Privacy Policy

Last updated: September 1, 2026

1. Who we are

StickBuilt is operated by BlockBridge Funding, Inc., operating as StickBuilt ("StickBuilt," "we," "us"). This policy describes how we handle information when you use StickBuilt — the site and application at stickbuilt.app (the "Service"). The Blockbridge Funding lender website has its own privacy policy; this one covers the StickBuilt product.

2. Information we collect

Account information. When you create an account we collect your email address. Sign-in is handled by Google Firebase Authentication: if you use a password, Firebase stores it and it never reaches our servers; if you sign in with Google, we receive your email and basic profile information from your Google account.

Property research you submit. The addresses you look up and the details you provide about a property — renovation scope, condition, budget, and similar inputs — are stored with your account, along with the reports the Service generates from them, so you can retrieve your work.

Payment information. When paid subscriptions are active, payments are processed by Stripe. Card details go directly to Stripe and are never stored by us; we keep your plan and subscription status. During the beta period there is no billing and we collect no payment information.

Usage information. We record how the Service is used under your account — reports run, features used, timestamps, and the computational cost of requests — to enforce plan limits, rate limits, and abuse protections.

Technical information. Our infrastructure providers (Google Cloud and Vercel) keep standard server logs, which include IP address, browser type, and the pages or endpoints requested.

3. What we do not do

We do not sell your personal information, and we do not share it for advertising. The Service currently uses no advertising trackers and no third-party analytics. We do not buy data about you from data brokers. The property and market data behind our estimates comes from public records and commercial market sources and is about properties, not about you.

4. How we use information

We use the information above to operate the Service: to authenticate you, generate and store your reports, enforce plan quotas and rate limits, secure the Service and prevent abuse, respond when you contact us, and satisfy legal obligations. We also look at usage patterns in aggregate to improve the product. Our valuation and zoning models are built from public records and market data — they are not trained on your personal information.

5. Service providers

We share information only with the providers that run the Service, and only what each needs: Google Cloud and Firebase (application hosting, authentication, database, and report storage), Stripe (payment processing, when billing is active), Vercel (website hosting), and OpenAI (portions of zoning-report analysis — it receives property and zoning text for the report being generated, never your account information). These providers process data on our behalf under their own security and privacy commitments. We may also disclose information if required by law, or as part of a merger, acquisition, or sale of assets, in which case this policy would continue to apply to it.

6. Cookies and browser storage

The Service uses only what is needed to keep you signed in: Firebase stores your session in your browser's local storage (IndexedDB), and our hosting providers may set strictly necessary cookies for security and load balancing. We set no advertising or analytics cookies. When billing is active, Stripe sets cookies on its checkout pages for fraud prevention. If we ever add analytics, we will update this policy first and say so.

7. Retention

We keep your account information, property inputs, and generated reports for as long as your account is active. Infrastructure logs rotate on a short schedule (typically around 30 days). If you delete your account or ask us to, we delete your personal information within a reasonable period, except records we must keep for legal, billing, or security reasons. Stripe and Firebase retain records they process per their own policies.

8. Your rights and choices

You can ask us to access, correct, export, or delete the personal information we hold about you by emailing hello@blockbridgefunding.com. We honor reasonable requests from any user regardless of whether a particular privacy law applies to us or to you, and we respond within 30 days. You can change your password and email through your account, and you can stop using the Service at any time.

9. Security

The Service runs on Google Cloud with encryption in transit, access limited to those who need it, and monitoring on production systems. No online service can guarantee perfect security, but we work to protect your information and will notify you as required by law if a breach affects it.

10. Children

The Service is for users 18 and older. We do not knowingly collect information from anyone under 18; if you believe we have, contact us and we will delete it.

11. Changes to this policy

We may update this policy as the Service or the law changes. Material changes will be communicated through the Service or by email, and the date at the top always reflects the current version.

12. Contact

Questions about privacy: hello@blockbridgefunding.com.