Privacy Policy
Last updated 6 November 2026 · version 2.4.1
Plain language summary. We collect the information needed to provide Build Your Exit, process purchases, save your work, generate requested suggestions, keep the service secure and communicate with you. We do not sell personal data. Ask BYE, our only AI feature, is advisory, answers only the questions you choose to ask it, and is not used to make legal or similarly significant decisions about you.
1. Who we are
Build Your Exit is operated by Build Your Exit Limited, a private company limited by shares registered in Ireland (company number 829971), with its registered office at 6 Fern Road, Sandyford, Dublin, D18 FP98, Ireland. We are the data controller for the personal data described in this Policy.
Privacy contact: Hello@buildyourexitnow.com
Website: buildyourexitnow.com
This Policy applies to the Build Your Exit website, free tools, paid digital products, customer accounts, membership services, support communications and related emails.
2. Personal data we collect
2.1 Information you provide
Identity and contact information, such as your name and email address.
Account and access information, including login and authentication records.
Purchase and subscription information, including product, price, payment status, refund status and billing details.
Assessment and product responses, such as your skills, experience, goals, available time, budget, preferences, ideas, concerns and progress.
Content you save, approve or generate through the Exit Check, Starter Plan, Exit Number, membership or future tools.
Messages, support requests, survey responses and feedback you send to us.
Marketing preferences and records of consent or withdrawal.
Payment card details are collected and processed by Stripe. We do not normally receive or store your complete card number.
2.2 Information collected automatically
IP address and approximate location derived from it.
Browser, device and operating system information.
Pages viewed, actions taken, dates, times and referring pages.
Security, error and diagnostic logs.
Your cookie consent choice and, only if you accept analytics cookies, analytics cookie identifiers and information about how you use our public pages (see our Cookie Policy).
2.3 Information from other Build Your Exit tools
If you choose to carry answers from a free Exit Check into a paid product, we will show the information being transferred and allow you to review or change it. We do not require you to import previous answers.
2.4 Information you should not provide
Build Your Exit does not need special category data, criminal offence data, confidential employer information or unnecessary information about other people. Please do not enter information about health, racial or ethnic origin, political opinions, religion, trade union membership, genetic or biometric data, sex life, sexual orientation, criminal allegations or convictions unless a specific feature clearly and lawfully requests it.
Do not upload employer documents, customer lists, trade secrets, access credentials or information that you do not have the right to use.
2.5 When you report a problem
If you use "Something wrong on this page?", we keep what you write, the page you were on, the time, your account, and a short technical note about the last error on that page, if there was one. We use it only to find and fix the problem. We keep it for up to 12 months, and we delete it sooner if you close your account. We rely on our legitimate interest in keeping the service working for you.
3. How we use personal data and our lawful bases
We use personal data only where we have a lawful basis under data protection law. The main purposes and bases are set out below.
| Purpose | Personal data | Lawful basis |
|---|---|---|
| Provide the website, account, free tools and paid products | Contact details, account details, responses, saved outputs and service activity | Contract, or steps requested before entering a contract |
| Answer your Ask BYE questions | Your question with identifiers removed, the planning facts described in section 4, and the answer shown to you | Contract, as part of your membership |
| Process purchases and keep financial records | Contact, billing, purchase and payment status | Contract and legal obligation |
| Send access, security and service messages | Email address, account and service status | Contract and legitimate interests |
| Provide support and handle complaints | Contact details and correspondence | Contract, legitimate interests and legal obligation where applicable |
| Find and fix a problem you report through "Something wrong on this page?" | What you write, the page you were on, the time, your account, and a short technical note about the last error on that page, if there was one | Legitimate interests in keeping the service working for you |
| Protect the service and prevent misuse | IP address, device data, logs and account activity | Legitimate interests in security, fraud prevention and service integrity |
| Measure how our public pages are used (Google Analytics) | Analytics cookie identifiers, pages viewed with identifiers removed, approximate location, device and browser information | Consent. You can withdraw it at any time through Cookie settings. |
| Send marketing | Email address and marketing preferences | Consent, unless another lawful basis clearly applies |
| Establish or defend legal claims | Relevant account, transaction and correspondence data | Legitimate interests and legal obligation |
Where we rely on legitimate interests, we consider whether our interest is necessary and whether your rights and interests override it. You may contact us for further information about that assessment.
