Privacy Policy

Build Any Data Privacy Agreement – Version 1.0 – April 2025

This Data Privacy Agreement ("Agreement") outlines how Newton Day Ltd ("we", "us", "our") handles, protects, and governs data privacy for all organisations and users engaging with the Build Any Platform ("the Service").

By using the Service, you ("Client", "you", "your") agree to this Data Privacy Agreement. This Agreement applies in addition to our Terms of Use and Master Services Agreement.

1. 📍 Who We Are

  • Newton Day Ltd
  • Company No: 10638600
  • Registered Office: 3rd Floor, 86–90 Paul Street, London, EC2A 4NE

We act as a Data Processor in some cases and as a Data Controller in others, depending on how you use the Service.

2. 🔄 What This Agreement Covers

This Agreement outlines:

  • What data may be collected, stored, and processed
  • How you and your users must comply with data protection laws (including UK GDPR)
  • Our respective roles and responsibilities under data privacy law
  • How to request data deletion or access

3. ⚙️ Data We May Process

We may collect and process:

  • Login details, usage logs, and platform preferences
  • Prompts, inputs, and outputs from AI agent interactions
  • API integration metadata (if you connect external systems)
  • Feedback and error reports
  • IP address, browser, and usage device details

We do not require or request personal data. If your users choose to enter such data, you remain fully responsible for ensuring it complies with GDPR.

4. ❌ What You Must NOT Input

You (and your users) agree not to enter:

  • Personal data (e.g., names, email addresses, employee/customer info) without proper consent
  • Sensitive personal data (e.g., health, biometric, political, or financial information)
  • Any information about children or individuals under 18
  • Copyrighted or confidential content that you do not own or control

See our "What Not to Upload" Guidance in the Terms of Use for more detail.

5. 📂 Data Storage & Retention

  • Your data is hosted securely in the UK via Amazon Web Services (AWS) and Supabase.
  • We may store logs and transcripts of interactions to improve performance, audit usage, and support compliance.
  • You may request export or deletion of your data at any time.

6. 📤 Integrations & External Systems

If you choose to connect Build Any with third-party services (e.g. Slack, Google Drive, CRMs), you:

  • Do so at your own risk and discretion
  • Are solely responsible for ensuring that any shared data complies with relevant privacy regulations

We do not monitor or control third-party platforms and are not liable for any resulting data breach or misuse.

7. 🤝 Our Commitments

We will:

  • Maintain administrative and technical safeguards to protect your data
  • Notify you without undue delay if a breach affecting your data occurs
  • Support your compliance with GDPR (Articles 15–22) via export, audit, or deletion tools
  • Never sell your data or use it for third-party advertising

Legal Disclosure

We may be required to disclose your information to comply with applicable laws, regulations, court orders, or lawful requests by public authorities (e.g. law enforcement or regulatory bodies).

Where legally permitted, we will attempt to notify you of such requests.

By using Build Any, you acknowledge and agree that we may process or disclose your data in compliance with these obligations.

8. 📋 Data Subject Rights

Where we act as Data Controller (e.g. for usage analytics):

  • You may request access to the data we hold about you
  • You may request data deletion, correction, or restriction
  • All such requests will be handled within 30 days via support@newtonday.uk

Where we act as Data Processor (e.g. under your instructions), you are responsible for managing end-user rights.

9. 📍 Location of Processing

All data is processed and stored within the United Kingdom.

No data is knowingly transferred outside the UK unless required for backup, hosting, or API integration with AI models (e.g. OpenAI), and in those cases, suitable legal safeguards (e.g. Standard Contractual Clauses) will apply.

🌎 Non-UK and International Users

If you access the Build Any Platform from outside the United Kingdom, including from the United States:

  • You understand that your data will be processed and stored in the UK, where our infrastructure is based.
  • UK and EU data protection laws will apply, including GDPR.
  • You are responsible for ensuring your own compliance with any local data privacy regulations applicable to you or your organisation.

10. 📅 How Long We Keep Data

  • Default retention is 12 months, unless required longer for audit or security purposes
  • You may request early deletion of content at any time
  • Logs and metadata used for system improvement may be anonymised and retained indefinitely

11. 🔐 Security Measures

We use modern cloud-based security practices to protect your data, including:

  • Encrypted storage and data in transit (TLS 1.3)
  • Access controls and role-based permissions
  • Secure APIs with authentication
  • Firewall and DDoS protection via AWS
  • Regular security audits and monitoring

12. 🍪 Cookies & Tracking

We use cookies and similar technologies to:

  • Authenticate users and maintain sessions
  • Remember your preferences
  • Analyze usage patterns to improve the Service

You can manage cookie preferences through our cookie consent banner. Essential cookies required for the Service to function cannot be disabled.

13. 📜 Legal Liability & User Responsibility

We cannot be held liable for any data you or your users input into Build Any that breaches GDPR, copyright law, or this Agreement.

Your organisation is responsible for:

  • Educating users on acceptable use
  • Monitoring their conduct
  • Responding to any compliance requests relating to the data you input or generate

14. 📧 Contact & Data Protection Officer

For any data protection inquiries, please contact:

Email: privacy@newtonday.uk

DPO Contact: Mr. Ian C. Tomlin, Joint-CEO

General Support: support@newtonday.uk

Data Subject Access Requests: dsar@newtonday.uk

15. 🔄 Changes to This Policy

We may update this Privacy Policy from time to time. When we make significant changes:

  • We will notify you via email or an in-app notification
  • The "Last Updated" date at the top of this page will be revised
  • Continued use of the Service after changes constitutes acceptance

© 2026 Newton Day Ltd. All rights reserved.