Bootstrapped VC backed

Privacy Policy

1. Information Collection

We collect information you provide directly to us when you:

Create an account
Use our service
Communicate with us

This may include your name, email address, and any other information you choose to provide.

2. Use of Information

We use the information we collect to:

Provide, maintain, and improve our services
Communicate with you about our services
Respond to your comments, questions, and requests
Monitor and analyze trends, usage, and activities in connection with our services
Detect, investigate, and prevent fraudulent transactions and other illegal activities
Comply with legal obligations

3. Information Sharing and Disclosure

We may share personal information as follows:

With your consent
With vendors, consultants, and other service providers who need access to such information to carry out work on our behalf
In response to a request for information if we believe disclosure is in accordance with any applicable law, regulation, or legal process
If we believe your actions are inconsistent with the spirit or language of our user agreements or policies, or to protect the rights, property, and safety of ShouldIBuildIt, our users, or others

Our service providers include:

Hetzner (Germany) as our cloud hosting provider.
Google (USA) LLC for AI services and analytics.
Mailjet (USA) for email processing and delivery

These providers process your data under strict data processing agreements with appropriate safeguards for international data transfers.

3.1 Legal Bases for Processing

We process your personal data under the following legal bases:

Contract fulfillment: To provide our services to you

Legitimate interests: For analytics and service improvement

Legal obligation: To comply with legal requirements

Consent: Where specifically required by law

3.2 Email Processing

We use Mailjet to handle our email communications. When processing emails, we share:

Email addresses
Email content and subject lines
Metadata (timestamps, delivery status, open rates)

Mailjet processes this data on US-based servers under strict data processing agreements that include Standard Contractual Clauses for international data transfers. You have the right to request information about your email data, opt-out of non-essential emails, and request deletion of your email data.

4. Data Security

We take reasonable measures to help protect personal information from loss, theft, misuse, and unauthorized access, disclosure, alteration, and destruction.

5. Data Retention

We store the information we collect about you for as long as is necessary for the purpose(s) for which we originally collected it. We may retain certain information for legitimate business purposes or as required by law.

6. Your Rights

You have the right to:

Access the personal information we hold about you
Request that your personal information be corrected or deleted
Object to or restrict our processing of your personal information
Request a copy of your personal information in a structured, commonly used, and machine-readable format

To exercise these rights, please contact us at support@shouldibuild.it.

7. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any changes by posting the new privacy policy on this page and updating the "Last Updated" date at the top of this policy.

8. Contact Us

If you have any questions about this privacy policy, please contact us at support@shouldibuild.it.

9. Data Location and International Transfers

We store and process your data on servers located in Germany through our service providers Hetzner and Mailjet. When we transfer your personal data outside of the European Economic Area (EEA), we ensure adequate protection through Standard Contractual Clauses (SCCs) with our service providers. These transfers are necessary for the performance of our contract with you and to provide our services effectively.

10. Supervisory Authority

If you are located in the European Union and believe we are unlawfully processing your personal information, you have the right to lodge a complaint with your local data protection supervisory authority.

Menu