Privacy Policy

The data controller responsible for the processing of your personal data on Buildwiser is:

• Account information: Email address and hashed password upon registration. If signing in via Google, only basic identity data (name, email) provided by Google OAuth.
• User preferences: Selected language (e.g. English, Dutch, French, German), country/market (e.g. Belgium, Netherlands), currency (EUR/USD), interface theme, and default PC building preferences.
• PC builds & configurations: Selected hardware components, budget specifications, configuration titles, and generated public share links.
• Technical & diagnostic logs: IP address, browser user-agent, operating system, and timestamp used strictly for server stability, DDoS mitigation, and system security.

We process your personal data only on established legal grounds under Article 6 of the GDPR:

• Performance of Contract (Art. 6(1)(b) GDPR): Creating your account, computing PC component compatibility, and saving your custom configurations.
• Legitimate Interests (Art. 6(1)(f) GDPR): Maintaining website security, preventing fraudulent activity, fixing errors, and optimizing platform performance.
• Legal Obligations (Art. 6(1)(c) GDPR): Compliance with applicable Belgian commercial, accounting, tax, or law enforcement mandates.
• Consent (Art. 6(1)(a) GDPR): Where you provide explicit consent for optional features. You may withdraw consent at any time without detriment.

In accordance with Article 129 of the Belgian Electronic Communications Act of 13 June 2005, Buildwiser utilizes only strictly necessary storage:

Buildwiser does NOT deploy third-party tracking, advertising, or profiling cookies.

In compliance with Book VI of the Belgian Code of Economic Law on market practices and consumer protection, purchase buttons directing to retailers (such as Amazon, tagged with buildwiser-20) may constitute affiliate links. Buildwiser may earn a commission on qualifying purchases at zero additional cost to you. We do not transmit your account credentials or personal information to retailers.

Your account data and saved configurations are retained as long as your account remains active. If you request account deletion, all personal data is irrevocably removed within 30 calendar days, save for records required by statutory legal or fiscal obligations. Transient server security logs are purged within 90 days.

Under Articles 15 to 22 of the GDPR, you have the following enforceable rights:

• Right of Access: Obtain confirmation and copies of your personal data.
• Right to Rectification: Correct any inaccurate or incomplete data.
• Right to Erasure ('Right to be Forgotten'): Request deletion of your data when no longer needed.
• Right to Restriction: Restrict processing under certain legal conditions.
• Right to Data Portability: Receive your data in a structured, commonly used, machine-readable format.
• Right to Object: Object to processing based on legitimate interests.

If you have concerns regarding how Buildwiser processes your personal data, you have the statutory right to lodge a complaint with the lead supervisory authority in Belgium:

All data in transit is encrypted using modern TLS (HTTPS). Authentication passwords are stored exclusively as salted cryptographic hashes within Supabase infrastructure protected by Row Level Security (RLS). Saved configurations are confidential to your account unless you explicitly generate a public share link.

We may revise this privacy policy periodically to reflect platform enhancements or statutory updates. The timestamp at the top indicates the effective date of the latest version.