Skip to content
← Back to builttospec.ai

Privacy

Last updated September 13, 2026

This is a plain-language summary, not legal advice. Review it with a professional before relying on it.

This policy covers builttospec.ai, run by Built to Spec in Irvine, California. It explains what we collect when you visit the site, chat with SpecBot, fill out a form, or book a call, and who helps us process it.

What we collect

  • What you tell us. Your name, email, phone number, company, and project details when you use the contact form, the project request form, the newsletter signup, or the booking step.
  • Chat conversations. Every message you send to SpecBot and every reply it gives, plus details we pull from the conversation, such as your industry, the kind of project, and a budget range if you mention one.
  • Bookings. The time you pick and the name and email you book with.
  • Usage and device data. Pages you view, clicks, approximate location from your IP address, browser and device type, and referring site. If analytics are on, this includes session recordings of how you move through the site. We mask typed form fields and chat text in those recordings.
  • Security data. A one-way hash of your IP address and browser user agent, used for rate limiting and abuse prevention.

How we use it

  • To answer your questions, scope your project, and follow up.
  • To schedule calls and send booking confirmations.
  • To call, text, or email you about your project, when you give us a phone number or email for that.
  • To send the newsletter if you subscribe.
  • To understand how the site is used and make it better.
  • To keep the site secure and stop abuse.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

Cookies and similar technology

  • Needed for the site to work. A cookie that stores your privacy choice, and a browser storage entry that lets you resume a chat for 24 hours. These are always on.
  • Analytics. Google Analytics and PostHog set cookies and browser storage to count visits, measure how pages perform, and record sessions. You can turn these off.
  • Scheduling. When you open the booking calendar, Cal.com loads in a frame and may set its own cookies.

Vercel Web Analytics also counts page views. It does not use cookies and does not identify you.

Your analytics choices

On your first visit a banner lets you accept or reject analytics. You can change your choice any time with the Privacy choices link in the footer. If you reject, Google Analytics does not load and PostHog stops recording.

We honor Global Privacy Control. If your browser sends a GPC signal, we treat it as a request to opt out of analytics. Browsers also offer a Do Not Track setting. No common standard exists for how sites should respond to it, so we rely on GPC and the choices in the banner instead.

Service providers

These companies process data on our behalf to run the site. They may only use it to provide their service to us.

  • Anthropic, through the Vercel AI Gateway, powers SpecBot and reads your chat messages to reply.
  • Vercel hosts the site and provides Web Analytics.
  • Supabase stores chats, leads, form submissions, and bookings.
  • Google Analytics and PostHog provide site analytics and session recordings.
  • Langfuse stores chat logs so we can monitor and fix SpecBot.
  • Cal.com handles scheduling.
  • Resend sends booking confirmations, newsletter emails, and internal alerts.
  • Upstash handles rate limiting using hashed identifiers.

How long we keep it

The chat you can resume in your browser expires after 24 hours. Conversations, contact details, project details, and bookings stay in our records so we can follow up and do the work, until you ask us to delete them. Each analytics provider keeps its data under its own retention settings.

Your rights

You can ask us what personal information we hold about you, ask us to correct or delete it, and opt out of calls, texts, or emails. Reply STOP to any text, use the unsubscribe link in any email, or email builders@builttospec.ai. California residents have these rights under state law, and we extend them to everyone. We will not treat you differently for using them.

Children

The site is for businesses. We do not knowingly collect information from anyone under 16.

Changes

If we change this policy, we will update the date at the top of this page.

Contact

Questions about privacy? Reach us at builders@builttospec.ai.