Privacy Policy

01Who We Are and Scope

This policy explains how iBuilder handles the personal data of people who use the platform and of those who visit sites built with it, in accordance with Argentine Personal Data Protection Law 25.326 and its complementary rules. There are two distinct roles. For your account, billing and editor-usage data, iBuilder is the data controller. For the data your visitors and customers leave on your site (inquiries, orders, comments), you are the controller as the site owner, and iBuilder acts as a processor that stores it and delivers it to you to manage.

02Data We Collect From You

When you use iBuilder we process this data:

• Account: first and last name, email address, password (stored only as an irreversible hash), password history, failed sign-in attempts, 2FA data (secret and recovery codes, also protected), the date you confirmed your email and a record of when you accepted the Terms and the Policy (with the version).
• Business profile: business or project name, logo, industry, stage and goal, phone, country and social links, which you fill in when signing up or in your profile.
• Your sites' content: visual configuration, texts, images, products and prices, articles, WhatsApp quick questions, subdomain and custom domain, drafts and previews.
• Subscription and payments: plan, status, dates, and for each charge the amount, currency, status and the Mercado Pago payment identifier. We do not store card numbers or bank details.
• AI assistant: the conversation messages, the summary of your project, the answers you give and the change proposals generated.
• Contact and iBuilder newsletter: name, email, topic and message from the platform contact form; and, if you subscribe, your email, language and subscription status.
• Technical data: IP address, browser and device type, access dates and error and security logs, needed to operate and protect the service.

03Data From Your Sites' Visitors

The sites you publish may collect data from your visitors and customers. We store it for you and do not use it for our own purposes:

• Contact inquiries: the name, email address and message a person writes in your form, delivered to your dashboard and your email.
• Cart orders: the products, quantities and total of the inquiry. The message is sent through WhatsApp from the customer's device, so that exchange is governed by WhatsApp's policies. iBuilder does not receive your customers' payment data.
• Article comments: the commenter's name and, optionally, email.

04What We Use Data For

We process data only for legitimate purposes compatible with the service:

• Create your account, authenticate you, let you edit, save, preview and publish your sites, and host them on your subdomain or custom domain.
• Email you the inquiries and notices from your sites, confirmations, password recovery and security alerts.
• Manage subscriptions, charges and their statuses through Mercado Pago, and enable or limit features according to your plan.
• Understand your project and generate design proposals with the artificial intelligence assistant.
• Answer your questions and support requests, and remind you to complete your registration.
• Send the iBuilder newsletter to those who subscribe, with one-click unsubscribe.
• Prevent fraud, abuse and unauthorized access, rate-limit requests and keep the service intact.
• Understand how features are used to fix bugs and improve the platform, using aggregated data whenever possible.
• Comply with legal obligations, resolve disputes and respond to requests from competent authorities.

05Basis for Processing and Consent

We process your data because it is necessary to perform the service contract you requested, because you gave us free, express and informed consent (for example, when subscribing to the newsletter, which you can withdraw at any time) or because we must comply with a legal obligation. The data we ask for is what is needed for those purposes; some profile fields are optional.

06Who We Share It With

We do not sell your data or use it for third-party advertising. We share it only with providers that help us deliver the service and process it on our instructions:

• Mercado Pago: processes payments and subscriptions; it receives the data needed for the payment under its own privacy policy.
• Artificial intelligence provider (Google Gemini): receives the messages and content needed to generate the assistant's proposals.
• Email provider: delivers transactional and newsletter messages.
• Infrastructure and network: hosting, databases, file storage, content delivery, DNS and certificates.
• Authorities: when required by law or court order, or to protect rights, safety and the integrity of the platform.

07International Transfers

Some of our providers, such as the artificial intelligence or infrastructure ones, may store or process data outside Argentina. In those cases we require adequate security measures and contractual commitments, and we limit the data sent to what each feature needs.

08Cookies and Local Storage

iBuilder uses only what is essential to work, and includes no advertising cookies or third-party analytics or tracking tools:

• Session cookie: keeps you signed in. It is HttpOnly, with a SameSite restriction and the Secure attribute where applicable, and is removed when you sign out.
• Preferences: language and light or dark theme, stored in your browser.
• Local storage: the visitor's shopping cart, editor tutorial progress and a flag for the intro animation. They are stored only on your device and you can clear them from your browser.

09Security

We apply reasonable technical and organizational measures to protect your data. Passwords are stored with a one-way hash (bcrypt) and the session travels in an HttpOnly cookie. All communications use TLS encryption. We offer 2FA with single-use codes, temporary lockout after failed attempts, request rate limiting against abuse and role-based access control. Internal services authenticate each other with their own keys. No system is infallible: if an incident affects your data, we will tell you and take the necessary measures.

10Isolation Between Accounts (Multi-Tenant)

Each account operates in a separate data space. The inquiries, orders and content of your sites are accessible only by you as the owner. iBuilder staff access information only when necessary for support, security or maintenance, and under a confidentiality obligation.

11How Long We Keep It

We keep your data while your account is active. When you delete it, we erase or anonymize your personal data and your sites' content within a reasonable time, except records we must keep for legal, accounting or fraud-prevention obligations (for example, payment history). Newsletter unsubscribe records are kept so we do not write to you again. Any backups are rotated periodically and deleted data disappears from them over time. Ongoing product imports are automatically discarded when they expire.

12Your Rights

You can exercise at any time your rights of access, rectification, updating and deletion of your data, and withdraw your consent, by writing to our privacy email (there is no account-deletion button in the dashboard yet: when you ask, we close your account and sites and cancel any active subscription). We will respond within the periods set by Law 25.326. Access is free of charge at intervals of no less than six months, unless a legitimate interest is shown. If you are a visitor of a site built with iBuilder and want to exercise your rights over what you left there, contact the site owner; if you get no reply, write to us and we will help. The Agency for Access to Public Information, as the supervisory authority of Law 25.326, is empowered to handle complaints and claims from people whose rights are affected by breaches of personal data protection rules.

13Minors

iBuilder is intended for people over 18. We do not knowingly collect data from minors. If you believe a minor has given us data, write to us and we will delete it.

14Changes to This Policy

We may update this policy to reflect changes in the service or the law. We will publish the current version with its date and, for significant changes, notify you by email or within the platform.

15Privacy Contact

To exercise your rights or ask about how your personal data is processed, write to us at: privacy@ibuilder.site