Privacy Policy
Last updated: 2026-07-27
Who we are
Built in Bits is a sole proprietorship based in the Netherlands. For any privacy questions or requests, contact us via the form on our Contact page.
What we collect and why
Contact form: name, company (optional), email, and message — used only to respond to your inquiry.
Lead-magnet downloads: email address — used to deliver the requested resource and, only with your separate opt-in, to send occasional related updates.
Live demos: inputs you submit to try a demo are sent to our LLM provider to generate a response and are not stored with any identifying information attached. To prevent abuse, we count requests per visitor using a salted, one-way hash of your IP address — never your raw IP — which cannot be reversed back to identify you.
Analytics: if you consent, pseudonymous usage data (pages viewed, general location, device type) via Google Analytics 4, with IP anonymization enabled.
Legal basis for processing
Responding to inquiries and delivering requested resources: legitimate interest / pre-contractual steps at your request. Marketing emails and analytics: your explicit consent, which you can withdraw at any time.
How long we keep it
Contact messages are kept for up to 24 months to maintain a record of client communication, then deleted. Marketing list entries are kept until you unsubscribe. Demo inputs are not retained beyond generating the response.
Who else touches your data (processors)
Resend (transactional email delivery), Loops (marketing list management), Cal.com (call scheduling), our LLM provider (OpenAI/Anthropic, for live demo responses), Google Analytics (usage analytics, with your consent), Cloudflare Turnstile (spam/bot verification on our contact form), Upstash (rate-limiting counters for the live demos, keyed to the hashed IP described above), and Vercel (hosting infrastructure). Each acts under a data processing agreement appropriate to their role.
International transfers
Some processors above are based outside the EU/EEA (e.g. the United States). Where that applies, transfers rely on Standard Contractual Clauses or an equivalent safeguard.
Your rights
Under the GDPR you can request access, correction, deletion, or a copy of your data, object to or restrict processing, and withdraw consent at any time. You can also lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).