4. AI assisted features
Ask BYE, available to members, uses artificial intelligence to answer the questions you ask it about your plan. It is the only part of Build Your Exit that uses AI. The Exit Check, the Exit Number and the Starter Plan build their results, suggestions, opportunity ideas, draft offers and action plans from your answers with fixed rules, and send nothing to an AI service.
When you ask Ask BYE a question, we send the question you typed, with email addresses, account numbers and other long numbers removed, and your currency. We also send planning facts from your account that an answer may need: your confirmed stage, the weeks you have worked, your weekly hours, where your idea is and how easily you can reach customers, this week's focus, your next open task, and how many open tasks, customer conversations and payments you have recorded. The total you have recorded as earned and your Exit Number are sent only for a question about money, pricing or your job. We never send your answers about wellbeing, pressure or your reasons for leaving, or whether our safeguard applies to you. A question that we recognise as being about regulated financial, investment, pension, tax, legal or medical matters is sent without any of your facts. We also send the names, but not the values, of facts we held back, so the answer can say what is missing. Payment card details are not sent to the AI service.
Ask BYE answers are produced by Anthropic's Claude through Amazon Bedrock in the European Union, in Ireland (eu-west-1) or Stockholm (eu-north-1). Only Anthropic models are used. Under the Bedrock service model, model providers do not have direct access to customer prompts and completions.
We do not use your Ask BYE questions, the answers you receive or any other information you save with us to train AI models. If this practice changes, we will provide appropriate information before the new use begins and identify a lawful basis.
AI outputs may be incomplete or incorrect. Check anything important before you act on an Ask BYE answer. AI suggestions are advisory and should not be treated as proof of market demand, professional advice or a direction to leave employment.
Where the product provides a manual route, you may choose to continue without an AI suggestion. If Ask BYE cannot produce an answer, you get a shorter answer built from fixed rules.
5. Scoring, profiling and automated decisions
Build Your Exit may evaluate or score information you provide in order to rank possible opportunities and explain which direction appears more suitable. Inputs may include your stated skills, experience, evidence, available time, starting budget, customer access, preferences and risk considerations.
The scoring and AI output are designed to support your own decision. They do not make decisions that produce legal effects or similarly significant effects concerning you. They do not determine whether you may access employment, credit, insurance, public services or another essential service. You choose whether to accept, edit, ignore or test a suggestion.
If we later introduce automated decision making with legal or similarly significant effects, we will assess it separately and provide the information and safeguards required by law before using it.
6. When we share personal data
We share personal data only where necessary for the purposes described in this Policy, where required by law, or where you direct us to do so.
Vercel provides website hosting, deployment and related infrastructure.
Neon provides database infrastructure. The intended database region is Frankfurt.
Amazon Web Services provides Amazon Bedrock, which answers Ask BYE questions in a European Union region, in Ireland or Stockholm.
Stripe processes payments, billing, fraud prevention and related financial information. Stripe may act as our processor and may act as an independent controller for some payment activities.
Postmark provides transactional and, where lawfully configured, marketing email delivery.
Google Ireland Limited provides website analytics (Google Analytics), only where you have accepted analytics cookies. Google acts as our processor under Google's data processing terms, with advertising features and data sharing for Google's own purposes switched off.
Professional advisers, insurers, auditors, regulators, courts or public authorities may receive information where reasonably necessary or legally required.
A purchaser or successor may receive relevant information if the business is reorganised, sold or transferred, subject to confidentiality and data protection requirements.
We require service providers acting as processors to process personal data on documented instructions and under suitable contractual safeguards.
We do not sell personal data.
7. International transfers
Our primary database and intended AI processing are located in the European Union. Some providers, including website, payment and email providers, may process personal data outside the European Economic Area or allow access from other countries.
Where personal data is transferred outside the European Economic Area, we rely on a lawful transfer mechanism where required, such as an adequacy decision, the European Commission Standard Contractual Clauses and supplementary safeguards. You may contact us for information about the relevant safeguards.
Google Analytics data may be transferred to Google LLC in the United States. Google LLC is certified under the EU–US Data Privacy Framework, which the European Commission has found provides an adequate level of protection.
