Builder.io, Inc. and its subsidiaries (“Builder”, “we”, or “us”) know that you value your privacy. Builder provides a visual content management system (CMS) to its business customers. This privacy policy covers the personal information that we may process:

• About individuals who visit www.builder.io as well as other websites where this privacy policy is posted or linked (collectively, the “Sites”),
• About our business customers’ employees and representatives who use our software-as-a-service products (the “Builder Services”), and
• About our business customers’ end users when they visit the business customers’ websites and mobile apps that use the Builder Services.

This policy does not apply to any third party sites you may find or access through our website or the Builder Services. This policy also does not apply to the data practices of our business customers. You should consult the relevant privacy policies of such third parties and our business customers to find out more about their privacy practices and your related choices.

USER CONSENT

By accessing or using our Sites and the Builder Services, you represent that you are at least 18 years old and you consent to our data practices as described in this privacy policy.

CHANGES TO THIS POLICY

From time-to-time, we may change this privacy policy to accommodate changes to our products, services and companies, new technologies or industry practices, updated regulatory requirements, or for other purposes. We will provide notice to you by posting a new privacy policy on this page. Where required by law, we will also obtain your consent.

We recommend that you review this privacy policy periodically for any changes. Changes to this privacy policy are effective when they are posted on this page. Your continued use of or access to the Builder Services or our Sites constitutes your consent to any updates, except where explicit consent is required by law.

PERSONAL INFORMATION

References to “personal information” in this privacy policy mean information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, to an individual or household.

The term “personal information” does not include information that is not considered personal information under applicable privacy or data protection laws (e.g., deidentified data, certain aggregated data, certain public data, certain data protected under sector-specific privacy laws).

1. Information We Collect and How We Collect It

We collect the following categories of personal information:

• Identifiers such as first and last name, username and password to the Builder Services, email address, contact information including phone number, country of residence, IP address, cookie identifiers, mobile identifiers, and randomly generated identifiers for end users of our business customers’ websites and mobile applications that use our Builder Services;
• Commercial information that you provide when purchasing the Builder Services from us, whether on our Sites or elsewhere. This information may include the information listed above as well as payment information;
• Internet or other electronic network activity information, including usage, viewing, metrics, mouse movements, clicks, page visits, text entered, device and technical data, other web activities that may be collected when you visit or use our Sites or the Builder Service, when you access our business customers’ sites’ pages that use our Builder Services, when you open or reply to emails we send, or when you interact with our advertisements;
• Location information provided by a mobile device interacting with one of our Sites or when associated with your IP address;
• Audio and electronic email for business calls, meetings, and communications;
• Professional and employment-related information of our business customers’ and partners’ employees and representatives as part of the business relationship; and
• Sensitive personal information such as location and user account information which may be deemed sensitive in certain states or countries.

The categories of sources of the personal information include the following:

• Information provided by you, such as when you contact us, when you register and create an account on the Sites or Builder Services, when you sign up to receive communications or materials, when you apply for a job, when you submit information in blogs or forums on the Sites, when you participate in surveys, when you submit a support ticket, or when you otherwise submit a form to us;
• Information provided by our business customers and partners; and
• Information collected automatically by our Sites or Builders Services.

2. How We Use Information

We may use the person information collected to:

• process your orders and requests and respond to your questions and concerns; for example, if you inquire about our Sites or Builder Services or submit an application to Builder, we may use your data to respond to and process these requests;
• provide you with products and services, and personalize your experience; for example, we may use information on your prior activities or job function to tailor the features and content on the Builder Services or Sites, or we may use technical data to remember your preferences;
• perform our obligations under our contracts with our business customers;
• communicate with you about your account or transactions, and provide you with product-related communications, such as information about new features and policy updates;
• operate, maintain, analyze, develop, update and improve our Sites, the Builder Service, and other products and services we offer. For example, we may administer and track users’ activities on our Sites and the Builder Service to determine how to improve our content and features, or we may analyze trends and gather demographic information about our user base to better tailor our marketing efforts;
• detect, investigate and prevent activities that may violate our policies, or applicable laws (such as fraud detection and prevention) or that may threaten the security, integrity or availability of our or another party’s products, systems and services;
• protect our operations, comply with law or legal process, respond to legal requirements, pursue our remedies, and exercise or defend legal claims;
• send you news, updates, promotions, product information, event announcements, and other marketing communications (please see the section entitled “Your Controls and Rights” for an explanation of your choices relating to these communications);
• evaluate an acquisition or other corporate transaction; and
• act pursuant to your consent for a specific purpose not listed in this policy. For example, with your consent, we may post your testimonial along with your name on our Sites. If you wish to update or delete your testimonial, please contact us as explained below.

