Skip to main content

Privacy Policy

Effective Date: May 9, 2026

1. Introduction

Averion Labs, LLC, operating as BuildCreditAI ("Company," "we," "our," or "us") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.

2. Information We Collect

Information You Provide: Name, email address, account login credentials, payment information (processed by Stripe), manually entered credit score information, and onboarding questionnaire responses.

Important: We do not collect Social Security numbers, full credit reports, or bank login credentials.

Age confirmation: During account creation, we ask you to confirm that you are 18 or older. We do not collect your date of birth. This self-attestation is required because the credit products and services we recommend are designed for adults. Your age confirmation is stored only on your account record and is deleted when you delete your account.

Persona-derivation information: During onboarding we ask whether you have any authorized-user credit cards versus primary cardholder cards, and whether you have a US checking or savings account. These responses are self-reported and are used to tailor your credit-building roadmap to your current credit situation. We do not pull this information from credit bureaus.

Under-18 waitlist (discontinued): Until May 10, 2026, we operated a waitlist for users under 18 who wanted to be notified when they could sign up. We have since discontinued this practice. We do not currently collect any information from users under 18.

Records previously captured through this form remain in our database. If you previously joined this waitlist and would like your record deleted, contact us at [email protected].

We never operationalized the reminder system originally implied by this form, so no notification emails were ever sent based on this data. See section 11 for details on what was and is stored.

Parent ebook downloads: When you request our free under-18 parent guide on our parent track, we collect your email address and your child's age band (13–15, 15–17, or 17–18). The optional name field on the request form is used only for the email greeting and is not stored. We use the email address to deliver the guide and to send infrequent follow-up notes about credit-building for parents of teens; you may unsubscribe at any time.

Gift subscription purchasers: When you purchase a gift subscription on our parent track, we collect your name and email address, the recipient's name and email address, your one-time payment information (processed by Stripe — we do not store full card details), and any optional gift message you include. We use this information to deliver the gift email to the recipient, send you a confirmation, support refund and billing-dispute requests, and meet tax and audit retention obligations. The recipient is the account holder once they redeem the gift code and create their own account; the purchaser does not gain access to the recipient's account, score, or roadmap.

Automatically Collected: IP address, browser type, device info, pages visited, time on site, referral source, cookies.

3. How We Use Your Information

  • Provide and operate our platform
  • Personalize your credit-building roadmap
  • Process payments
  • Send account-related communications
  • Improve our services
  • Prevent fraud or misuse
  • Comply with legal obligations

We do not sell your personal information.

4. Affiliate Disclosure & Tracking

Our platform links to financial products we believe may help users build credit. We do not currently have affiliate revenue relationships and do not earn commissions from these links. When you click through to a third-party site, that provider may collect information in accordance with its own privacy policy. If we establish affiliate partnerships in the future, we will update this section and our Affiliate Disclosure page before any affiliate links go live.

5. Cookies & Tracking

We use a small set of cookies, organized into two categories:

Essential cookies

Required for the site to function. These include authentication and session cookies set by Supabase (our database and authentication provider) that keep you logged in, security cookies that protect against cross-site request forgery, and a small preference cookie that remembers your cookie choice itself. Essential cookies are set without consent because the site cannot function without them.

Analytics cookies

On our marketing pages only (homepage, pricing, articles, and similar public-facing pages — never on authenticated app pages such as your dashboard or profile), we use Google Analytics to understand which pages help users and which need improvement. Google Analytics sets the following cookies:

  • _ga — distinguishes unique visitors. Expires after 2 years.
  • _ga_KZP7Q3ETBJ — persists session state for our specific GA4 property. Expires after 2 years.

Analytics cookies require your consent. When you first visit our marketing pages, a banner asks whether you accept analytics cookies. If you reject (or take no action), Google Analytics is not loaded — no _ga or _ga_*cookies are set, and no requests are made to Google's servers from your browser.

Changing your decision: you can change your analytics consent at any time using the “Cookie preferences” link in the site footer. Your most recent choice replaces any previous one.

Your rights: California residents have the right under the CCPA to opt out of the sale or sharing of personal information, and EU/UK residents have the right under GDPR to refuse non-essential cookies entirely. We do not sell or share personal information with advertisers, and our consent banner provides a binary opt-in that satisfies both regimes. See sections 9 and 10 below for the broader rights and how to exercise them.

Browser-level controls: you may also disable cookies in your browser settings. Authenticated features will not function without essential session cookies; analytics cookies are never set without your prior consent.

We do not use advertising cookies, behavioral tracking cookies, third-party marketing pixels, or cross-site trackers. Google Analytics is the only third-party analytics service in use.

6. Third-Party Service Providers

We share your information with trusted third-party service providers only as necessary to operate our platform:

  • Supabase — Our database and authentication provider. User account data, profile information, and credit-building progress are stored on Supabase-managed infrastructure. Supabase is SOC 2 compliant. See supabase.com/privacy.
  • Stripe — Payment processing. We do not store full payment card details on our servers. See stripe.com/privacy.

These providers are prohibited from using your information for any purpose other than providing services to us.

7. Data Security

Your data is stored on Supabase-managed infrastructure, which uses encryption at rest and in transit. We implement row-level security policies so that each user can only access their own data. No method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

8. Payment Processing

All payments are processed through Stripe. We do not store full payment card details on our servers.

9. Your Rights (CCPA)

California residents have the right to access, correct, or delete personal information we hold. Contact us at [email protected] to exercise your rights.

10. Your Rights (GDPR)

EU and UK residents have the right to access, rectify, erase, restrict processing, and port their personal data under the General Data Protection Regulation (GDPR). To exercise any of these rights, contact us at [email protected]. We will respond to all requests within 30 days.

11. Children's Privacy

Our services are directed at adults 18 or older. At signup, we ask users to self-attest that they are 18 or older; users under 18 cannot create an account. We do not collect date of birth.

Until May 10, 2026, users under 18 who attempted to sign up could optionally join a notification waitlist at our eligibility page. We discontinued this practice on that date and no longer collect any information from users under 18. Records previously captured through that waitlist consist of an email address, the calendar year the user turns 18, and a label indicating where the request was captured. We never sent notification emails based on this data, and we have no current plans to do so. Records previously captured remain in our database; if you previously joined this waitlist and would like your record deleted, contact us at [email protected].

We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, contact us at [email protected] and we will delete it promptly.

12. Data Retention

We retain your personal information for as long as your account is active or as needed to provide our services. If you close your account or request deletion, we will delete your personal data within 30 days, except where retention is required by law. To request account deletion contact us at [email protected].

Records previously captured through the under-18 waitlist (discontinued May 10, 2026) remain in our database. We do not have an active retention schedule for these records because the reminder system they were captured for was never operationalized. Anyone who previously joined the waitlist may request deletion of their entry at any time by emailing [email protected].

Parent ebook subscribers' data is retained until the subscriber unsubscribes. Gift purchaser data is retained for the lifetime of the gift subscription plus one year to support refund requests, billing disputes, and tax and audit obligations. Both retention windows can be shortened on request — contact [email protected].

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by email or by posting a notice on our platform at least 7 days before the change takes effect. Your continued use of the platform after changes become effective constitutes your acceptance of the updated policy.

14. Contact

Averion Labs, LLC, operating as BuildCreditAI
Email: [email protected]
Website: buildcreditai.com