Privacy policy

• Photos you upload, and any reference photos you add (a wheel, a paint chip), when you render a preview.
• Your build settings: the mods you pick, any note you write and the render options.
• Account details if you sign in: your email address, and your name and profile picture if you use Google sign-in.
• Billing details if you buy a plan or credits: your plan, credits and Stripe customer ID. Your card details go straight to Stripe; we never see or store them.
• Usage records for each render: when it ran, how long it took, the credits it used and whether it worked. These don't include your photos. We store a scrambled (hashed) version of your IP address with them, not the address itself.
• Reports you send with “Not right?”, so we can decide on refunds.
• Which of our tracked links brought you here, if any. It's saved with your account when you sign up, so we can see which adverts lead to sign-ups and payments.
• Car requests you send from the fitment guides: the car you typed, stored with your account or a hashed IP address so repeat requests aren't double counted.

Your garage (your builds, photos and renders) is saved in your browser's own storage, not on our servers. Clearing your browser data removes it. A few small preferences, such as whether you've seen a tip, are also kept in your browser.

• To make your renders, which means sending your photo, reference photos and settings to OpenAI, who run the image model.
• To give back credits for renders that failed or came out wrong.
• To fix problems and improve results. During the beta we keep a copy of the photos you render, the reference photos and the results for 30 days, then delete them automatically.
• To unlock your renders. Free-plan renders come to you with a watermark; we keep the clean original for 30 days so you can keep building on it and get it without the watermark if you subscribe.
• To run your account, your daily credit allowance and your plan.

We don't sell your data and we don't run ads. To see how the site is used we count page views with Cloudflare Web Analytics, which doesn't use cookies or follow you across other sites, and we log the main steps (opening the studio, adding a photo, signing up, rendering, checkout) against your account or a hashed IP address.

• OpenAI runs the image and vision models that make your render. Under OpenAI's API terms, data sent through their API isn't used to train their models by default.
• Railway hosts the site and stores the 30-day troubleshooting copies, share links and usage records.
• Clerk handles sign-in and account details, and stores your plan and credit balance. Google is involved only if you choose Google sign-in.
• Stripe processes payments, subscriptions and invoices.
• Cloudflare counts page views (which page, the referring site, country and device type) without cookies.

When you make a share link, the before and after images and your build list are stored on our servers so anyone with the link can see them. They stay up until you ask us to remove them.

We use a handful of first-party cookies: a beta invite if you have one, Clerk's session cookies that keep you signed in, and, if you arrived through one of our tracked links (buildmywhip.com/r/…), a cookie that remembers which link for 30 days so we can tell which adverts work. It holds only the link's name. Stripe sets its own cookies on its checkout pages. None of them are for advertising or tracking.

• Troubleshooting copies of photos and renders: 30 days.
• Clean originals of free-plan renders: 30 days.
• Share links: until you ask us to delete them.
• Usage records (no photos) and refund reports: kept so we can run the service and look into problems.
• Account details: until you delete your account or ask us to.
• Backups: our servers are backed up daily and each backup is deleted after 6 days, so anything deleted from the site can stay in a backup for up to 6 more days.

You can ask us for a copy of the data we hold about you, or ask us to correct or delete it, including share links and troubleshooting copies. Email jkxcgy4@googlemail.com and we'll handle it within 30 days. If you're in the UK or EU you can also complain to your data protection authority (in the UK, the ICO).

BuildMyWhip isn't meant for children under 13, and we don't knowingly collect their data.

If we change how we handle your data, we'll update this page and the date at the top. Big changes will be flagged on the site.