3. Disclosing Information with Others

We disclose your personal information to the following categories of third parties:

• Affiliated companies, for example our subsidiaries.
• Services providers. For example, we may use an outside platform to host portions of our Sites or to provide certain features on the Builder Service, we may use a credit card processing company to bill you for services you purchase, we may use an email provider to send you emails on our behalf, we may use a third party to help manage support inquiries, and we may use a third party to help monitor the performance of our Site. Unless otherwise expressly noted, when acting as Builder’s service providers, these services providers are prohibited from using the personal information we have disclosed to them for purposes other than those requested by us or required or permitted by law.
• Partners, for example, when we cooperate with other companies to offer joint products and services to you in connection with the Builder Services, or when such partners sponsor or participate in our events and conferences.
• Other third parties for legal or security purposes to enforce our terms, agreements, policies or rules, to help protect the security, integrity and availability of our or another party’s products, systems and services; to exercise or protect the rights, property (including intellectual property), or safety of Builder, our users, or others; to comply with legal requirements; or in other cases if we believe in good faith that disclosure is required by law (including in response to a lawful subpoena or other law enforcement request).
• Other third parties at your direction as follows:
• You may elect to disclose your personal information to third party partners and providers listed on our Sites, so they can send you information, offers and promotions about their products and services;
• You may choose to disclose your personal information to third parties or their sites or platforms, such as when you disclose one of our blog posts to your social media feed;
• You may publish information publicly on our Site or the Builder Services; or
• You may use third-party features on our Site or the Builder Service, such as commenting features run by third-parties.

Please note that once personal information is disclosed to another company, the information received by the other company becomes subject to its privacy policies and practices.

• Buyers or other third parties. We may disclose your information to a third party in connection with a sale, divesture, or transfer of our company (including any equity in the company) or any combination of its products, services, assets, affiliates, and/or businesses. Your personal information (such as customer names and email addresses, and user information related to the Builder Service) may be among the items sold or otherwise acquired in these types of transactions. We may also sell, assign or otherwise transfer such information in the course of corporate divestitures, mergers, acquisitions, bankruptcies, dissolutions, reorganizations, liquidations, similar transactions or proceedings involving all or a portion of the company. You will be notified via email and/or a prominent notice on our Site of any change in ownership or uses of your personal information, as well as any choices you may have regarding your personal information.

4. Cookies

We use cookies in connection with our Sites and our Builder Services. A cookie is a small data file that is stored on your computer’s or mobile device’s memory. Some cookies help you navigate our Sites or Builder Services, including setting a cookie to remember your login details when you log in to our user interface. Cookies also collect information about how you use our Sites and Builder Services, which allows us to monitor website performance and identify ways to make the website easier to use and more effective.

We and our service providers may also use “pixel tags,” “web beacons”, “clear GIFs” or similar means to analyze usage patterns of users. These technologies are electronic images that are placed on a web page or in a mobile application and may be associated with cookies on your hard drive. Some of these technologies are used to drop cookies on users’ devices.

We use a pixel on our business customers’ websites to count page views of users who have visited their websites and applications that use the Builder Services. We count page views in order to determine the fees owed by our business customers.

Managing Cookie Preferences

For more information about cookies, including how to see what cookies have been set on your device and how to delete them, visit www.allaboutcookies.org. In addition, see Your Controls and Rights for opt out procedures.

5. Your Controls and Rights

We provide you with certain controls regarding the use of your personal information, which may include:

• Correcting and Updating Account Information. By logging into your account on our Site and/or the Builder Service, you may be able to change certain account information. Your account settings may also permit you to opt-out of some types of notification messages. To protect your privacy and security, we require your username and password in order to verify your identity before granting you account access or making changes.
• Changing your choices for marketing communications. You can opt-out of the marketing communications we send by clicking the unsubscribe link in the applicable email or by updating your user settings. Please note that, even after you opt out from receiving marketing messages from us, you may continue to receive administrative, transactional, and product-related messages.

In many circumstances, you can exercise these choices yourself using the tools described above. If you cannot do so, please contact us as indicated in the “Contacting Us” section below to discuss your options. Please be aware that, if you do not allow us to collect personal information from you, we may not be able to deliver certain products, features and services to you, and some of our products and services may not work appropriately or be able to take into account your preferences.

