Who we are
Wuilder ("Wuilder", "we", "us") makes software that designers use to run client projects: agreements, milestone invoices, questionnaires, design reviews, meetings and file handover. This policy explains what personal data we handle, why, and the choices you have.
There are two kinds of people whose data we handle:
- Designers and their teammates — people who sign up for a Wuilder account. For their data, Wuilder is the controller.
- Clients of designers — people a designer invites into a project. For their data, the designer is the controller and Wuilder acts as a processor on the designer's behalf.
What we collect
Account information. Your name, email address, password (stored only as a secure hash) or the identity you sign in with, your studio name, logo and brand colours.
Project content. Everything you and your clients add to a project: project names and descriptions, agreement text and signatures, questionnaire questions and answers, design versions, comments, files, meeting details, invoice amounts and payment links. This content belongs to the designer.
Client details. The name and email address of each client a designer invites, plus what they do in the portal (signing, answering, approving, marking an invoice as paid).
Payments. Clients pay designers through the designer's own payment links. Wuilder never sees or stores card or bank details for those payments. When you pay for a Wuilder subscription, our payment provider handles your card details; we receive only the result and limited billing details.
Connected services. If you connect Google Calendar, we store an access token so we can create meetings with a Meet link on your calendar. If you connect Google Drive, we use the drive.file permission, which only lets Wuilder see the files and folders it creates.
Usage and device data. Log data such as IP address, browser type, pages visited and timestamps, used to keep the service secure and working. We use only the cookies needed to sign you in and keep your session; we do not use advertising cookies.
Messages to us. When you use our contact form or email us, we keep your message and contact details so we can reply.
How we use it
- To provide the service: run your projects, show the client portal, send notifications and emails you trigger.
- To keep Wuilder secure: authentication, preventing abuse, rate-limiting and investigating incidents.
- To support you and reply to your messages.
- To improve the product, using aggregated or de-identified information.
- To meet legal obligations, such as tax and accounting records for subscriptions.
We do not sell personal data, and we do not use project content or client data to train machine-learning models.
Legal bases (EEA, UK and similar laws)
We rely on contract (to provide the service you signed up for), legitimate interests (security, product improvement and replying to enquiries — balanced against your rights), consent where we ask for it (for example connecting Google), and legal obligation (for records we must keep).
Who we share it with
We use a small number of service providers ("sub-processors") to run Wuilder, bound by contracts that require them to protect your data:
| Provider purpose | What they handle |
|---|---|
| Database, authentication and file storage | Account and project data, uploaded files |
| Hosting | Application traffic and logs |
| Transactional email | Names and email addresses, notification content |
| Subscription payments | Billing details for Wuilder plans |
| Google (only if you connect it) | Calendar events and Drive files you create through Wuilder |
We share data with clients and teammates only as the designer configures it — for example, a teammate sees only the projects and pages they are given access to. We may disclose information if required by law or to protect the rights and safety of our users.
How long we keep it
We keep account and project data for as long as your account is active. When you delete a project or file, it is removed from the live service and purged from backups within 30 days. When you close your account, we delete your data within 30 days, except where we must keep limited records (such as invoices for our own subscriptions) for legal reasons.
Security
Data is encrypted in transit (HTTPS) and at rest. Access between designers, teammates and clients is enforced at the database level, client portal links are signed and expire, and files are served through short-lived signed URLs. No system is perfectly secure, so please use a strong password and tell us right away if you suspect a problem.
Your rights
Depending on where you live, you can ask to access, correct, export or delete your personal data, and to object to or restrict some processing. Designers can export and delete most data directly in the dashboard. For anything else, email us — we respond within 30 days.
If you are a designer's client, your data is controlled by that designer. Please contact them first; if you contact us, we will pass your request on and help them respond.
You can also complain to your local data-protection authority.
International transfers
Our providers may process data outside your country. Where required, we rely on safeguards such as the European Commission's Standard Contractual Clauses.
Children
Wuilder is a business tool and is not intended for anyone under 16. We do not knowingly collect children's data.
Changes to this policy
If we make material changes we will update the date at the top of this page and, for significant changes, notify account owners by email before they take effect.
Contact
Questions or requests about privacy: legal@wuilder.app.