Privacy Policy
This page describes what Machinae Build collects, why it is collected, who it is shared with, and how to have it removed. It is written to match what the software actually does rather than to cover every eventuality.
1. Who we are
Machinae Build is developed and operated by Elena Denezhkina, who holds the copyright in it. We are the data controller for the information described here.
2. What we collect
Information you give us
- Email address — required to create an account and to send you your designs.
- Phone number — required before generating a design, so that a supplier or our sales team can reach you about a quote.
- Name and company — optional, used to address you properly.
- Your building descriptions and designs — the text you type and the specifications produced from it, so you can return to them later.
- Password — if you sign up with email and password, it is stored only as a salted hash. If you sign in with Google or GitHub, we never see a password at all.
Information collected automatically
- IP address and browser user-agent — recorded with your signup, to attribute the lead and to detect abuse of the free tier.
- Server and request logs — including crawler visits, kept for diagnostics.
- A session cookie (
better-auth.session_token) — strictly necessary to keep you signed in. It is HTTP-only and same-site. - A free-tier cookie (
anon_id) — a random identifier, set before you have an account, so the five free designs are counted against somebody. It is not linked to a name or an email, because at that point we have neither. It lasts a year. - Approximate location from your IP — only if you allow it. The configurator can ask a third-party service (
ipapi.co) roughly where you are, to prefill the build site on a quote. It is off unless you say yes, and saying no changes nothing else.
We do not use advertising cookies, we do not run third-party analytics, and the site loads no fonts, scripts or images from anyone else's servers. The location lookup above is the single request that leaves for a third party, which is exactly why it is the one thing you are asked about. The cookie page lists every cookie and every stored value in full, with where to click to see and delete them yourself.
3. Why we use it
- To provide the design and code-checking service you asked for (performance of a contract).
- To contact you about a design or a quote you initiated (legitimate interest, and consent where required).
- To enforce the free-design allowance and prevent abuse (legitimate interest).
- To keep the service secure and diagnose faults (legitimate interest).
We do not sell your personal information, and we do not share it for cross-context behavioural advertising.
4. Who it is shared with
- Our AI model provider. The text you type to describe a building is sent to the model provider that generates the design. It is processed to return your result. Your email, phone number and password are never sent as part of that request.
- Our CRM, if enabled. Where a deployment has CRM delivery switched on, your contact details and design interest are forwarded to that system so that sales can follow up.
- Authentication providers you choose. If you sign in with Google or GitHub, that provider confirms your identity to us.
- Nobody else, except where we are legally required to disclose, or as part of a business transfer in which this policy continues to apply.
5. How long it is kept
Account details and saved designs are kept for as long as your account exists, and removed when you ask us to delete it. Server logs are kept for operational diagnostics and rotated. If you ask us to delete your account we remove your personal information; anonymous, aggregated counts that cannot identify you may remain.
6. Your rights
Depending on where you live — in particular under the UK GDPR, the EU GDPR and the CCPA/CPRA — you may have the right to access a copy of your data, to correct it, to delete it, to restrict or object to its processing, to portability, and not to be discriminated against for exercising any of them.
To exercise any of these, use the contact page. We will respond within the period the applicable law allows. You also have the right to complain to your data protection authority.
7. Security
Passwords are stored hashed, never in the clear. Session cookies are
HTTP-only, same-site, and marked secure in production. Administrative
surfaces answer 404 rather than 403 to anyone not
entitled to them, so their existence is not confirmed to a stranger. No
system is perfectly secure, and we do not claim otherwise.
8. Children
This is a tool for commercial construction buyers. It is not directed at children, and we do not knowingly collect information from anyone under 16.
9. International transfers
Our service providers may process data outside your country. Where that happens we rely on the transfer mechanisms the applicable law provides.
10. Changes
If this policy changes materially we will update the date at the top and, where the change affects you, tell you directly.
11. Governing law
This policy is governed by the law of the place where we are established.