California and Virginia Rights

This section applies to California and Virginia residents whose personal information we collect on behalf of our business customers which are subject to the California Consumer Privacy Act of 2018 (CCPA) and/or Virginia’s Consumer Data Protection Act (VCDPA).

You may have the right to exercise the following rights directly with our business customers who are bound by the CCPA or VCDPA:

• Right to know
• Right to access
• Right to data portability
• Right to correction
• Right to deletion

You also have the right not to receive retaliatory or discriminatory treatment for exercising these rights and you have the right to appeal decisions (Virginia residents only).

When you make a request to us, you will need to make the request directly with the business customer unless the business customer has authorized us to respond directly to you. As a service provider to our business customers, we generally cannot respond to your request unless your request comes through our business customer.

Opting Out of Builder’s Cookies Generally

You may disable cookies, including all of our cookies, by modifying the settings in your browser. However, please note that certain features of the Sites or Builder Services may not work if you delete or disable cookies. Also, if you previously opted out of certain activities by other websites and you delete all cookies, you may need to renew those opt-outs because opt-outs are usually managed by cookies (meaning that a cookie may be needed to honor your opt out choices at other websites).

For more information about cookies, including how to see what cookies have been set on your device and how to manage and delete them, visit www.allaboutcookies.org.

Opting Out of Use of Precise Location

To disable the collection of precise location information from your mobile device through mobile applications, you can access your mobile device settings and choose to limit that collection. Usually this opt out feature is found under the Settings section of your phone.

6. Children’s Privacy

Protecting the privacy of young children is especially important. For that reason, Builder does not knowingly collect or solicit personal information from anyone under the age of 18. In the event that we learn that we have collected personal information from a child under age 18, we will delete the information we have stored as quickly as possible. If you believe that we might have any information from or about a child under 18, please contact us as indicated in the "Contacting Us" section below.

7. Location of Storage and Processing

Your information may be stored and processed in – and we may transfer information to – the U.S. and other countries where Builder (including its subsidiaries and affiliates) and our advertising partners and service providers maintain systems and facilities. In addition, information that we collect about you (including personal information) may be transferred to our affiliated entities and/or to other third parties across borders and/or from your country to other countries around the world.

You acknowledge that we may transfer information to the U.S., to any country in which Builder, its advertising partners, and its service providers maintain systems or facilities, and to other countries globally.

If you are located in the European Union or other regions with laws governing data collection and use that may differ from U.S. law, you acknowledge that we may transfer information, including personal information, to a country and jurisdiction that does not have the same data protection laws as your jurisdiction, consistent with our legal obligations governing the transfer of such data.

8. Data Security and Integrity

Builder is concerned about the security of your personal information. We have implemented administrative, technical, and organizational security measures that are designed to help protect your information from unauthorized or illegal access, destruction, disclosure, use and modification and to protect the confidentiality, integrity, and accessibility of personal information. From time-to-time, we review our security procedures to consider appropriate new technologies and methods.

Please be aware, though, that despite our efforts, no security measures are perfect or impenetrable. We cannot ensure, and do not warrant or guarantee, that the information you transmit to Builder will remain secure, nor do we guarantee that this information will not be accessed, disclosed, altered, destroyed or used in an unauthorized manner.

9. Data Retention

How long we keep the personal information we collect depends on the nature of the information, the purpose for which it is used, how sensitive it is, the amount of the personal information, the potential risk of harm from unauthorized use or disclosure, and our regulatory, legal, tax, accounting and other obligations. In general, we will retain your personal information for the length of time reasonably needed to fulfill the purposes outlined in this privacy policy (including for as long as need to provide you or our business customer with products and services), unless a longer retention period is required or permitted by law or our business customer or you request that we delete the personal information.

10. Sensitive Information

We ask that you not disclose to us any sensitive information through the Sites or Builder Services or otherwise, except where such information is legally required. Depending on applicable law, some information we collect about you (e.g., location information and user account and password), may be considered sensitive information. If we receive sensitive information from our business customers, as a service provider, we rely on our business customers to obtain your consent (if required by applicable law) or provide you with out opt out rights (if required by law) and otherwise to provide such rights to you as are required by applicable law, contract, or otherwise.

