Privacy Policy

We collect the business information you give us to generate a site, your email address, payment records held by Stripe, and any lead-form submissions made on your published site.

What we don't do

We don't sell your data. We don't use your business information to train third-party models. We don't build advertising profiles.

Traffic measurement on published sites

Every site we publish includes a first-party counter so its owner can see whether anyone is visiting. For each pageview we record only the date, the path visited, and the domain of the referring site. We do not set cookies, do not use browser storage, do not store IP addresses, and do not create any identifier — which means we cannot tell whether two views came from the same person, and cannot follow anyone between sites. This is why FlareBuild sites do not need a cookie consent banner for our analytics.

Site owners may add their own third-party analytics. If they do, that tool's own privacy terms apply and any consent obligations it creates are theirs, not ours.

The AI receptionist

On sites where the receptionist is enabled, conversations are stored for up to seven days so the assistant can follow the thread and so the owner can read what was said. Contact details a visitor provides are sent to the site owner and retained by them. The receptionist is instructed to refuse payment card numbers, government identification numbers, and health information; do not send them to it.

flarebuild.dev itself

Our own marketing site uses the same first-party counter and also Google Analytics, which does set cookies. That applies to flarebuild.dev only — not to sites we build for customers.

Sub-processors

• Cloudflare — hosting, edge delivery, storage, WAF
• Google Gemini — site generation and assistant replies
• Stripe — payments
• Resend — transactional email and lead notifications
• Google Analytics — flarebuild.dev only

How long we keep things

We keep what we need for as long as it is useful, and no longer. Current schedule:

• Security and audit records (who signed in, what changed, IP address and approximate location) — 12 months
• Leads captured on your site — 90 days in our system; the copies we email you are yours to keep
• Receptionist conversations — 7 days
• Traffic counts — 90 days, and they contain no identifier
• Sign-in sessions — 30 days
• Payment records — 7 years, as tax and financial rules require

Preservation for investigations

If a site is reported for fraud, impersonation, or other abuse, we preserve a record of it — the page as it was served, its configuration, and the account behind it — before taking any action. We do this because the first thing a fraudulent site does when reported is erase itself, and a victim's complaint is worth little without evidence of what they saw.

Preserved records are held outside the normal schedule above until the matter is resolved. We also honour lawful preservation requests from law enforcement. Where the law requires us to report certain content — child sexual abuse material in particular — we will do so.

We do not hand user content to government agencies on request alone. We require valid legal process, except where there is an immediate risk to someone's life or safety.

Right to erasure

Email support@flarebuild.dev and we will delete your account and sites within 30 days. Payment records are retained where tax and financial law requires it, and material under an active preservation obligation is retained until that obligation ends — a deletion request cannot be used to destroy evidence in an open investigation.

Children

Account holders must be 13 or older. Paid plans require an account holder aged 18 or over, because a minor cannot enter a binding contract. Families building a business together are welcome — the account and the billing must belong to the adult.

Contact

Questions: support@flarebuild.dev. Abuse reports: abuse@flarebuild.dev.