Privacy Policy for BuildMyAgent

Privacy Policy for BuildMyAgent.io Last Updated: October 2025 BuildMyAgent.io ("we", "our", or "us") is operated by Shiney.ai Inc., a Delaware Corporation. We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our platform and related services ("Service"). By accessing or using BuildMyAgent.io, you agree to this Privacy Policy. If you do not agree, do not use the Service. Data We Collect We collect and process the following categories of information: 1.1 Account and Billing Information We collect your email address, name, company name (if provided), billing address, and tax identification number when applicable. Payment information is processed securely by Stripe. We do not store payment card numbers. 1.2 Uploaded Content and AI Data We collect data you upload or generate through the Service, including chat logs, AI prompts, project files, FAQs, knowledge bases, contact lists, and message content for integrations such as Twilio or other communication tools. Users are responsible for obtaining necessary consent before uploading or processing any personal data. Users should not upload sensitive personal information (including health, financial, or government ID data). We do not intentionally process such data. 1.3 API and Integration Data We store user-connected API keys for third-party AI services (such as OpenAI) and use them only to process user requests. We collect connection details and metadata required to provide integrations through third-party automation or communication platforms. Users are responsible for complying with all applicable laws (including TCPA, GDPR, and CCPA) and ensuring all recipients have given consent before any communication is sent. 1.4 Technical and Analytics Data We collect limited technical data, including IP address, browser type, device identifiers, and timestamps, as well as aggregated analytics data through providers such as Vercel and Hotjar. This information is used to monitor system performance and improve the Service. 1.5 Cookies We use cookies and similar technologies to authenticate users, maintain sessions, analyze performance, and measure marketing effectiveness. Non-essential cookies are only set with user consent through our cookie banner. Users may adjust cookie preferences at any time. How We Use Data We process data for the following purposes: a. To create and manage accounts. b. To process billing and subscription payments through Stripe. c. To operate, test, and improve AI agents and integrations. d. To monitor performance, prevent abuse, and enhance functionality. e. To provide customer support and service updates. f. To send marketing communications only where the user has provided consent. g. To comply with legal obligations and enforce policies. We do not sell or rent personal data. Data Sharing and Service Providers We may share data with trusted third-party service providers that help us operate and deliver the Service. These may include: • Cloud hosting and infrastructure providers • AI and automation service providers • Communication and email delivery platforms • Payment processors • Analytics and monitoring tools • Affiliate and referral platforms All third-party providers act under written agreements that include strict data protection obligations and process data only as instructed by us. We may engage new service providers and will update this Privacy Policy or provide notice where required by law. International Data Transfers Data may be transferred and processed in the United States and other countries where our service providers operate. Transfers are protected by one or more lawful safeguards, including participation in the EU-U.S. Data Privacy Framework (DPF), Standard Contractual Clauses (SCCs), or our Data Processing Addendum (DPA). By using the Service, you consent to such transfers. Data Security We use administrative, technical, and organizational measures to protect data, including encryption in transit and at rest, role-based access controls, secure infrastructure hosted on SOC 2-compliant providers, and continuous monitoring. In the event of a data breach, we will notify affected users and authorities in accordance with applicable law. Data Retention Personal data is retained as long as necessary to provide the Service or as required by law. a. Account and operational data are deleted upon account deletion. b. Sub-account and white-labeled workspace data are deleted when the parent account is deleted. c. Encrypted backups are automatically deleted within 30 days. d. Aggregated analytics may be retained up to 24 months. Users may request deletion of their data by contacting support@buildmyagent.io. Marketplace and User Content If you use marketplace or collaboration features, we collect and store profile information, listings, messages, and links shared between users. This data is retained for operational and moderation purposes. Messages and links are not automatically scanned for harmful content, and users should exercise caution when interacting with others. User Rights Depending on your jurisdiction, you may have rights to access, correct, delete, or export your personal data, withdraw consent, restrict processing, or object to processing. You may exercise these rights by contacting support@buildmyagent.io. We do not sell or share personal data as defined by the CCPA and will not discriminate against users who exercise these rights. Children's Privacy The Service is not intended for individuals under 18 years of age. We do not knowingly collect data from minors. If such data is identified, it will be deleted. Automated Decision-Making We do not use automated decision-making or profiling that produces legal or significant effects. AI outputs are generated only under user direction for functional purposes. Affiliate and Referral Programs We use third-party affiliate platforms to track referrals and manage commissions. Only limited data such as email and referral event information may be shared for this purpose. This data is not sold or used for marketing. Data Processing Addendum By using the Service, you also agree to our Data Processing Addendum (DPA), which forms part of this Privacy Policy and is available at: https://docs.google.com/document/d/1KnOQq1JY4Dldt_ctx-N1ucqdKNhZAsp1-dXwlwZglJI/edit?usp=sharing Updates to This Policy We may update this Privacy Policy periodically. Any material changes will be communicated via email or through the platform. Continued use of the Service after changes take effect constitutes acceptance of the revised Policy. Contact Information For any privacy-related questions, please contact: Email: support@buildmyagent.io Entity: Shiney.ai Inc., Delaware, USA