Privacy Policy

1. Introduction

Built Here ("we," "our," or "us") operates builthere.eu, a curated launch platform where makers can discover, share, and promote digital products. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit our website or use our services.

We process personal data in compliance with the General Data Protection Regulation (GDPR) and other applicable European data protection laws. By using our services, you acknowledge this policy.

2. Data Controller

The data controller responsible for your personal data is:

• HIPT (Hobby Internet Projects Thomas), trading as Built Here
• KvK (Chamber of Commerce): 42143820
• VAT ID: NL005532180B68
• Nijmegen, The Netherlands
• Email: info@builthere.eu

3. Information We Collect

• Account information: Email address and optional profile details (such as name and handle) when you register.
• Product submissions: Product name, description, URL, logo, category, country, pricing model, and related metadata you provide.
• Usage data: How you interact with the platform (for example pages visited, upvotes, and timestamps).
• Technical data: IP address, browser type, device information, and operating system for security and, with your consent, analytics.
• Authentication data: If you sign in via third-party providers (such as Google OAuth), we receive basic profile information as permitted by your settings with that provider.
• Communication data: Messages you send via our contact form or email correspondence.

4. Legal Basis for Processing

• Contract performance: To provide our services, manage your account, and publish your products.
• Legitimate interests: Platform security, fraud prevention, and service improvement, where these interests are not overridden by your rights.
• Consent: Non-essential cookies and analytics (Google Analytics, ID G-BX4SVVTWE9), and marketing communications where applicable.
• Legal obligation: Compliance with applicable laws and regulatory requests.

5. How We Use Your Information

• Create and manage your account
• Process and publish product submissions
• Operate upvoting and product rankings
• Send transactional emails (verification, submission updates)
• Respond to support and contact requests
• Improve and optimize our platform (including analytics only with consent)
• Detect and prevent fraud, abuse, and security incidents
• Comply with legal obligations

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

6. Service Providers

We use trusted processors that help us operate Built Here. They process data only on our instructions and under appropriate agreements:

• Cloudflare — hosting, CDN, and edge delivery
• Supabase — database, authentication, and application backend
• Resend — transactional and contact email delivery
• Stripe — payment processing for premium launches (when you make a purchase)
• Google Analytics — website analytics, only if you accept analytics cookies

Published products and maker profiles are publicly visible on our platform.

7. International Data Transfers

We primarily process data in the European Economic Area (EEA). Some providers may process data outside the EEA (including the United States). Where required, we rely on appropriate safeguards such as Standard Contractual Clauses approved by the European Commission or transfers to countries with an adequacy decision. You may contact us for more information about safeguards for specific transfers.

8. Data Retention

• Account data: Retained while your account is active and for a limited period thereafter where needed for legal or business purposes.
• Published products: Remain publicly available unless you request removal.
• Technical logs: Retained for up to 12 months for security and fraud prevention, unless a longer period is required by law.
• After account deletion: We aim to delete or anonymize personal data within 90 days of confirmed account closure, subject to legal retention requirements.

9. Your Rights Under GDPR

You have the right to access, rectify, erase, restrict, object, and port your personal data, and to withdraw consent where processing is based on consent. To exercise these rights, email info@builthere.eu with subject line "Privacy Request". We respond within 30 days and may verify your identity.

10. Cookies and Tracking

We use essential cookies for authentication and security. We use Google Analytics only after you give consent via our cookie banner. For details, see our Cookie Policy.

11. Security

We implement appropriate technical and organizational measures, including HTTPS encryption, secure authentication, and access controls. No method of transmission over the internet is completely secure; we cannot guarantee absolute security.

If a personal data breach poses a risk to your rights, we will notify affected users and the relevant supervisory authority within 72 hours where required by GDPR.

12. Children's Privacy

Our services are not directed to individuals under 16. We do not knowingly collect personal data from children. If you believe we have collected data from a child, contact us immediately.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated date; we may also notify registered users by email where appropriate.

14. Supervisory Authority

If you are in the EEA and believe we have not addressed your concerns, you may lodge a complaint with your local data protection authority. In the Netherlands, the supervisory authority is the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).

15. Contact

Privacy questions or requests: info@builthere.eu