PRIVACY POLICY AS DATA CONTROLLER
Effective: 1st May 2018
Last Updated: 24th March 2026

BuiltWith Pty Ltd acts as the data controller for personal data collected directly through the BuiltWith website and services.

This privacy policy applies to builtwith.com owned and operated by BuiltWith Pty Ltd ("BuiltWith","we","us","our"). This privacy policy describes how BuiltWith collects, uses, shares and secures personal information you provide. It also describes your choices regarding use, access and correction of your personal information.

BuiltWith Pty Ltd
ACN: 167 706 470
Registered in Australia

If you have any questions about this privacy policy or the handling of personal data, you may contact us at: support@builtwith.com


TL;DR

We collect and store your email address if you consent to us doing that. We store it securely and have a few third parties that need to see that data for email deliverability, fraud prevention and payment processing. BuiltWith does not sell, rent, or trade your personal information.



DIRECT COLLECTION AND PROCESSING OF PERSONAL DATA

The primary personal data you provide directly to BuiltWith is your email address. It will be processed for the following purposes only:

    a.  To provide BuiltWith mandatory account status emails (password reset, email verification, welcome email etc...)
    b.  To identify you when you login to our website.
    c.  To receive marketing emails from us (optional consent opt-in).

We may also collect and store your name and address, if you provide it to us for invoicing purposes only.

The processing of data for the purpose above will be carried out via automated electronic means only.


LEGAL BASIS FOR PROCESSING

Where the General Data Protection Regulation (GDPR) applies, BuiltWith processes personal data under the following legal bases:

- Contractual necessity – to provide and operate the BuiltWith service (account access, billing, support).
- Legitimate interests – fraud prevention, service security, and abuse detection.
- Consent – marketing emails where users have explicitly opted in.
- Legal obligations – compliance with law enforcement or regulatory requirements.



DATA RETENTION

BuiltWith retains personal data only for as long as necessary to provide the service and comply with legal obligations.

- Account email addresses are retained while an account remains active.
- Billing records are retained as required for financial and tax compliance.
- IP logs used for fraud detection are retained for a limited short-term period.



INTERNATIONAL DATA TRANSFERS

BuiltWith Pty Ltd may transfer personal data to service providers or infrastructure located in countries outside the jurisdiction in which the data was originally collected. Where such transfers occur, BuiltWith ensures that appropriate safeguards are implemented to protect personal data in accordance with applicable privacy laws, including contractual protections with our service providers.


DATA MINIMIZATION

BuiltWith is designed to minimize the collection of personal data. We only collect personal information that is necessary to operate the BuiltWith service, including account identification, billing, and security functions. BuiltWith does not sell personal data and does not collect personal information beyond what is required to provide the service.

BuiltWith services are designed primarily to analyze website technologies and infrastructure rather than individuals.


SECURITY MONITORING AND ABUSE PREVENTION

BuiltWith operates automated systems to monitor usage of its services in order to detect fraud, abuse, unauthorized access, and other activities that may threaten the security or integrity of our systems. This monitoring may include analysis of IP addresses, authentication activity, and other technical signals generated through normal use of the service.


FAILURE TO PROVIDE CONSENT

The provision of consent is optional. However failure to provide consent will render it impossible to use BuiltWith internet services as we require your email to allow you to login and enable your account.


COOKIE POLICY

BuiltWith uses cookies for the following purposes:

- Authentication – to maintain user login sessions
- Security – to prevent automated abuse, bot activity, and scraping
- Affiliate tracking – to record referral relationships where applicable


Cookie NameDescription
BWSSONEncrypted cookie identifying your account.
BWSTATECurrent session identification cookie.
FAAA potential affiliate commission cookie.
If you choose to authenticate using Google, Google may set cookies. See their cookie policy here - https://policies.google.com/technologies/cookies

We embed maps from MapBox which may set cookies. See their cookie policy here - https://www.mapbox.com/legal/privacy

We use Google reCAPTCHA for fraud prevention which may collect your IP address for law enforcement requirements. See their privacy page here- https://policies.google.com/privacy.

We use Firebase to send alerts if you enable this feature. See their privacy page here - https://firebase.google.com/support/privacy
You can block cookies by activating the setting on your browser that allows you to refuse the setting of all or some cookies. However, if you use your browser settings to block our cookies you will not be able to login to BuiltWith.


SERVICE PROVIDER THIRD PARTIES WHO MAY PROCESS YOUR DIRECT PERSONAL DATA

Our sharing of your personal data is very limited and a requirement for us to operate BuiltWith. All third parties are listed below.

The email addresses that provide consent will be processed by 3rd party email delivery service provider Postmark. See their privacy page here - https://postmarkapp.com/eu-privacy

If you sign up for payment with credit card and/or a Stripe supported payment method your personal details will be processed by Stripe, see their privacy policy here - https://stripe.com/au/privacy

If you sign up for payment with credit card and/or PayPal your personal details will be processed by Braintree/PayPal, see their privacy policy here - https://www.paypal.com/en/webapps/mpp/ua/privacy-full

If you sign up for payment with credit card you can optionally enable your account using our "know your customer" automated process provided by Persona, see their privacy policy here - https://withpersona.com/legal/privacy-policy

If you sign up for payments with PayPal or credit card your PII may be stored in our accounting system Xero, see their privacy policy here - https://www.xero.com/au/legal/privacy/

If you sign up for payments with Cryptocurrency through Coinbase your email may be processed by Coinbase, see their privacy policy here - https://www.coinbase.com/legal/privacy?locale=en

If you sign up for payments with Cryptocurrency through CoinPayments your email may be processed by CoinPayments, see their privacy policy here - https://www.coinpayments.net/help-privacy


In certain situations, BuiltWith Pty Ltd may be required to disclose personal data in response to lawful requests by public authorities, including to meet security or law enforcement requirements (see LAW ENFORCEMENT REQUESTS below). We may also disclose your personal information as required by law, such as to comply with a subpoena or other legal process, when we believe in good faith that disclosure is necessary to protect our rights, when we believe there is a violation to our terms, protect your safety or the safety of others, investigate fraud, or respond to a government request


DO NOT TRACK SIGNALS

BuiltWith does not track users across third-party websites and does not respond to browser 'Do Not Track' signals. BuiltWith services are focused on analyzing publicly available website technologies rather than tracking individual browsing behavior.


