This policy explains what personal information Xil3 Media Ltd ("we", "us") collects through BuildBakery, why, who it goes to, and your choices. We handle personal information under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA). We don't sell personal information and we don't use it for advertising.
| Account | Name, email address, password (stored only as a hash), plan and billing status. Card details go to Stripe; we never see them. |
|---|---|
| What you build | Source code you upload or we fetch from your repository, recipes, build logs, artifacts, and the settings of your projects. Logs and artifacts can contain personal information if your code or tests put it there. |
| Secrets and keys | Ingredients marked secret, signing keystores, App Store Connect, Google and Microsoft keys, delivery credentials, and TestFlight demo account passwords: encrypted at rest (AES-256-GCM), given only to the jobs that need them, and masked in logs. |
| Connected accounts | Your GitHub, GitLab or Bitbucket account name and access tokens, to read repositories, receive webhooks and post commit statuses and comments. TestFlight review contact details you enter, which we send to Apple for you. |
| Usage | Batches, jobs, build minutes, and for private ovens: machine name, operating system, CPU and memory, installed tools and the agent's logs. |
| Fair-use signals | To give one free allowance per person and prevent abuse: a normalized email address, a browser identifier cookie, linked git identities, repositories built and sign-in IP addresses. These are stored only as hashes. |
| Technical | IP address, browser and request details in server logs, kept for security and troubleshooting. |
| Access requests | The email, name, company and note you send with the "Request access" form. |
We use two cookies, both needed for the Service: cb_session keeps you signed in (30 days) and cb_device is the browser identifier for fair use (1 year). There are no analytics or advertising cookies. The public pages load fonts from Google Fonts, so Google receives your IP address when you view them.
When you, or an AI agent using your token, ask why a job failed, the job's log (with secrets masked) and its recipe are sent to Anthropic's Claude API to produce the explanation, which we store with the job. Anthropic processes it as our service provider; under its commercial terms it doesn't use this data to train its models. Nothing is sent to Anthropic unless an explanation is requested.
Your information is stored on our servers and may be processed in Canada, the United States and other countries where our service providers operate, where it may be accessible to authorities under local law.
When an account is deleted, we delete its data within 30 days, apart from backups (as above) and billing records.
Traffic is encrypted with HTTPS, secrets and keys are encrypted at rest, jobs on hosted ovens run in their own container or virtual machine that is deleted afterwards, and access to production systems is limited. No system is perfectly secure; if a breach puts your personal information at real risk of significant harm, we'll tell you and the Privacy Commissioner as the law requires.
You can see and change most of your information in the Service. You can also ask us for a copy of your personal information, ask us to correct or delete it, or withdraw consent (which may mean we can no longer provide the Service): email info@buildbakery.com. We'll answer within 30 days. If you're not satisfied, you can complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca).
The Service is for developers and businesses and isn't directed at children. We don't knowingly collect information from anyone under 16.
We'll post changes here and update the date above; for material changes we'll also tell you by email or in the Service.
Privacy questions and requests: Xil3 Media Ltd, Ontario, Canada · info@buildbakery.com