Creator development test privacy notice

Version creator-test-2026-09-27-r2 · Effective September 29, 2026

Operator and scope

Shrock Services LLC operates Buildpane from Kentucky, United States. Mailing address: 4698 Dunnville Rd., Dunnville, KY 42528. This notice covers Creator development testing, its account and billing interfaces, and communications with us. Contact [email protected] for privacy requests. The test is for U.S. adults aged 18 or older.

Use synthetic information in projects. Test payments are simulated, but account details, messages and information you upload can still identify you.

Information we handle

• Account and security: name, email address, a salted password hash, verification and recovery records, account identifiers, session information, IP address, browser information, and security/audit events. Where enabled, two-step authentication also creates authentication and recovery records. Registration records the accepted policy versions, account/user identifiers and time.
• Project work: prompts, conversations, attachments, source files, generated output, command/tool activity, project settings, usage records and workspace snapshots. Connected credentials are stored to perform the operations you enable; do not supply production secrets during this test.
• Test billing: billing name/address, declared personal or business Compute use, processor customer/payment-method identifiers, limited card descriptors, invoices, tax calculations, credit movements (including Compute usage, Build Credit conversions for already-incurred usage, outstanding balances and automatic corrections) and refund/reconciliation records. Card entry is handled by Stripe; do not submit real card details in test mode or send card details to support.
• Communications: contact details, support requests, attachments, email delivery records and any communication preferences you provide.
• Browser storage: a sign-in cookie and local/session storage for preferences, drafts and recovery of unfinished interface actions. Some saved drafts and payment-request details remain in that browser until cleared or completed.

Why and with whom

We use this information to provide the requested test features, maintain accounts, process simulated billing, investigate errors and abuse, respond to support/privacy requests and maintain necessary records.

Cloudflare provides network/security services, bot verification where enabled, and development workspace/storage infrastructure. Internet requests from a development Workspace pass through a Buildpane handler running on Cloudflare, which decrypts HTTPS traffic in order to count and limit it; Buildpane records the amount of data transferred for billing and limits. AI requests go to the configured gateway, including OpenRouter and Cloudflare when used, and the selected model provider. Prompts, relevant project material and tool results can be included in those requests. The provider can vary with your selected model or connected account. Provider logging, training and retention settings differ; this test does not promise that all AI requests receive zero retention or are excluded from provider training.

Stripe processes test payment and tax data. Emailit, or configured SMTP delivery, processes recipients and message content for email delivery. Buildpane's hosting/storage services also process stored application data. Authorized operators may access information for support, maintenance, security or a request you make. Connecting another service sends the information needed for the actions you authorize to that service.

We may disclose information when required by law or as necessary to investigate abuse and protect people and the service. Processing by these services may occur outside Kentucky or the United States; Kentucky business location is not a data-residency guarantee.

Browser signals and tracking

The reviewed Creator test application does not implement advertising trackers or sale of personal information. Its sign-in storage and preferences are used for application functions. It does not implement a separate response to browser Do Not Track signals. Embedded security and payment services may collect device and interaction information under their own notices, including across services using their tools. See Cloudflare's privacy policy and Stripe's privacy policy. We do not promise that those providers never collect information across other sites.

Retention and requests

Account, project, usage, support and billing records are not all erased when a session ends or an account stops spending. Stored snapshots, archives, operational records and provider-held copies may remain. Retention depends on operating the account, recovery, security investigations and legal recordkeeping needs. There is no single automatic deletion period covering every system in this test. Following cancellation for confirmed prohibited explicit-content publication, project data is retained privately for 30 days for appeals and appropriate exports; deletion afterward requires a separate review.

Contact [email protected] to request access, correction, a copy, deletion or review of a privacy decision. We may need to verify your identity and authority over the account. We will assess applicable rights and explain any records that must remain and why. Account closure is not confirmation that every backup or provider copy has been removed. Do not assume a privacy request has completed until it is confirmed. Applicable legal rights and deadlines continue to apply.

The test is not intended for children. Contact support if you believe a child has provided personal information. Security controls reduce risk but cannot guarantee that data will never be lost or accessed improperly.

Changes

We will publish the current notice and effective date at the Privacy link, and notify account holders of material changes through the application or account email before the changed practice begins. We will request additional consent where required.