BuildFlox Privacy Policy

ZAK Labs LLC | Effective date: September 8, 2026

This Privacy Policy explains how ZAK Labs LLC ("ZAK Labs," "we," "us," or "our") collects, uses, discloses, stores, and protects information when you use BuildFlox, including the BuildFlox website, web application, mobile applications, and related services (collectively, the "Service"). BuildFlox is a business-management platform designed for contractors and service businesses.

1. Information We Collect

Account and profile information. We may collect information such as your name, email address, authentication information, company affiliation, role, language preference, and other account settings.

Company and business information. Users may enter company details, team-member information, customer and contact records, projects, proposals, work orders, schedules, invoices, payments, expenses, catalog information, notes, files, photos, receipts, and other business records.

Technical and usage information. We may collect device and browser information, IP address, authentication and security events, diagnostic information, application errors, and information about how the Service is used when necessary to operate, secure, troubleshoot, and improve BuildFlox.

Billing and transaction information. We may receive subscription status, billing identifiers, transaction status, and related payment metadata from our payment providers. Payment-card details may be collected and processed directly by the applicable payment processor rather than by BuildFlox.

2. Information About Your Customers and Other Third Parties

BuildFlox allows users to enter information about their customers, employees, subcontractors, vendors, and other contacts. The BuildFlox customer is responsible for ensuring that it has the appropriate authority, permission, or other lawful basis to collect and use that information. ZAK Labs processes this information to provide the Service. We do not claim ownership of a customer's underlying business records.

3. How We Use Information

We may use information to create and authenticate accounts; provide, synchronize, and secure BuildFlox features; manage organizations and permissions; generate proposals, work orders, invoices, reports, and other requested documents; process subscriptions and enabled payment workflows; send transactional emails and notifications; provide customer support; prevent fraud and abuse; diagnose errors; improve the reliability and usability of the Service; comply with applicable law; and enforce our agreements.

4. Payments and Subscription Billing

BuildFlox may use third-party payment processors. Stripe may be used for BuildFlox subscription billing. Where a BuildFlox customer enables supported online customer-payment functionality, Square may be used to process those payments. Payment providers process payment information under their own terms and privacy policies. BuildFlox is designed so that sensitive card information handled directly by a payment processor does not need to be stored by ZAK Labs.

5. Service Providers and Integrations

To operate BuildFlox, we may use third-party providers such as Supabase for database, authentication, storage, and backend services; Google and Apple for supported sign-in services; Google Firebase for services such as push notifications; Resend for transactional email; Stripe for subscription billing; and Square for enabled customer-payment processing. We may also use hosting, security, monitoring, support, or AI service providers when needed to operate particular features.

These providers may process information on our behalf or as independent providers, depending on the service involved. Their handling of information may also be governed by their own privacy policies and agreements.

6. AI-Assisted Features

BuildFlox may provide AI-assisted features. Information that you intentionally submit to an AI feature may be transmitted to the applicable AI service provider for processing so that the requested feature can operate. Users should avoid submitting highly sensitive information that is unnecessary for the requested task. AI-generated content may be incomplete or inaccurate and should be reviewed before it is used for contractual, financial, tax, legal, safety-critical, or other important business decisions.

7. How We Share Information

We may disclose information to service providers that help us operate BuildFlox; payment processors; professional advisers; government authorities or other parties when disclosure is legally required; parties involved in a merger, financing, acquisition, reorganization, or sale of business assets; or another party when you direct or authorize us to do so.

We do not intend to sell BuildFlox customer business data. If our practices materially change, including the introduction of advertising or practices that constitute a sale or sharing of personal information under applicable privacy law, we will update this Policy and provide applicable choices before those practices begin.

8. Data Security

We use administrative, technical, and organizational safeguards designed to protect information, including authenticated access, authorization controls, encrypted network communications where supported, and security controls provided by our infrastructure providers. However, no internet-connected service can guarantee absolute security. Users are responsible for protecting their credentials and appropriately managing access to their BuildFlox organization.

9. Data Retention

We retain information for as long as reasonably necessary to provide BuildFlox, maintain legitimate business and security records, comply with accounting or legal obligations, resolve disputes, prevent fraud, and enforce our agreements. Retention periods may vary depending on the type of information and the reason it is maintained.

After deletion, limited information may remain temporarily in backups or may be retained when reasonably necessary or legally required for security, fraud prevention, tax, accounting, legal claims, transaction records, or similar obligations. Such information will be limited to the purposes for which retention is required.

10. Account and Data Deletion

BuildFlox provides a process for requesting deletion of an account and associated data. Because BuildFlox supports organizations with multiple users, deletion of an individual user account may be different from deletion of an entire company workspace. Organization owners may need to transfer ownership or complete additional steps before organization-wide data is deleted.

Information about requesting account deletion is available through BuildFlox and its public account-deletion page. Certain limited records may be retained as described in the Data Retention section above.

11. Your Privacy Rights

Depending on where you live and which privacy laws apply, you may have rights concerning your personal information, which may include requesting access, correction, or deletion, obtaining information about how your information is handled, or exercising applicable opt-out rights. California residents may have additional rights under applicable California privacy laws when the relevant statutory requirements apply.

We will not unlawfully discriminate against you for exercising an applicable privacy right. We may need to verify your identity before completing certain requests.

12. Cookies and Similar Technologies

The BuildFlox website and web application may use cookies, local storage, session storage, or similar technologies for authentication, security, preferences, language settings, session continuity, and core application functionality. If BuildFlox introduces non-essential analytics, advertising, or tracking technologies that require consent or additional disclosures, we will update our notices and provide appropriate controls where required.

13. Children's Privacy

BuildFlox is intended for businesses and professional users and is not directed to children under 13. We do not knowingly solicit children under 13 to create BuildFlox business accounts. If we learn that personal information has been collected from a child in a manner prohibited by applicable law, we will take appropriate steps to delete it.

14. International Processing

BuildFlox and its service providers may process or store information in the United States or other countries where they operate. Where applicable law requires safeguards for international transfers, we will use appropriate mechanisms as required.

15. Changes to This Privacy Policy

We may update this Privacy Policy as BuildFlox evolves, our service providers change, or legal requirements change. When we make material changes, we may provide additional notice through the Service, by email, or through another appropriate method. The effective date at the top of this Policy indicates when this version became effective.

16. Contact Us

For questions about this Privacy Policy, requests concerning your personal information, or other privacy-related inquiries, contact:

ZAK Labs LLC BuildFlox Email: info@buildflox.com