Privacy Policy

1. Data Controller

The data controller is Schermo 33 S.r.l., Via Prisciano 72, 00136 Rome (RM), Italy, VAT No. IT08373631004.

For privacy requests: info@buildhypeapp.com.

2. Personal data processed

BuildHype may process identification and contact data, account data, credentials, technical and usage data, IP addresses, security logs, billing and payment data, data relating to the connected store, and content uploaded or configured by the client.

When an end user uses a quote request function through a BuildHype configurator, BuildHype may also process the user’s name, email address, phone number, any notes entered, selected configuration, browser and device technical information, IP address, request source, date and time of the request, and the related identifier.

For data collected through configurators published by client stores, the BuildHype client normally acts as data controller and Schermo 33 S.r.l. processes such data on its behalf as data processor, as provided in the Data Processing Agreement (DPA).

When access via Google, Microsoft or Apple is used, BuildHype may receive from the relevant provider the data required for authentication, such as account identifier, email address, first and last name when made available by the provider and authorized by the user.

3. Purposes and legal bases

Data may be processed to create and manage the account, provide BuildHype, manage subscriptions and payments, connect e-commerce integrations, provide support, send transactional emails, ensure security, prevent abuse, comply with legal obligations and improve the service.

The legal bases may include performance of a contract or pre-contractual measures, legal obligations, legitimate interests and, where required, consent.

4. Providers and recipients

To provide the service, we may use external parties, including:

• Stripe, for payments and billing.
• Shopify, when the Shopify integration is used.
• Google, for Google Login.
• Microsoft, for Microsoft Login.
• Apple, for Sign in with Apple.
• DeepSeek, for processing requests made through BuildHype AI assistance features.
• SerpApi, when enabled AI features require access to results or information available on the web.
• Providers of hosting, infrastructure, CDN, security and email delivery services.
• Analytics or marketing providers, when such tools are enabled and permitted by the applicable cookie preferences.

Data is shared only to the extent necessary to perform the relevant function or when required by law.

5. Cookies and similar technologies

The website may use technical cookies necessary for operation and, subject to consent where required, cookies or similar technologies for analytics and marketing.

Users can manage their preferences through the cookie consent system available on the website and through their browser settings.

For more details on the cookies and tracking technologies used by BuildHype, see the Cookie Policy.

6. International transfers

Some providers may process data outside the European Economic Area. In such cases, transfers will be carried out using mechanisms provided by applicable law, including adequacy decisions, Standard Contractual Clauses or other recognized mechanisms.

7. Retention

Personal data is retained for as long as necessary for the purposes for which it was collected and in compliance with applicable legal obligations.

• Account and contractual data: for the duration of the relationship with BuildHype and thereafter for the period necessary to manage legal, tax and accounting obligations or any disputes.
• Billing and payment data: for the periods required by applicable tax and accounting laws.
• End-user quote requests: normally for up to 24 months from the request, unless otherwise required by the client acting as data controller or by law.
• Technical and security logs: normally for up to 12 months, unless longer retention is necessary for security, abuse prevention or incident management.
• Client configurations, content and operational data: for the duration of the account and, after termination of the service, for the time technically necessary for deletion, normally no longer than 90 days, unless legal obligations or legitimate retention requests apply.
• Backups: data may remain temporarily in backup copies until normal rotation cycles are completed, generally within 90 days.

8. Data subject rights

Where provided by Regulation (EU) 2016/679, data subjects may request access, rectification, erasure, restriction, portability and objection, and may withdraw consent without affecting the lawfulness of processing carried out before withdrawal.

Data subjects may also lodge a complaint with the competent supervisory authority. In Italy, this is the Garante per la protezione dei dati personali.

9. Security and client responsibilities

BuildHype adopts technical and organizational measures designed to protect data against unauthorized access, loss, alteration or improper disclosure. However, no system can guarantee absolute security.

Clients are responsible for their credentials, the content entered into the platform, and their privacy obligations toward their users and end customers.

10. Contact and changes

For questions or requests relating to this Privacy Policy: info@buildhypeapp.com.

This notice may be updated to reflect regulatory, technical or operational changes.