BuildBenchScope and transparency
This page describes the service providers confirmed by BuildBench’s operator and the data-retention periods the operator has specified. Naming a service does not verify its contracting entity, processing region, settings, or suitability for a particular customer. Details not yet confirmed are identified below. Banks and customer-selected integrations may act independently rather than as subprocessors.
Service providers
| Service | Function and data context | Contractual details |
|---|---|---|
| OpenAI | AI generation; prompts, uploaded task content, and chatbot context as needed | Contracting entity, regions, retention, and training/access configuration to be confirmed. |
| Cloudflare | Website hosting and deployment; deployed content and technical request data as applicable | Specific products, contracting entity, data locations, and retention to be confirmed. |
| Firebase | Database and authentication; account/authentication and stored application data as applicable | Specific products, contracting entity, configured regions, and retention to be confirmed. |
| Allied Bank Limited | Receipt of direct bank transfers in Pakistan; transaction information | Banking role differs from a service subprocessor. No card checkout is offered. |
| Email service - not yet identified | Service communications, if an external email delivery service is used | Provider identity, data, and terms remain unconfirmed. |
Sending banks and transfer services process transactions under their own arrangements. Customer-selected integrations may have separate policies. This list identifies known services and is not an assertion that all provider contracts or DPA authorizations have been completed.
Changes and transfers
Before adopting a provider, confirm appropriate contractual protections, security, location, purpose limitations, and any required transfer safeguards. For a signed DPA, the agreed authorization, notification, and objection procedures apply. Customers may request current information at [email protected].
Data-retention schedule
| Category | Retention approach | Scope |
|---|---|---|
| Active projects, chats, and generated content | Deleted from active systems within 30 days after account deletion | Subject to applicable legal retention or valid legal holds; not a promise about all backup/provider copies. |
| Security logs | Retained for up to 30 days after account deletion for security | Legally required preservation may apply; do not use logs as indefinite project storage. |
| Account and workspace metadata | Retain only as necessary for the relevant purpose and obligations | Exact post-closure periods are not yet specified. |
| Payment records and transfer screenshots | Payment verification, accounting obligations, disputes, and fraud handling | Exact periods are not yet specified; avoid unnecessary financial details. |
| Support, privacy, abuse, and copyright records | Resolve requests, document decisions, and meet applicable duties | Exact closure-based periods are not yet specified. |
| Backups and provider-held copies | Protected recovery copies and provider processing | Maximum expiry and deletion schedules are not yet confirmed. |
Retention must be limited to what is needed for the documented purpose and applicable legal duties. An unspecified period is not permission for indefinite retention. The 30-day active-content schedule does not silently set a period for every other category.
Account deletion, exports, and backups
Delete your account in Settings or contact support for help. Export projects before deletion where supported. The retention table above explains the active-content and security-log periods and the separate schedules still requiring confirmation.
Shared workspaces can involve other members’ rights and customer instructions; identify affected content and members before deletion. Lawfully retained data must remain protected and limited to the retention purpose. Deletion of active data does not imply immediate deletion of every backup or provider-held copy.
Related policies and contact
Read the Privacy Policy and Data Processing Agreement. For retention, provider, or deletion questions, email [email protected].
Read together with applicable purchase terms and any signed agreement.