Privacy Policy

What we collect

• The web address you submit. That URL is what starts a rebuild, and we keep a record of the job (the URL and its status) so we can run it and show you the result.
• Notes you type into the intake form (what you'd like changed, reference sites) are used to guide that rebuild.
• An email address, if you provide one at checkout — used to send your receipt and a link to your finished site.
• Payment details, when you pay, are handled by our payment processor. We don't receive or store your card number.

What we don't collect

• No cookies, and no cross-site tracking of you across other websites.
• Reference images you attach in the intake form stay in your browser for preview — they are not uploaded to us.
• We don't sell your data, and we don't serve ads.

Analytics

We use Plausible, a privacy-friendly analytics tool. It's cookieless and reports aggregate numbers only (like how many people started a rebuild) — it doesn't identify you individually or track you across other sites. That's also why this site has no cookie-consent banner: there's nothing tracked that needs consenting to.

Who we share it with

We use a small number of service providers to run rebuild.fyi: Supabase hosts our database, and Plausible processes anonymous analytics as described above. When payments are live, our payment processor handles your payment details directly. We don't share your data with anyone else, and we don't sell it.

TODO: the specific payment processor has not been finalized in this codebase yet. This section should be updated with its name once one is integrated.

How long we keep it

We keep job records — the URL you submitted and its rebuild status — for as long as needed to run the service and support you afterward (for example, if you come back to rebuild the same site again).

TODO: a specific retention or deletion period has not been set. Confirm one and state it here.

Your rights

You can ask us to see, correct, or delete the personal data we hold about you by emailing hi@rebuild.fyi.

TODO: whether specific regional frameworks (GDPR, CCPA, or others) formally apply — and the additional rights and language those require — has not been confirmed and should be reviewed once the operating jurisdiction is settled.

Contact

Questions about this policy? Email hi@rebuild.fyi.