Effective date: 30 July 2026
This policy explains how BuildingClub.info, including its free public calculators and advertising-supported pages, and My BuildingClub at my.buildingclub.info process visitor, account, AI, analytics, advertising, security and payment-related information.
1. Controller
The controller is Mikhail Bezgodov, operator of BuildingClub.info and My BuildingClub. Privacy requests may be sent to [email protected].
2. Information processed
- Google account identifiers, name, email, verification status and avatar.
- Public-page request data, including IP address, browser and device information, requested URL, referrer, approximate location, cookie or advertising identifiers, consent choices and interaction or measurement events.
- Session records, security timestamps, and hashed IP address and user-agent information.
- AI prompts, responses, conversation history and processing status.
- Images submitted for AI recognition and relevant workspace context.
- Saved calculators, estimates, document settings and exported-content metadata.
- Subscription plan, amount, currency, payment identifiers, status, renewal, cancellation and refund-reconciliation events.
- Evidence of legal-document acceptance, including accepted versions, time and security hashes.
- Support messages, abuse reports, audit logs and technical diagnostics.
3. Purposes and legal bases
Information is processed to create and secure accounts, provide requested AI and document services, perform the subscription contract, prevent abuse and fraud, keep payment and consent records, comply with law, respond to support requests and improve reliability. Depending on the jurisdiction, the legal basis may be contract performance, legitimate interests, consent or legal obligation.
4. Service providers
Information may be processed by providers necessary to operate the service, including Google Identity Services for sign-in, Google Analytics for audience and usage measurement, Google AdSense and its advertising partners for advertising, Lava.top and its payment partners for billing, Cloudflare for content delivery, analytics and security, hosting and database providers, email providers, and the configured AI provider for prompts and attached images. These providers receive information reasonably required for their role.
Google and third-party advertising vendors may place and read cookies on a visitor’s browser or use web beacons, IP addresses, local storage and other identifiers as a result of ad serving. Google AdSense and its advertising partners may process the page URL, IP address, approximate location, cookie or advertising identifiers, device and browser information, ad impressions, interactions and consent choices to deliver, limit, personalize where permitted, secure and measure advertising on public BuildingClub.info pages. See How Google uses information from sites or apps that use its services.
Google Analytics may process page URLs, IP-derived location, browser and device information, cookie identifiers and interaction events to measure use of public BuildingClub.info pages. Cloudflare processes IP addresses, request headers, device and browser information, requested URLs, security signals and related technical logs to deliver site content, provide network analytics, mitigate abuse and attacks, and protect BuildingClub.info and My BuildingClub.
5. Payments
Hosted checkout is provided by Lava.top. My BuildingClub sends the account email, selected offer, currency and other checkout details needed to create and verify the payment. Full card numbers and card security codes are not received or stored by My BuildingClub.
6. AI processing
Prompts and relevant workspace context are transmitted to the configured AI provider. Do not submit secrets, payment-card data, medical records, third-party personal data or confidential project information unless you are authorized and the disclosure is necessary. AI providers may process data outside your country under their own contractual and technical safeguards.
7. Retention
- Account and saved workspace data are retained while the account is active and until deletion is requested or required, subject to backups, disputes and legal obligations.
- Payment, subscription, refund, consent and accounting records may be retained for the period required by tax, payment, anti-fraud and consumer law.
- Authentication sessions expire according to their stated cookie/session duration; expired records may be removed by scheduled maintenance.
- Security and audit records are retained for a limited period reasonably necessary to investigate abuse, fraud and incidents.
- Support correspondence may be retained while the request is open and for a reasonable dispute-prevention period afterward.
8. International transfers
Some providers may process data in other countries. Where required, transfers are supported by contractual safeguards, adequacy decisions or another lawful transfer mechanism.
9. Security
We use encrypted HTTPS connections, secure cookies, server-side secret storage, restricted database access, origin checks, rate limits, audit records, isolated calculator execution and authenticated payment webhooks. No online service can guarantee absolute security.
10. Your rights
Depending on applicable law, you may request access, correction, deletion, restriction, portability or objection, and may withdraw consent where processing relies on consent. You may also complain to a competent data-protection authority.
11. Account deletion and billing
Deleting or signing out of My BuildingClub does not necessarily cancel an active Lava.top subscription. Automatic renewal must be cancelled through Lava.top or the available subscription cancellation control before the next charge. Records required for payments, refunds, fraud prevention or law may remain after account deletion.
12. Contact
Send privacy requests to [email protected]. We may need to verify account ownership before disclosing or deleting information.