Data Security

Your business data and your team's information are stored securely. Here is exactly how.

Where your data is stored

Build Procedures uses Supabase for data storage — a trusted platform used by thousands of businesses worldwide. Your data is stored in a PostgreSQL database hosted in a secure data centre.

Supabase is SOC 2 Type 2 certified and GDPR compliant.

What data we store

We store the minimum necessary to run the product:

• Your name, email address, and business name
• The procedures and guides you create
• The names and email addresses of team members you send guides to
• Acknowledgement records — who read what and when

We do not store payment card details. Payments are handled entirely by Stripe, which is PCI DSS Level 1 certified.

Media files

Photos, voice notes, and videos you upload are stored on Cloudflare R2 — a secure object storage service. Media files are served via a private custom domain and are not publicly indexable.

Who can see your data

• You — you have full access to your account data
• Your team members — they can only see the specific guides you send them via their unique link
• Build Procedures — we access data only to provide the service and troubleshoot issues
• Nobody else — we do not sell, share, or rent your data to any third party

Passwords

Build Procedures does not use passwords. Sign in is handled via a one-time code sent to your email address. This means there is no password to steal or forget.

Deleting your data

You can request deletion of your account and all associated data at any time by emailing support@mail.buildprocedures.com. We will process the request within 30 days.

Questions

If you have specific security questions, contact us at support@mail.buildprocedures.com.