Privacy Policy

Last Updated: September 6, 2026

BuildX (“BuildX“, “we“, “us“, or “our“) is a business technology platform operated by PT Archiola Raya Cipta, providing artificial intelligence, business automation, ERP, CRM, customer service, social media management, marketing, project management, and other business productivity solutions.

This Privacy Policy explains how we collect, use, process, store, disclose, and protect information when you access or use the BuildX website, applications, services, integrations, APIs, AI Employees, and related services (collectively, the “Services“).

By accessing or using BuildX, you acknowledge that you have read and understood this Privacy Policy.

1. Information We Collect

Depending on how you use BuildX, we may collect the following categories of information.

1.1 Account Information

When you create or manage a BuildX account, we may collect:

Full name
Business or company name
Email address
Telephone or WhatsApp number
Job title or role
Country and location information
Login credentials and authentication information
Account preferences
Subscription and plan information

1.2 Business and ERP Data

When you use BuildX ERP, CRM, AI Employee, project management, finance, HR, procurement, inventory, sales, or related modules, you may submit business information such as:

Customer and supplier information
Employee information
Project information
Products, materials, and inventory information
Purchase requests and purchase orders
Invoices and transaction records
Financial and accounting information
Sales opportunities and CRM records
Project schedules and progress information
Documents, reports, drawings, and files
Other business information uploaded or generated by users

For business data uploaded by a customer, the customer remains responsible for ensuring that it has the appropriate legal basis and authorization to provide such information to BuildX.

1.3 AI and Conversation Data

When you interact with BuildX AI features, including AI Employees, AI Chat Agents, AI Customer Service, AI Social Media Manager, or other AI-powered functionality, we may process:

Prompts and instructions
Questions and responses
Customer conversations
AI-generated content
Workflow instructions
Files submitted for AI processing
Conversation history
Relevant business context required to perform requested tasks

This information may be transmitted to third-party artificial intelligence or infrastructure providers when necessary to deliver the requested functionality.

1.4 Connected Accounts and Integrations

BuildX may allow you to connect third-party services such as:

Google
Gmail
Google Drive
Microsoft
Outlook
WhatsApp
Meta / Facebook
Instagram
Other messaging, social media, business, productivity, or cloud services

When you connect a third-party account, BuildX may receive information authorized through the permissions or OAuth scopes you approve.

Depending on the integration, this may include:

Account identity
Email address
Basic profile information
Mailbox metadata
Email messages required to provide requested functions
File metadata
Social media account information
Messages and conversations
Page or business account information
Access tokens and authorization credentials

BuildX will access such information only to the extent required to provide the features you enable and subject to the permissions granted by you.

You may revoke connected-account access through BuildX or the relevant third-party provider.

1.5 Communications Data

If you communicate through BuildX using email, WhatsApp, social media, or other channels, we may process:

Sender and recipient information
Message content
Message timestamps
Attachments
Delivery and response information
Communication history

1.6 Payment and Billing Information

When you subscribe to a paid BuildX plan, we may collect:

Billing name
Company billing information
Billing address
Transaction details
Subscription history
Payment status

Payment card or banking information may be processed directly by third-party payment processors. BuildX may not directly store complete payment card credentials.

1.7 Technical and Usage Information

We may automatically collect technical information when you use our Services, including:

IP address
Browser type
Device type
Operating system
Device identifiers
Date and time of access
Pages and features used
Session information
Error logs
Application logs
API activity
Login records
Security events
Referring URLs

We use this information to operate, secure, maintain, analyze, and improve BuildX.

2. How We Use Information

We may use information collected through BuildX to:

Create and manage user accounts
Provide BuildX Services
Operate ERP, CRM, AI Employee, AI Chat, social media, marketing, and other functionality
Process user instructions and AI requests
Automate business workflows
Connect BuildX with authorized third-party platforms
Send messages or communications requested by users
Provide customer support
Manage subscriptions and billing
Improve product functionality and user experience
Diagnose technical issues
Monitor application performance
Maintain security and prevent unauthorized access
Detect fraud, abuse, spam, or misuse
Maintain audit and activity logs
Comply with legal and regulatory obligations
Enforce our agreements and Terms of Service
Protect BuildX, our customers, users, and third parties

3. AI Processing

Certain BuildX features use artificial intelligence and machine-learning technologies.

AI systems may process information provided by users to:

Generate responses
Summarize information
Analyze business information
Extract structured data
Generate reports
Prepare marketing content
Respond to customers
Assist with business workflows
Recommend actions
Automate user-configured processes

AI-generated content may contain inaccuracies. Customers remain responsible for reviewing important outputs before relying on them for financial, contractual, employment, regulatory, safety-critical, or other significant decisions.

Where BuildX uses third-party AI providers, only information reasonably required to deliver the relevant AI functionality will be transmitted to those providers, subject to applicable agreements and safeguards.

4. Customer Data and Roles

Where a business customer submits personal information relating to its employees, customers, vendors, contractors, leads, or other individuals to BuildX, the business customer may act as the Personal Data Controller, while BuildX may act as a Personal Data Processor on behalf of that customer.

BuildX processes such information according to:

The customer’s instructions
The applicable service agreement
This Privacy Policy
Applicable data protection laws

Customers are responsible for ensuring that they have an appropriate legal basis to collect and process personal information uploaded to BuildX.

5. Legal Basis for Processing

Where applicable, BuildX may process personal information based on:

Consent
Performance of a contract
Steps requested before entering into a contract
Compliance with legal obligations
Legitimate interests
Protection of vital interests
Other lawful grounds permitted under applicable laws

Where consent is the applicable basis, you may withdraw your consent subject to applicable law and technical limitations.

6. How We Share Information

We do not sell personal information.

We may disclose information to trusted third parties when reasonably necessary to operate BuildX.

These parties may include:

Cloud hosting providers
Database and infrastructure providers
Artificial intelligence service providers
Email service providers
Messaging service providers
Analytics providers
Authentication providers
Payment processors
Customer support technology providers
Cybersecurity providers
Professional advisers
Government or regulatory authorities where legally required

Service providers are permitted to process information only for authorized purposes and subject to appropriate contractual, confidentiality, and security obligations where applicable.

7. Google User Data

When users connect a Google account to BuildX, we access Google user data only according to the permissions authorized by the user.

Google data may be used to provide features requested by the user, such as:

Account authentication
Email functionality
Email campaign functionality
Customer communication
File or document integrations
Google Drive-related features
Business automation workflows

BuildX will not use Google user data for unrelated advertising purposes.

Users can revoke BuildX access from their Google account permissions at any time.

Our use and transfer of information received from Google APIs will comply with applicable Google API Services User Data Policy, including applicable Limited Use requirements.

8. Microsoft User Data

When users connect Microsoft services, such as Microsoft 365 or Outlook, BuildX may access authorized account information necessary to provide requested features.

This information is processed only according to the permissions granted by the user and may be used for functions such as:

Authentication
Sending email
Reading permitted email information
Business workflow automation
Customer communications

Users may revoke access through their Microsoft account settings.

9. Meta, WhatsApp, Facebook, and Instagram Data

BuildX may integrate with Meta services including WhatsApp, Facebook, and Instagram.

Depending on the permissions granted, BuildX may process:

Business account information
Page information
Messaging information
Customer messages
Social media comments
Social media content
Campaign information
Account metadata

Such information is used only to provide requested BuildX functionality, including AI customer service, messaging, social media management, marketing automation, analytics, and related business workflows.

Users remain responsible for complying with Meta’s applicable platform policies and applicable anti-spam, marketing, and communications laws.

10. Email and Communication Services

BuildX may allow users to connect authorized mailboxes or communication channels.

When a user instructs BuildX to send communications on their behalf, BuildX may process the necessary sender, recipient, message, and authentication information.

Customers are responsible for ensuring that their communications comply with applicable laws, including requirements relating to consent, marketing communications, spam, and privacy.

BuildX reserves the right to limit, suspend, or terminate communication functionality where abuse, spam, fraud, or platform-policy violations are detected.

11. Data Retention

We retain personal information only for as long as reasonably necessary for:

Providing the Services
Maintaining customer accounts
Fulfilling contractual obligations
Security and fraud prevention
Resolving disputes
Maintaining legitimate business records
Complying with legal and regulatory requirements

Retention periods may vary depending on the type of information and the purpose for which it is processed.

When information is no longer required, we may delete, anonymize, or securely dispose of it, subject to technical backup cycles and applicable legal obligations.

12. Data Security

BuildX implements reasonable technical and organizational safeguards designed to protect information against:

Unauthorized access
Unauthorized disclosure
Misuse
Loss
Destruction
Alteration
Cybersecurity threats

Security measures may include:

Authentication and authorization controls
Role-based access controls
Encryption during transmission where appropriate
Secure infrastructure
Security logging
Monitoring
Backup procedures
Vulnerability management
Access restrictions
Internal security procedures

However, no internet-based service or electronic storage method can guarantee absolute security.

Users are responsible for protecting their account credentials and for notifying BuildX promptly if they suspect unauthorized account activity.

13. International Data Transfers

BuildX may use cloud, infrastructure, AI, communication, analytics, and other service providers located outside Indonesia.

As a result, information may be processed or stored in countries other than the country where you are located.

Where required, BuildX will implement appropriate measures for cross-border transfers in accordance with applicable data protection laws.

14. Your Privacy Rights

Subject to applicable law, you may have rights relating to your personal information, including the right to:

Obtain information about how your personal data is processed
Request access to your personal data
Request correction of inaccurate information
Request completion or updating of information
Withdraw consent where processing is based on consent
Request deletion or destruction of personal information where legally applicable
Request termination or restriction of processing in applicable circumstances
Object to certain processing
Obtain information about parties receiving your personal information
Request a copy of your personal information
Exercise other rights granted by applicable data protection laws

Requests may require identity verification before they can be processed.

Where BuildX processes personal information on behalf of a business customer, requests concerning that information may need to be directed to the relevant business customer as the data controller.

15. Cookies and Similar Technologies

BuildX may use cookies, local storage, pixels, analytics technologies, and similar tools to:

Keep users signed in
Remember settings
Maintain application functionality
Understand product usage
Measure website performance
Improve the Services
Detect security threats
Measure marketing performance

Where required by law, users may be provided with controls regarding non-essential cookies.

Browser settings may also allow users to limit or delete cookies.

Disabling certain cookies may affect BuildX functionality.

16. Analytics

BuildX may use analytics services to understand how users interact with our website and applications.

Analytics information may include:

Device information
Browser information
Approximate location based on IP address
Pages viewed
Buttons or features used
Session duration
Referral information

This information helps us improve BuildX products, performance, and user experience.

17. Automated Processing

Certain BuildX features may analyze information automatically or provide AI-generated recommendations.

Unless expressly agreed otherwise, BuildX AI tools are intended to assist users rather than independently make legally binding decisions about individuals.

Customers should maintain appropriate human review when using AI in areas that could significantly affect individuals, including employment, financial, contractual, compliance, or similar decisions.

18. Children’s Privacy

BuildX is designed primarily as a business and professional platform and is not intended for use by children unless expressly permitted under applicable laws and under appropriate supervision or authorization.

We do not knowingly request children to provide personal information for ordinary BuildX business accounts.

If we become aware that children’s personal information has been collected improperly, we may take steps to delete or restrict that information as required by applicable law.

19. Confidential Business Information

Information submitted to private BuildX workspaces remains associated with the applicable customer account.

BuildX does not claim ownership of customer business data merely because the data is processed through the Services.

Customers retain their rights to their uploaded business data subject to the BuildX Terms of Service and applicable law.

20. Security Incidents and Data Breaches

If BuildX identifies a personal data breach, we will investigate the incident and take reasonable measures to mitigate its impact.

Where required by applicable law, BuildX will provide notifications to affected parties and/or competent authorities within applicable legal timeframes.

21. Business Transfers

If BuildX or its business is involved in a merger, acquisition, financing, restructuring, sale of assets, or similar transaction, information may be transferred as part of that transaction.

Any successor will remain subject to applicable privacy and data protection obligations.

22. Third-Party Websites and Services

BuildX may contain links or integrations to third-party websites and services.

BuildX is not responsible for the privacy practices of third parties that operate independently from BuildX.

We recommend reviewing the applicable privacy policies of those services before providing information to them.

23. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect:

Changes to BuildX Services
New integrations
Changes in technology
Changes in our business operations
Regulatory or legal requirements

The latest version will be published on our website with an updated “Last Updated” date.

Where changes are material, we may provide additional notice where required.

24. Governing Privacy Regulations

BuildX processes personal information in accordance with applicable privacy and data protection regulations.

For users and operations in Indonesia, this includes applicable Indonesian data protection regulations, including Law of the Republic of Indonesia No. 27 of 2022 concerning Personal Data Protection (UU Pelindungan Data Pribadi) and applicable implementing regulations.

Depending on the customer’s location and the applicability of foreign laws, additional privacy requirements may apply.

25. Contact Us

For privacy questions, requests, complaints, or concerns regarding this Privacy Policy or BuildX’s processing of personal information, please contact:

BuildX
Operated by PT Archiola Raya Cipta
Website: https://buildxapp.net

Privacy Contact:
Email: [privacy@buildxapp.net]

Please include sufficient information for us to identify your account and understand your request.