Privacy Policy
Effective Date: December 30, 2025 | Last Updated: December 30, 2025
1. Introduction
Built-Simple.ai ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our API services.
This policy applies to all Built-Simple.ai APIs including FixIt, PubMed, Wikipedia, and ArXiv APIs.
2. Information We Collect
2.1 Information You Provide
Account Information:
- Email address (when registering for an account)
- Name (optional, if provided)
- Password (stored as a secure hash, never in plain text)
Google OAuth Information (if you choose to authenticate via Google):
- Google account email address
- Google account name
- Google account profile picture URL
Payment Information:
- Billing information is collected and processed by Stripe
- We do not store your credit card numbers on our servers
- We receive only a confirmation of payment and subscription status
2.2 Information Collected Automatically
Usage Data:
- API requests and search queries
- Timestamps of API calls
- Request volume and patterns
Technical Data:
- IP addresses (for rate limiting and security)
- User agent strings
- API key usage
Log Data:
- Server logs for debugging and security
- Error reports
2.3 Information We Do NOT Collect
- Credit card numbers (handled by Stripe)
- Social Security numbers
- Government identification
- Biometric data
- Location data (beyond IP geolocation)
3. How We Use Information
We use the information we collect to:
3.1 Provide the Service
- Process and respond to API requests
- Authenticate users and validate API keys
- Manage subscriptions and billing
3.2 Improve the Service
- Analyze usage patterns to optimize performance
- Identify and fix bugs and errors
- Develop new features and improvements
3.3 Ensure Security
- Prevent fraud and abuse
- Enforce rate limits
- Detect unauthorized access attempts
- Protect against malicious activity
3.4 Communicate with You
- Send important service announcements
- Respond to support inquiries
- Notify you of changes to our terms or policies
3.5 Legal Compliance
- Comply with applicable laws and regulations
- Respond to legal requests and prevent harm
4. Data Retention
We retain your information for as long as necessary to:
| Data Type | Retention Period |
|---|---|
| Account information | Duration of account + 30 days after deletion |
| API usage logs | 90 days |
| Search queries | 30 days (anonymized after) |
| Payment records | 7 years (legal requirement) |
| Security logs | 1 year |
You may request deletion of your data at any time by contacting us at [email protected].
5. Data Sharing and Disclosure
5.1 We Do NOT Sell Your Data
We do not sell, rent, or trade your personal information to third parties for marketing purposes.
5.2 Service Providers
We share information with third-party service providers who assist us in operating the Service:
| Provider | Purpose | Data Shared |
|---|---|---|
| Stripe | Payment processing | Email, subscription info |
| OAuth authentication | Email, profile (if you use Google login) | |
| Cloudflare | CDN, DDoS protection | IP address, request data |
5.3 Legal Requirements
We may disclose your information if required to:
- Comply with a legal obligation
- Protect our rights or property
- Prevent fraud or abuse
- Protect the safety of users or the public
5.4 Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.
6. Data Security
We implement appropriate technical and organizational measures to protect your information:
- Encryption: All data transmitted via HTTPS/TLS
- Password Security: Passwords stored using bcrypt hashing
- API Keys: Stored as SHA-256 hashes
- Access Controls: Limited employee access to personal data
- Infrastructure: Hosted on secure, monitored servers
- Regular Audits: Periodic security assessments
Despite our efforts, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.
7. Your Rights
7.1 Access and Portability
You have the right to:
- Access your personal information
- Request a copy of your data in a portable format
- Know what information we have collected about you
7.2 Correction
You have the right to:
- Correct inaccurate personal information
- Update your account information at any time
7.3 Deletion
You have the right to:
- Delete your account and associated data
- Request removal of specific information
- Note: Some data may be retained for legal compliance
7.4 Restriction and Objection
You have the right to:
- Restrict processing of your data in certain circumstances
- Object to processing based on legitimate interests
- Opt out of marketing communications
7.5 Exercising Your Rights
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.
8. GDPR Compliance (European Users)
If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):
Legal Basis for Processing:
- Contract performance (providing the Service)
- Legitimate interests (improving the Service, security)
- Consent (where required)
Data Transfers: Data may be transferred to and processed in the United States. We ensure appropriate safeguards are in place.
Data Protection Officer: For GDPR-related inquiries, contact: [email protected]
9. CCPA Compliance (California Users)
If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA):
- Right to Know: Request information about data collection practices
- Right to Delete: Request deletion of personal information
- Right to Opt-Out: We do not sell personal information
- Non-Discrimination: We will not discriminate against you for exercising your rights
To exercise your CCPA rights, contact us at [email protected].
10. Cookies and Tracking
10.1 Cookies We Use
We use only essential cookies necessary for the Service to function:
| Cookie | Purpose | Duration |
|---|---|---|
| session_id | User authentication | Session |
| csrf_token | Security protection | Session |
10.2 No Third-Party Tracking
We do not use:
- Third-party analytics cookies
- Advertising cookies
- Social media tracking pixels
10.3 Managing Cookies
You can configure your browser to refuse cookies. Note that some features may not function properly without essential cookies.
11. Children's Privacy
The Service is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal information, we will delete it.
12. International Data Transfers
Your information may be transferred to and processed in countries other than your own. These countries may have different data protection laws. We ensure appropriate safeguards are in place for such transfers.
13. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by:
- Posting the updated policy on our website
- Sending an email to registered users
- Displaying a notice in the Service
Your continued use of the Service after changes become effective constitutes acceptance of the updated policy.
14. Contact Us
If you have questions or concerns about this Privacy Policy or our data practices, please contact us:
Email: [email protected]
Website: https://built-simple.ai
For data protection inquiries or to exercise your rights, please include "Privacy Request" in your email subject line.