11. Third Party Sites, Services and Applications

• In General. We are not responsible for the practices employed by websites, applications, or services linked to or from the Builder Services or Sites, including the information or content contained there. Please remember that your browsing and interaction on any third-party website, service or application, including those that have a link or advertisement on our Site, are subject to that third party’s own rules, policies, and practices, and not our privacy policy.
• Partner Pages. Some of our partner pages may have the look and feel of being on www.builder.io; however some information collected on those pages may be collected by, or sent to, our partners. Information collected by, or sent to, our partners is subject to their respective privacy policies.
• Social Media and Commenting Features. Our Site may include social media and commenting features provided by third parties. These features may collect your IP address and which page you are visiting on our Site, and may set a cookie to allow the feature to function properly. Your interactions with these features are governed by the privacy policy of the organization providing it.
• Notice to End Users of the Builder Services. The Builder Services are primarily intended for use by organizations. Where the Builder Services are made available to you through an organization (such as your employer), that organization is responsible for administering the accounts over which it has control. If this is the case, please direct your data privacy questions and requests to your administrator. We are not responsible for the privacy or security practices of your administrator’s organization, which may be different than this policy.
• Notice to Users of our Customers’ Websites and Digital Product. As noted above, when Builder’s customers use the Builder Services as part of their own websites, apps, and digital products, they may collect information from you using our services, but they remain responsible for their own privacy and security practices. We are not responsible for our customers’ privacy and security practices, which may differ from ours. If you have used one of our customers’ sites or products, and you would like to access, correct or delete the personal information collected through that product, you should direct your request to the applicable customer.

12. International Transfers of Personal Information

Your personal information is processed at our operating offices and on servers and databases located in the United States and in any other places where the parties involved in the processing are located. It means that this information may be transferred to — and maintained on — servers located outside of your country where the data protection laws may differ than those from your jurisdiction.

Your consent to this privacy policy represents your agreement to that transfer.

In order to provide adequate protection for the transfer of personal information outside of the European Economic Area, the United Kingdom and Switzerland to the United States, we rely on and comply with the “standard contractual clauses” and applicable addenda. If there is any conflict between the terms in this privacy policy and the standard contractual clauses with respect to such transfer of personal information, the standard contractual clauses control.

We commit to resolve complaints about our collection or use of personal information of European Economic Area/United Kingdom/Swiss individuals. Such individuals who have inquiries or complaints under the standard contractual clauses should contact us as specified in “Contacting Us” section below.

13. European Disclosures

If you are an individual in the European Economic Area (EEA), including the United Kingdom and Switzerland, we collect and process information about you only where we have legal bases for doing so under applicable laws. Where we act as a data processor on behalf of our business customers, we rely on our business customers to have a legal basis for us to process their users’ personal information. Where we act as a data controller, we generally rely on our legitimate interests to provide the Site and for the performance of our terms between us and our Site users. On certain occasions we may also rely on the consent of the individual to process personal information.

Where applicable, you may have the following rights: access right, rectification right (correction right), erasure right, right to restrict processing, data portability right, objection right, rights in relation to automated decision-making and profiling, consent withdrawal right, and right to lodge a complaint.

If an individual in the EEA, the United Kingdom or Switzerland has consented to our use of their personal information, and our processing is based on that consent, that individual has the right to withdraw their consent in accordance with applicable European law. Where we are using your information because we or a third party (e.g., your employer) has a legitimate interest to do so, individuals may have the right to object to that, though, in some cases, this may mean no longer using the Sites or Builder Service. Builder further acknowledges that European data subjects have certain other rights under applicable law, including the right to lodge a complaint with a supervisory authority and to request from the controller access to, and rectification or erasure of, personal information, restriction of processing concerning the data subject, and data portability. Where Builder is acting as a controller, you can initiate a request by contacting us as specified in the “Contacting Us” section below. Please note that if you object to or restrict processing, you may not be able to use the Sites and Builder Services or certain features any longer.

EEA, United Kingdom, and Swiss data subjects can contact us as specified in the “Contacting Us” section below.

14. Do Not Track and Cross-Site Tracking

Do Not Track is a privacy preference that users can set in their web browsers. When a user turns on the Do Not Track signal, the browser sends a message to websites requesting them not to track the user. For information about Do Not Track, visit www.allaboutdnt.org. We fully honor Do Not Track signals.

15. Contacting Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us at [email protected] or send mail to:

Builder.io, Inc. 95 3rd Street, 2nd Floor, San Francisco, CA 94103