Legal
Privacy Policy
Last updated October 11, 2026
This is a draft published ahead of launch and is still being reviewed. It describes how Builder Falcon works today.
What Builder Falcon collects when you use the website, the dashboard and the Chrome extension, why we use it, who else handles it, and what you can ask us to do with it.
Who we are
Builder Falcon runs Falcon, an AI agent that finds public conversations where your business could help and drafts replies for you to post. In this policy “we” means Builder Falcon and “you” means the customer using it. It covers builderfalcon.com, the dashboard and the Builder Falcon Chrome extension.
Builder Falcon is responsible for the personal data described in this policy. You can reach us at contact@builderfalcon.com.
What we collect
Your account
Your email address. You sign in with a 6-digit code we email to you, which expires after 10 minutes. Sign-in runs on our own self-hosted sign-in service.
Your business
- The business name, links and description you give us, and anything you tell Falcon to avoid.
- Text we read from your public website: excerpts of up to 2,000 characters per page, and where pages redirect.
- The business profile Falcon builds from all of this: a summary, your audiences, the problems you solve, keywords, exclusions and claims it must never make. Falcon uses this profile internally; you don’t see or edit it today.
- Links to your social profiles (Instagram, TikTok, Facebook, X, LinkedIn, Threads). We store these but never fetch them.
Opportunities, drafts and replies
- Public posts Falcon found: the platform, URL, the author’s name or handle as shown publicly, title, text and when it was posted, plus why it fits your business.
- Drafts, and your decisions on them: approved, edited or rejected, and by whom.
- Replies posted: the target URL, the text, the account expected to post it and the resulting link. If a reply fails, the reason.
- Your posting settings for each platform. When you turn on automatic posting, we record that you did.
Connected browsers
For each browser with the extension: a random installation ID, a label derived from the browser’s user agent (such as “Chrome on Mac”), the extension version, which permissions it has and when it was last seen. We also store the platform handles signed in on that browser and whether each is signed in.
Activity log
An audit log of actions in your account: who did what, when, and the outcome.
Billing
Your Stripe customer and subscription IDs, your plans, invoice amounts and trial records, including which platform handle used a trial so each handle gets only one. You enter card details on pages hosted by Stripe; they never reach our servers.
Technical logs
Our own database tables don’t store IP addresses. Our sign-in service and servers may log IP addresses and request details for security and to keep the service running.
Public posts and their authors
Falcon looks for public posts on Reddit, X, YouTube, Instagram, Hacker News and LinkedIn. It also researches TikTok but never posts there. We store what a post shows publicly, including the author’s public name or handle, so we can show you the opportunity and check it before a reply goes out.
We don’t contact the people who wrote these posts. The only thing posted is a reply you approved, or allowed through automatic posting, from your own account. We don’t send the author’s name to the AI model.
If you wrote a post and want us to remove our copy of it, write to contact@builderfalcon.com with a link to the post.
The Chrome extension
The extension posts approved replies from your own Chrome, as the platform account signed in there. It uses Chrome’s storage, scripting, tab groups, alarms and side panel permissions. It always has access to builderfalcon.com and api.builderfalcon.com. It asks you, platform by platform, for access to reddit.com, x.com, news.ycombinator.com, youtube.com, instagram.com and linkedin.com. Those are optional and only granted by you.
On a platform you’ve granted, it reads which account is signed in. To post, it opens the target page in a background tab, checks the post and the account, and posts using the platform’s own web session inside that platform’s page (for example, LinkedIn’s security token). Those values stay in your browser.
It sends us only:
- the handle signed in on each platform;
- the link and item ID of what it posted, and a hash of the text;
- diagnostic codes when something goes wrong;
- its version and which permissions are granted.
It never sends us your cookies, passwords, browsing history, screenshots or full pages. It keeps its own sign-in token in the extension’s local storage on your device.
How we use your data
- To run your account and sign you in.
- To learn your business, find posts that fit and draft replies.
- To post the replies you approve, and check they went out.
- To bill you and manage trials.
- To keep the service secure, enforce posting limits and our Acceptable Use Policy, and help you when you ask.
- To find and fix failures and keep the service reliable.
We don’t sell your data and we don’t show ads. We don’t use analytics or tracking tools.
The AI model
Falcon uses Anthropic’s Claude to build your business profile and draft replies. For that we send Anthropic your business name, links and profile, and each post’s platform, community, title and text (up to 6,000 characters). We don’t send the post author’s name.
When Falcon reads your website it identifies itself as “BuilderFalconBot/0.1” and respects robots.txt.
Security
Data travels to and from us over TLS. Access to our systems is restricted, and our services use separate database roles that can each reach only what they need. Card details stay with Stripe. No system is perfectly secure; if you find a problem, please tell us at contact@builderfalcon.com.
How long we keep it
We keep your data while your account exists. Drafts you don’t act on expire after 72 hours and can no longer be posted. If a plan lapses, nothing is deleted automatically.
There’s no self-serve deletion or export yet. To have your account and data deleted, or to get a copy, write to contact@builderfalcon.com. We keep billing records for as long as the law requires.
Backups are kept in object storage and rotated: full backups are taken weekly and kept for several weeks. Deleted data leaves the backups as they roll off.
International transfers
Our providers may process data in the United States and the European Union, which may be outside the country where you live.
Your rights
You can ask us to show you the data we hold about you, correct it, delete it or send you a copy, and you can object to how we use it. Write to contact@builderfalcon.com. We may need to confirm the request comes from you. Depending on where you live, local law may give you further rights.
You can change your posting settings, or pause all posting, from the dashboard at any time.
Changes to this policy
When this policy changes we’ll update the date at the top. If a change affects how we use your data, we’ll tell you by email or in the dashboard.
Contact
Questions about privacy? Write to us at contact@builderfalcon.com.