Privacy policy
Controller
Daniel Stein, sole trader (Stein Investments)Email: support@stein.investments
BuildYourTools uses the same account as stein.investments, REVDEN and AlgoCheck. For the services there, the Stein Investments privacy policy applies.
Hosting
This website runs on servers operated by NexoSystems in Germany. When you visit, the server processes technically necessary data such as IP address, time and requested address to deliver the page and protect it against abuse.
Legal basis: Art. 6(1)(f) GDPR (secure operation of the website).
Account and sign-in (Supabase)
For sign-in we use Supabase Auth with a one-time code by email. We process:
- Email address, to send the code and to identify you
- Session data in a functional cookie of this website, which keeps you signed in
- User profile (name, email, language) in our Supabase database in the EU
Signing in on buildyourtools.net applies to this website only. Legal basis: Art. 6(1)(b) GDPR (performance of a contract).
Credits
We display your credit balance here. Payments for credits are handled by Stripe. We store in your account what you spend credits on.
Legal basis: Art. 6(1)(b) GDPR.
Project content and AI
What you describe or upload in a project, such as text, screenshots and files, we store with your project. For clarification, prototype and build we send this content to the Anthropic API (Claude). Anthropic processes it in the USA.
Legal basis: Art. 6(1)(b) GDPR (performance of your order).
To improve BuildYourTools, we analyse how projects run on the platform, for example where follow-up questions were needed or a build took several attempts. This analysis serves solely to improve our service. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a reliable service). You can object to this analysis.
Analytics (Umami)
We use Umami, a self-hosted, cookieless web analytics tool. This means:
- No cookies are set for analytics
- IP addresses are not stored
- No personal data is collected
Legal basis: Art. 6(1)(f) GDPR (audience measurement).
Email (Resend)
We send sign-in codes and notifications via Resend, Inc. Your email address is shared with Resend for delivery.
Legal basis: Art. 6(1)(b) GDPR.
Your rights (GDPR)
You have the following rights regarding your personal data:
- Access: right to access your stored data
- Rectification: right to correct inaccurate data
- Erasure: right to deletion (“right to be forgotten”)
- Data portability: right to receive your data in a machine-readable format
- Withdrawal of consent: right to withdraw consent at any time
- Objection: right to object to processing based on legitimate interest (Art. 21 GDPR)
- Complaint: right to lodge a complaint with a supervisory authority
For requests, contact support@stein.investments.