent operates within a specific module scope.
  • Confidence scoring: AI memories carry a confidence score. Only high-confidence observations (0.7+) are used proactively.
  • Your control: You can view, correct, and delete any AI memories associated with your account.

We do not use your individual project data to train AI models that serve other customers. Aggregated, anonymized data may be used to improve the overall platform experience.

5. Data Sharing and Disclosure

We do not sell your personal information. We may share your data with:

  • Service providers: third-party services that help us operate the platform (hosting, email delivery, payment processing, AI model providers). These providers are bound by data protection agreements.
  • Within your organization: team members in your organization can access shared project data according to their role permissions.
  • Legal requirements: when required by law, court order, or government request.
  • Business transfers: in connection with a merger, acquisition, or sale of assets, with advance notice to affected users.

6. Data Storage and Security

Your data is stored on servers provided by Supabase (cloud infrastructure) and Vercel (application hosting). Data may be processed in Canada and the United States.

We implement industry-standard security measures including:

  • Encryption in transit (TLS/HTTPS) and at rest
  • Row-level security (RLS) at the database level
  • Role-based access controls within organizations
  • Regular security reviews and updates

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. If you close your account, we will delete or anonymize your personal information within 90 days, except where retention is required by law.

AI agent memories associated with your account are deleted when you delete your account or when you manually clear them through the platform.

8. Your Rights Under PIPEDA

As a user, you have the right to:

  • Access: Request a copy of the personal information we hold about you
  • Correction: Request correction of inaccurate or incomplete information
  • Deletion: Request deletion of your personal information (Right to be Forgotten)
  • Withdraw consent: Withdraw your consent for certain data processing activities
  • Data portability: Request your data in a structured, machine-readable format
  • AI memory control: View, correct, or delete any AI-generated memories about you

To exercise these rights, contact us at privacy@buildlink.ai. We will respond within 30 days.

9. Cookies and Tracking

We use essential cookies for authentication and session management. We use analytics tools to understand how the Service is used. We do not use advertising cookies or sell data to advertisers.

10. Children's Privacy

The Service is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If we learn that we have collected information from a child, we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or in-app notice at least 30 days before changes take effect. The "Last updated" date at the top indicates the most recent revision.

12. Contact Us

For privacy questions or to exercise your rights, contact our Privacy Officer:

If you are not satisfied with our response, you may file a complaint with the Office of the Privacy Commissioner of Canada (OPC) or the Office of the Information and Privacy Commissioner of Alberta (OIPC).