8. How long we retain personal data
We keep personal data only for as long as reasonably necessary for the purpose for which it was collected, including providing continuing product access and meeting legal, accounting, security and dispute requirements.
| Category | Retention approach |
|---|---|
| Unfinished anonymous sessions | Normally deleted after 7 days. |
| Completed but unclaimed anonymous sessions | Normally deleted after 90 days. |
| Account and profile information | Kept while the account is active, then deleted or anonymised after closure, subject to legal and operational exceptions. |
| Purchased Starter Plan content | Kept while needed to provide the promised continuing access. It may be deleted at the customer’s request, but deletion may permanently remove access to the saved project. |
| Refunded product content | Refunded Exit Number results and Starter Plan projects are removed no sooner than seven days after the refund is confirmed. This does not apply to anything a membership or another purchase you still hold gives you access to, or to what was recorded as a member, which stays until the account is closed. Records that must be retained are kept. |
| Ask BYE questions and answers | Your questions, with identifiers removed, and the answers shown to you are kept with your account and deleted when your account is closed. The full request sent to the AI service and its reply are not stored. |
| Payment, invoice and tax records | Normally kept for 6 years, or longer where required for an audit, dispute or legal claim. |
| Support correspondence | Normally kept for up to 24 months after the matter is closed, unless longer retention is justified. |
| Problem reports ("Something wrong on this page?") | Kept for up to 12 months, and deleted sooner if you close your account. |
| Security and diagnostic logs | Normally kept for up to 90 days, unless required to investigate an incident or protect legal rights. |
| Marketing preferences | Kept until consent is withdrawn. A minimal suppression record may be kept to ensure the opt out is respected. |
| Analytics data (Google Analytics) | Kept by Google for 2 months, then deleted. Analytics cookies in your browser expire after 13 months, or when you withdraw consent. |
| Cookie consent choice | Stored only in your browser, for 6 months. |
| Backups | Deleted data may remain in protected backups until the normal backup cycle completes. It will not be restored for ordinary use. |
The exact period may be extended where information is required for an investigation, legal claim, regulatory request or unresolved dispute. Where practical, information no longer required is deleted or anonymised.
Membership is an exception. When a membership is refunded, the membership ends and you can no longer add to what you recorded as a member, but it is not deleted. You can still read it until your account is closed, and you can ask for a copy of it from your account page at any time before then.
Savings you record in Build Your Exit, such as amounts you set aside, their dates and any notes, are account and profile information. They are deleted when your account is closed and are not kept as payment, invoice or tax records.
9. Cookies and similar technologies
We use necessary cookies and similar technologies to run the website, keep you signed in, protect forms, remember your cookie choice and provide purchased services. With your consent, and only then, we use Google Analytics cookies to measure how our public pages are used. You can accept or reject analytics cookies when you first visit, and change your choice at any time through Cookie settings at the bottom of every page on which we use analytics cookies. Our Cookie Policy lists every cookie and storage item, with its purpose, provider and duration.
10. Marketing communications
We send promotional emails only where permitted by law. You can withdraw consent or unsubscribe at any time using the link in the message or by contacting us.
Service messages about a purchase, account, security matter, saved progress or material product change are not promotional messages. You may still receive necessary service messages while using the relevant service.
11. Security
We use appropriate technical and organisational measures designed to protect personal data. These may include access controls, encryption in transit, restricted administrative access, secure authentication, logging, backups, supplier review and procedures for responding to incidents.
No internet service is completely secure. You are responsible for keeping account access links and credentials private and for using a secure device.
12. Your data protection rights
Depending on the circumstances, you may have the right to:
Request access to your personal data.
Request correction of inaccurate or incomplete personal data.
Request deletion of personal data.
Request restriction of processing.
Object to processing based on legitimate interests or to direct marketing.
Receive certain personal data in a portable format.
Withdraw consent at any time where processing relies on consent.
Lodge a complaint with a supervisory authority.
Rights are not absolute and may be limited by law. We may request information needed to confirm your identity. To exercise a right, contact Hello@buildyourexitnow.com.
You may complain to the Irish Data Protection Commission using its online contact service at dataprotection.ie. Its current postal address is Data Protection Commission, 6 Pembroke Row, Dublin 2, D02 X963, Ireland.
13. Children
Build Your Exit is intended for adults. We do not knowingly offer the Starter Plan or membership to children. If you believe a child has provided personal data, contact us so that we can review and, where appropriate, delete it.
14. Third party links
The website may link to third party websites or services. Their privacy practices are governed by their own notices. We are not responsible for those third party practices.
15. Changes to this Policy
We may update this Policy when our products, providers or legal obligations change. We will update the date shown above. Where a change materially affects how we use existing personal data, we will provide an appropriate notice before the new processing begins.
16. Contact
For privacy questions, requests or concerns, contact:
Build Your Exit Limited
Email: Hello@buildyourexitnow.com
Country of establishment: Ireland
Questions about this policy can go to hello@buildyourexitnow.com.