Privacy Policy

shouldibuildai (“we,” “us,” or “our”) operates shouldibuildai.com — a free AI feasibility assessment that turns into a paid $29 roadmap report and, for some visitors, a custom build. This policy explains what we collect, how we use it, who we share it with, and your choices. By using the site, you agree to this policy.

We do not require an account or login to use any part of this site. We collect:

• Generate your free assessment and any follow-up answer you ask for.
• Process your $29 payment and deliver your report within the promised window.
• Email you the things you’ve asked for or paid for — a read copy, a follow-up answer, an order confirmation, your report.
• Respond to build inquiries and quote custom work.
• Prevent abuse of the free assessment (the per-visitor daily cap).
• Meet legal obligations and enforce our Terms of Service.

The text you submit — your business description, idea, pain point, and any follow-up question — is sent to Anthropic’s Claude API to generate your assessment, follow-up answer, and (for paid orders) the intake questions that sharpen your report. Anthropic processes this text to return a structured result; it is not used to train Anthropic’s models under our API terms.

Don’t paste sensitive information you wouldn’t want processed by a third-party AI model — the free assessment only needs a plain description of your business and idea.

We do not sell your personal information and do not share it with advertisers or data brokers. We share data only with the service providers necessary to run the site:

Legal requirements: we may disclose information if required by law, court order, or government authority, or to protect the rights, property, or safety of shouldibuildai or others.

Business transfers:if shouldibuildai is acquired or merged, your information may transfer as part of that transaction. We’ll notify you before it becomes subject to a different policy.

We use aggregate, privacy-conscious analytics tools to understand overall site traffic and which pages are visited, never to identify you personally. This data is separate from anything you type into the assessment or checkout.

• Assessment and order records are retained to support delivery, support requests, and our own records.
• Payment records held by Stripe follow Stripe’s own retention policy for fraud prevention and legal compliance.
• You may request deletion of your data at any time (Section 8).
• Server logs (Vercel) are retained for up to 30 days.

You can:

• Request access to the data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data — contact us and we’ll remove it, except where we’re required to retain payment records by law.
• Opt out of email — reply to any email from us and ask to be removed; we’ll only ever send you things you asked for or paid for.

Contact hello@shouldibuildai.com for any of the above. We respond within 30 days (45 days for California CCPA/CPRA requests).

We use minimal cookies and local storage needed for the site to function (for example, remembering your session during checkout). We do not use cross-site advertising or tracking cookies.

• All connections to shouldibuildai.com are encrypted (HTTPS/TLS).
• Database access is server-side only, restricted by row-level security — no client-side code can read raw data.
• Payment data is handled entirely by Stripe (PCI DSS Level 1); it never touches our servers.
• Stripe webhook events are verified by signature before we act on them.
• Rate-limiting uses a salted hash of your IP, never your raw IP.

No system is 100% secure. Report a vulnerability responsibly to hello@shouldibuildai.com.

This site is intended for business owners and operators 18 and older. We do not knowingly collect information from children under 13. If we learn we have, we’ll delete it promptly.

shouldibuildai is operated in the United States. If you access the site from outside the U.S., your information will be transferred to and processed in the U.S.

We may update this policy from time to time; we’ll update the effective date above when we do. Continued use of the site after a change means you accept the updated policy.