Privacy in Builder
A short summary of what Builder stores and why. We will publish the full terms before paid plans launch.
Who handles the data
Atlayo Overseas s.r.o., reg. no. 29645433. Contact for data protection: privacy@atlayo.com.
The waiting list
Only if you sign up yourself: your email, the industry you chose, an optional description, language, where you came from, the time of consent and a shortened, irreversible fingerprint of your IP address used against form abuse.
The basis is your consent. We write to you only about Builder news. You can withdraw consent and have the data deleted by email.
Account and sign-in
You sign in with Atlayo ID. From it we take the account identifier and the details the account contains: email, name, phone and photo. We use them to sign you in and to show your name in the app.
Sites and images
We store the content of your sites, version history and uploaded images. On upload we strip metadata such as EXIF location from photos and re-encode the image.
Messages sent through the contact form on a published site are stored (name, email, text, shortened IP fingerprint) so the site owner can read them in the editor.
A deleted site stays in the deleted list for 30 days and is then removed.
The shop on a published site
When a customer places an order in a shop, Builder stores it: name, email, phone, delivery address, for a company purchase also the company name, company ID and VAT ID, a note, the items, amounts, the chosen shipping and payment, and a shortened, irreversible fingerprint of the IP address used against abuse. The invoice issued for the order is stored with it.
The controller of this customer data is the seller, that is the site owner. Builder only keeps it for them and shows it in their shop management. A customer who wants access or deletion contacts the seller, whose details are on the invoice.
The customer enters card details on the payment gateway’s page (Atlayo Pay or Stripe). Builder never sees or stores them and only receives the status and amount of the payment from the gateway. Gateway keys that the seller enters are stored encrypted.
The site remembers the cart in a cookie that holds only products and quantities and lasts 30 days. It is needed for the cart to work and holds no personal data.
The order confirmation to the customer and the notification to the seller are sent by email if mail sending is set up on the server. Until then the messages wait in a queue.
The seller needs orders and invoices for accounting, so a site that has orders is never fully removed after deletion.
The Ayo assistant
Today Ayo works from rules on our own server and your instructions are not sent anywhere else. When we turn on a language model we will update this page and say who receives what.
Cookies and browser storage
The landing page uses no cookies. It remembers only your light or dark mode choice in browser storage. In the app we use one session cookie needed for sign-in and form protection.
We use no advertising or third-party analytics cookies. We count only anonymous events, for example a visit to the landing page: the day, event name and language are stored, with no cookies and no IP address.
Your rights
You can ask for access to your data, correction, deletion or restriction of processing, and withdraw consent. Write to privacy@atlayo.com. You also have the right to complain to your data protection authority.