Privacy Policy

1. Introduction

Built for Friday ("BFF," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform, website, and related services (collectively, the "Service").

By accessing or using the Service, you agree to this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access the Service.

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, company name, role, and password when you create an account.
• Organization Data: Team member details, task assignments, schedules, SOPs, and work instructions you input into the platform.
• Payment Information: Billing details processed through our third-party payment provider. We do not store full credit card numbers.
• Communications: Messages you send to us, including support requests and feedback.

2.2 Information Collected Automatically

• Usage Data: Pages visited, features used, interaction patterns, and time spent on the platform.
• Device Information: Browser type, operating system, device identifiers, and IP address.
• Cookies & Tracking: We use cookies and similar technologies to maintain sessions, remember preferences, and analyze usage. See Section 7 for details.

2.3 AI Agent Data

When you configure AI agents within BFF, we process the task execution data, workflow logs, and performance metrics generated by those agents. This data is scoped to your organization and is not shared across tenants.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service
• Process transactions and manage your subscription
• Personalize your experience and deliver relevant features
• Power AI-driven features, including the Impact Cascade Engine and workflow automation
• Send administrative communications, such as updates, security alerts, and support messages
• Analyze usage patterns to improve the Service
• Detect, prevent, and address technical issues and security threats
• Comply with legal obligations

4. Data Sharing & Disclosure

We do not sell your personal information. We may share information in the following circumstances:

• Service Providers: Third-party vendors who assist in operating the Service (hosting, analytics, payment processing), bound by confidentiality agreements.
• Partner Organizations: If your account is managed through a BFF partner or agency, limited administrative data may be shared with your partner administrator.
• Legal Requirements: When required by law, regulation, or legal process.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, with appropriate notice.
• With Your Consent: When you explicitly authorize sharing.

5. Data Security

We implement industry-standard security measures to protect your data, including:

• Encryption in transit (TLS 1.2+) and at rest
• Row-Level Security (RLS) for strict multi-tenant data isolation
• Role-based access control within organizations
• Regular security audits and monitoring
• Secure authentication via Supabase Auth with support for multi-factor authentication

While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

6. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. Upon account deletion, we will remove or anonymize your personal data within 30 days, except where retention is required by law or for legitimate business purposes (e.g., dispute resolution, fraud prevention).

7. Cookies & Tracking Technologies

We use the following types of cookies:

• Essential Cookies: Required for the Service to function (authentication, security).
• Analytics Cookies: Help us understand how visitors interact with the Service.
• Preference Cookies: Remember your settings and preferences.

You can control cookies through your browser settings. Disabling essential cookies may impair Service functionality.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict certain processing
• Data portability (receive your data in a structured format)
• Withdraw consent where processing is based on consent

To exercise these rights, contact us at privacy@builtforfriday.com.

9. Children's Privacy

The Service is not intended for individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will delete it promptly.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place, such as standard contractual clauses, to protect your data in accordance with this Privacy Policy.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the revised policy.

12. Contact Us

If you have questions or concerns about this Privacy Policy, please contact us at: