BuildersJig ("we," "us") is a browser-based 3D woodworking shop simulator. This Privacy Policy explains what data we collect from you, why we collect it, who we share it with, and what choices you have.
If you have questions, contact us at support@buildersjig.com.
When you sign up, we collect:
When you use the application, we store the woodworking projects you create — parts, dimensions, materials, joinery, layouts, project names, and your notes — on our servers so you can come back to them.
See Section 4 for details on third-party AI providers.
For paid plans and credit purchases, billing is handled by Stripe. Stripe receives your name, email, payment card information, billing address, and transaction history. We receive a transaction record (amount, date, status, last four digits of the card) but never your full card details.
BuildersJig has two diagnostic systems so we can fix bugs:
SOS button (user-initiated). When you click SOS, you send us a diagnostic snapshot. It only fires when you press the button.
NormTelemetry (automatic). The Workshop Advisor monitors for crashes, repeated errors, performance drops, and failed operations. When Norm detects a problem, it sends a diagnostic payload automatically. You can turn this off in Settings.
Both collect the same data:
| Data | What it is |
|---|---|
| Part data | Dimensions, positions, rotations, material assignments, assembly relationships, modification history |
| Console logs | Last 200 log entries (log/warn/error/uncaught exceptions) with timestamps and stack traces |
| Screenshot | A PNG image of the 3D canvas at the moment of the report |
| Environment info | Browser user-agent, viewport size, WebGL renderer and vendor, Babylon.js version, current FPS, mesh counts |
| Project metadata | Project ID and project name |
| Your description (SOS only) | Free text you type into the SOS description field |
| Trigger reason (NormTelemetry only) | Which automated condition fired |
What we DO NOT collect, even in diagnostic payloads:
Our web server records standard request logs (IP address, timestamp, request URL, user-agent, response code) for operational and security purposes. These logs are retained for 90 days and then deleted or aggregated.
| Category | Why |
|---|---|
| Account info | To create and authenticate your account, send essential service messages |
| Project data | To save your work so you can come back to it; to display it back to you |
| AI interaction data | To generate the AI responses and renders you request; to maintain chat history |
| Billing information | To process payments, prevent fraud, comply with financial recordkeeping |
| Diagnostic data | To fix bugs, monitor performance, track stability — three reasons, that's the list |
| Technical access logs | Operational monitoring and security (detecting abuse, debugging outages) |
We do not use any of this data for advertising, profiling, behavioral targeting, or any purpose beyond making BuildersJig work and keeping the business running.
We share specific data with specific third parties, only as needed to operate the service. We do not sell data to anyone.
Sent: Your Norm chat messages and relevant project context. Why: To generate Norm's response. Governed by Anthropic's terms and privacy policy.
Sent: Your render prompt and a reference image of your scene. Why: To generate the photoreal image. Governed by OpenAI's terms and privacy policy.
Sent: Your name, email, billing address, payment card details (entered directly into Stripe's form), and transaction history. Why: To process subscription billing and top-ups. Governed by Stripe's terms and privacy policy.
Our application runs on commercial web hosting infrastructure operated by a reputable third-party provider. That provider has technical access to data at rest on their systems but does not access it in the ordinary course. We will update this section to name the specific provider once the production hosting environment is finalized.
We do not share data with advertising networks, analytics companies (we don't run third-party analytics — see Section 7), data brokers, or "partners." If we ever add a new third-party recipient, we will update this policy and notify you in the application before the change takes effect.
If we are compelled to disclose data by a valid legal order (subpoena, court order, lawful government request), we will comply with the law. We will tell you about the request unless legally prohibited from doing so.
| Category | Retention |
|---|---|
| Account info | For the life of your account. Deleted on account deletion (see Section 6). |
| Project data | For the life of your account. Deleted on account deletion. |
| AI chat history | For the life of your account, unless you delete individual conversations. |
| Photoreal renders | For the life of your account, unless you delete them. Renders may also be revoked under a dispute clawback — see our Terms of Service Section 9.3. |
| Billing records | Retained as required by financial recordkeeping law — typically 7 years in the US. These records may persist after account deletion to satisfy tax and audit requirements. |
| Diagnostic payloads (SOS and NormTelemetry) | 12 months from submission, then deleted. Earlier deletion available on request. |
| Technical access logs | 90 days, then deleted or aggregated. |
You have the following rights regarding your data:
You can request a copy of the data we hold about you. We will provide it in a reasonable machine-readable format within 30 days.
You can correct your email and other profile information directly in your account settings. For data you cannot edit yourself, contact us.
Your projects can be exported from within the application. For data you cannot export yourself, contact us.
You can request deletion of your account. We will delete:
We cannot delete:
Deletion is permanent. Once we have deleted your data, we cannot recover it.
You can disable NormTelemetry at any time from Settings. The SOS button only sends data when you actively press it; it does not need an opt-out.
We only send essential service messages and optional product updates. You can opt out of optional emails at any time using the unsubscribe link in any such message.
Contact us at the address in Section 14. We will respond within 30 days. EU/UK residents see also Section 11; California residents see also Section 12.
BuildersJig uses only essential cookies — specifically, a session cookie that keeps you logged in. We do not use third-party advertising cookies. We do not run third-party analytics scripts (Google Analytics, Meta Pixel, etc.) on the application. We do not track you across other websites.
Stripe sets its own cookies during checkout, governed by Stripe's privacy policy.
No analytics or tracking services are used. If this changes in the future, this Privacy Policy will be updated and you will be notified.
We take reasonable precautions to protect your data:
We do not claim to be Fort Knox — we are a small team. We take the reasonable precautions appropriate to a small SaaS handling woodworking project data and modest payment volume.
BuildersJig is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child under 13 has created an account, contact us and we will delete it.
For users between 13 and the age of majority in their jurisdiction, parental or guardian consent is required to create an account. See our Terms of Service Section 1.
BuildersJig is operated from the United States. If you use the service from outside the United States, your data will be transferred to and processed in the United States. By using BuildersJig, you consent to that transfer, subject to the additional protections described in Section 11 (for EU/UK residents) and Section 12 (for California residents).
If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, this section applies to you in addition to the rest of this Privacy Policy. Where this section conflicts with anything else in this Policy, this section controls for you.
BuildersJig is the data controller for personal data about EU and UK residents who use the service. You can reach us at support@buildersjig.com or by mail at 37 Coes Hill Road, Southwick, MA 01077, USA. We are a small operator and do not currently have an appointed EU/UK representative; if applicable law requires one in the future, we will appoint one and update this Policy.
We rely on the following lawful bases under Article 6 of the GDPR / UK GDPR:
We do not process special categories of personal data (Art. 9) and we do not engage in automated decision-making that produces legal or similarly significant effects on you.
The categories of personal data we collect are the same ones described in Section 2 of this Policy (account info, project data, AI interaction data, billing info, diagnostic data, technical access logs). That enumeration applies in full to EU and UK residents.
Under the GDPR and UK GDPR you have the following rights:
To exercise any of these rights, email support@buildersjig.com. We will respond within 30 days of receiving your request (extendable by a further two months for complex requests, with notice to you within the first 30 days). There is no charge for reasonable requests.
Because we operate from the United States, your personal data is transferred to the US when you use the service. We rely on the following safeguards for these transfers:
If you want a copy of the relevant SCCs or further information about the transfer safeguards, email support@buildersjig.com.
In some EU member states, the GDPR raises the age of digital consent to 16 (or as low as 13 depending on the member state's implementation). If you are in such a jurisdiction and below the local age of digital consent, you must have parental or guardian consent to use BuildersJig. See also Section 9 of this Policy and Section 1 of our Terms of Service.
If you are a California resident, this section applies to you in addition to the rest of this Privacy Policy. It is provided to comply with the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 ("CCPA/CPRA").
BuildersJig is a "business" under the CCPA/CPRA. We collect personal information about California residents who use the service.
In the 12 months preceding the date of this Policy, we have collected the following categories of personal information (using CCPA categories), mapped to the data described in Section 2:
| CCPA category | What we collect |
|---|---|
| Identifiers | Email address, account ID, IP address |
| Customer account info / Cal. Civ. Code §1798.80(e) info | Email address, hashed password, billing name and address (via Stripe) |
| Commercial information | Subscription plan, purchase history, credit balance, transaction records |
| Internet/network activity | Server access logs, browser user-agent, viewport size, WebGL renderer info (diagnostics) |
| Geolocation data | Approximate location inferable from IP address only — we do not collect precise GPS location |
| Audio/visual data | Screenshots of the 3D canvas in diagnostic payloads (SOS button and NormTelemetry) |
| Professional/employment info | Not collected |
| Education info | Not collected |
| Inferences | Not collected — we do not build profiles of you |
| Sensitive personal information | Not collected — we do not collect government IDs, financial account numbers (Stripe handles those), precise geolocation, racial/ethnic origin, religious beliefs, health data, biometrics, sexual orientation, or contents of mail/email/messages other than chat messages you voluntarily send to Norm |
We collect and use personal information for the purposes described in Section 3 of this Policy: account authentication, project storage, AI feature delivery, billing, fraud prevention, debugging, and security.
We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising. We have not done so in the 12 months preceding the date of this Policy.
We do not use or disclose sensitive personal information for purposes that would trigger your right to limit use under CCPA/CPRA § 1798.121.
You have the following rights:
Email support@buildersjig.com with your request. To protect you, we will need to verify your identity before fulfilling certain requests. Verification typically means confirming control of the account email and may include matching information you provide against information we already hold. For especially sensitive requests we may ask for a signed declaration under penalty of perjury that you are the consumer whose data is being requested.
Authorized agents. You may designate an authorized agent to make a CCPA/CPRA request on your behalf. The agent must provide written permission signed by you, and we may still ask you to verify your identity directly. A power of attorney under Cal. Probate Code §§ 4000–4465 is acceptable in lieu of a written permission, in which case identity verification is satisfied by the power of attorney itself.
Response time. We will confirm receipt within 10 business days and respond substantively within 45 days. We may extend the response window by an additional 45 days where reasonably necessary, with notice to you within the original 45-day window.
California Civil Code § 1798.83 (the "Shine the Light" law) does not currently apply to BuildersJig because we do not share personal information with third parties for those third parties' direct marketing purposes.
We may update this policy from time to time. If we make material changes — especially expanding what we collect, adding new third-party recipients, or changing retention periods — we will notify you in the application and by email at least 30 days before the change takes effect.
Minor non-material changes (typo fixes, clarifications) may be made without notice.
Privacy questions, data access requests, deletion requests:
Email: support@buildersjig.com
Mailing address: 37 Coes Hill Road, Southwick, MA 01077
Effective date: Effective upon publication.
BuildersJig · 37 Coes Hill Road, Southwick, MA 01077 · support@buildersjig.com