Privacy Policy

Buildwise is operated by BUILD WISE AI LTD, a company registered in England and Wales. We operate the platform at mybuildwise.co.uk.

For the purposes of UK data protection law, BUILD WISE AI LTD is the data controller — we determine the purposes and means of processing your personal data. Our third-party technology providers (Supabase, Anthropic, Stripe, DreamHost) act as data processors, processing data only on our instructions and subject to appropriate data processing agreements.

For privacy questions or to exercise your rights: hello@mybuildwise.co.uk

Account data: Your name, email address, company name, phone number, company registration number, VAT status, and profile information.

Project data: Site addresses, postcodes, project descriptions, questionnaire answers, and documents you upload (architectural drawings, decision notices, planning history).

Planning outcome data: Where you voluntarily upload a planning decision notice or record an application outcome, we collect the outcome (approved, refused, or pending), the LPA reasoning, and policies cited. This is used to improve our service — see Section 5.

Generated documents: Design & Access Statements, LDC statements, and other documents generated on your behalf.

Usage data: IP addresses, browser type, device type, and pages visited, collected to improve the service and ensure security.

Payment data: Processed entirely by Stripe. We do not store card details — only your Stripe customer ID and subscription status.

We use your data to:

• Provide the Buildwise service — generating planning documents, detecting constraints, running the PD Checker
• Personalise your experience — pre-populating documents with your profile and project details
• Send transactional emails — account verification, document delivery, subscription receipts, password resets
• Process payments and manage your subscription via Stripe
• Improve document quality — using anonymised, aggregated planning outcome data to improve our AI and policy library (see Section 5)
• Respond to support requests
• Detect and prevent fraud and abuse
• Comply with legal obligations

We do not use your personal data to train AI models. We do not sell your data to third parties. We do not use your data for advertising.

When you upload a decision notice or record a planning outcome, we may use that information — in anonymised and aggregated form only — to improve document quality for all users. This includes:

• Understanding which policy arguments correlate with planning approval
• Identifying which DAS sections planning officers engage with most
• Keeping our LPA policy database accurate and current
• Improving our AI prompts and document generation quality

Before any analysis, all personally identifiable information is removed — your name, company, and site address are stripped. Analysis is performed on aggregated patterns, not individual applications.

You can opt out at any time by emailing hello@mybuildwise.co.uk. Opting out does not affect the service you receive.

We will never share identifiable project data — your site address, client name, or the content of your specific DAS — with any third party for research or commercial purposes.

We share your data only with the following processors, all subject to data processing agreements and bound to act only on our instructions:

• Supabase Inc — database, authentication and file storage. Data hosted in EU (Ireland). No international transfer.
• Anthropic PBC — AI processing for document generation. Your project data is sent to Anthropic's US-based API — see Section 7 on international transfers. Anthropic does not use API input to train models. See their Privacy Policy.
• Stripe Inc — payment processing (US-based, EU-US DPF certified). See Stripe Privacy Policy.
• DreamHost LLC — email delivery for transactional emails (US-based).

We do not share your data with any other third parties without your explicit consent.

Some processors are based outside the UK. We ensure appropriate safeguards are in place:

• Anthropic (US): Transfers covered by Standard Contractual Clauses (SCCs) in Anthropic's API terms.
• Stripe (US): Certified under the EU-US Data Privacy Framework, recognised as adequate by the UK.
• DreamHost (US): Transfers covered by Standard Contractual Clauses.
• Supabase (EU — Ireland): No international transfer — data remains within the EEA.

To request more information about the safeguards we rely on, contact hello@mybuildwise.co.uk.

Buildwise uses AI to generate planning documents automatically from the information you provide. This does not constitute automated decision-making producing legal or similarly significant effects about you as an individual. The AI generates a draft document — you remain in full control of whether and how it is used.

The PD Checker uses a hardcoded logic tree (not AI) to assess permitted development rights. Its output is advisory — it does not constitute a legal determination. Always verify with a qualified planning professional before relying on it.

We use essential cookies only. These are strictly necessary for the platform to function and do not require consent under the Privacy and Electronic Communications Regulations (PECR).

Cookie	Purpose	Duration
sb-access-token	Supabase auth — keeps you signed in	Session
sb-refresh-token	Supabase auth — renews your session automatically	30 days

We do not use advertising, tracking, or analytics cookies. We do not use Google Analytics or any service that tracks you across websites. Because we only use essential cookies, no cookie consent banner is shown.

You have the right to:

• Access: Request a copy of the personal data we hold about you
• Rectification: Ask us to correct inaccurate or incomplete data
• Erasure: Ask us to delete your personal data (subject to legal retention obligations)
• Restriction: Ask us to restrict processing in certain circumstances
• Portability: Request your data in a structured, machine-readable format
• Object: Object to processing based on legitimate interests, including the anonymised analysis in Section 5
• Automated processing: Request human review of any automated processing that significantly affects you

To exercise any right, email hello@mybuildwise.co.uk. We will respond within one calendar month.

You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk/make-a-complaint.

We protect your data through:

• HTTPS/TLS encryption on all data in transit
• Row-level security on the database — users can only access their own data
• OAuth 2.0 authentication via Supabase Auth
• Payment data handled entirely by Stripe's PCI-compliant infrastructure — we never touch card details
• Access to production systems restricted to authorised personnel only

No method of internet transmission is completely secure. We take reasonable precautions but cannot guarantee absolute security.

Buildwise is a professional tool intended for adults (18+). We do not knowingly collect data from minors. If you believe a child has provided personal data, contact us and we will delete it promptly.

We will notify you by email of material changes at least 14 days before they take effect. The date at the top of this page shows when it was last updated. Continued use of the platform after the effective date constitutes acceptance.

Email: hello@mybuildwise.co.uk
Company: BUILD WISE AI LTD, registered in England and Wales

If we cannot resolve your concern, you may escalate to the ICO at ico.org.uk.