🚔 LAW ENFORCEMENT REQUESTS

BuiltWith Pty Ltd will respond to lawful requests for information from law enforcement and government authorities. Where required by law or where a valid legal request is presented, BuiltWith Pty Ltd may disclose customer account information, usage records, billing information, and other data in our possession to assist law enforcement investigations or legal proceedings.

BuiltWith Pty Ltd reviews all law enforcement requests to ensure they are legally valid and properly authorized before disclosing any information.

BuiltWith Pty Ltd prefers that requests be made through the Australian Federal Police (AFP) MLAT/MLA mechanism. Requests from recognized international law enforcement or government agencies may also be accepted directly, provided the requesting agency is a legitimate authority and not subject to applicable sanctions.

BuiltWith Pty Ltd may disclose relevant information to law enforcement authorities where legally required or where a valid legal request has been presented.

BuiltWith Pty Ltd will not notify or otherwise inform the affected customer or end user about the existence of a law enforcement request where such notification is prohibited by law, restricted by the requesting authority, or would interfere with an investigation.

Send law enforcement requests to support@builtwith.com.


INDIRECT COLLECTION OF PERSONAL DATA

We automatically collect your IP address through standard web server logs when you access the BuiltWith website. We collect this information for the purposes of detecting and preventing fraud and unauthorized access and maintaining the security of our systems. We may derive approximate geolocation from your IP address to personalize the BuiltWith website experience, but we do not store this geolocation information.



CCPA

California residents may request disclosure of the categories and specific pieces of personal information we have collected about them. California residents may also request deletion of personal information we have collected, subject to certain legal exceptions under the California Consumer Privacy Act (CCPA). We will not discriminate against individual California residents for exercising any of their rights under the CCPA.


SECURITY AND DATA CENTER LOCATION

BuiltWith Pty Ltd is PCI DSS as monitored by SecurityMetrics. BuiltWith data centers are ISO/IEC 27001 certified, SOC 1 Type II and SOC 2 Type II certified. Servers that process personal data are HSTS enabled, ensuring end-to-end encryption of your information.

Our mirror data center is located in Australia and is SOC 1 Type II, SOC 2 Type II, PCI DSS, LEED, ISO 14001, 22301, 27001, 50001, 9001 certified.

Our short term encrypted backups are stored at Dropbox, ISO 27018 certified data center. See their privacy policy here - https://www.dropbox.com/privacy

Our additional backups are encrypted backups stored at Backblaze, ISO 27001:2013 SOC-2 certified data center. See their privacy policy here - https://www.backblaze.com/company/privacy.html

Our additional backups are encrypted backups stored at Microsoft, ISO 27001, SOC 3 certified data center. See their privacy policy here - https://privacy.microsoft.com/en-gb/privacy

Our moated backups are encrypted backups stored at Digital Ocean, SOC 3 Type 3 certified data center. See their privacy policy here - https://www.digitalocean.com/legal/privacy-policy

Our data center is located in Canada.

Access to systems that store personal data is restricted to authorized BuiltWith personnel who require such access to operate and maintain the service.

Useful security documents are available at builtwith.com/useful-forms. The latest CVE pen test results are available at builtwith.com/useful-forms#cve.



DATA BREACH RESPONSE

BuiltWith maintains incident response procedures designed to identify, investigate, and respond to potential security incidents. In the event of a data breach affecting personal data, BuiltWith will notify affected individuals and relevant regulatory authorities where required by applicable law.


CHILDREN'S PRIVACY

BuiltWith services are not directed to individuals under the age of 16. BuiltWith does not knowingly collect personal information from children.


ACCESS TO YOUR INFORMATION

The personal data BuiltWith stores on you directly is your email address and short term IP logs for the purposes of fraud, security and access. You may also optionally provide us your address for billing invoice customization.

You may perform a SAR by contacting us directly at support@builtwith.com.



RIGHT TO ERASURE

You can delete your account via the BuiltWith Pro dashboard - https://builtwith.com/account


DATA SUBJECT RIGHTS

Where applicable privacy laws apply, individuals may have the following rights:

- Access to personal data we hold about them
- Correction of inaccurate personal data
- Request deletion of personal data
- Restrict or object to processing
- Data portability where applicable

Requests may be submitted to support@builtwith.com.


CHANGES TO THIS PRIVACY POLICY

We encourage you to periodically review this page for the latest information on our privacy practices.



PRIVACY QUESTIONS / FEEDBACK

If you have questions or concerns about BuiltWith’s Privacy Policy please contact us at support@builtwith.com

If you are located in the European Economic Area and believe your data protection rights have been violated, you may lodge a complaint with your local data protection supervisory authority.
PUBLIC DATA COLLECTION AND BUSINESS INTELLIGENCE POLICY
Effective: 1st May 2018
Last Updated: 24th March 2026

BuiltWith acts as a provider of publicly sourced business intelligence and technology intelligence, rather than as a processor acting on behalf of customers for this dataset.

This privacy policy applies to builtwith.com owned and operated by BuiltWith Pty Ltd (“BuiltWith”, “we”, “us”, “our”). It describes how BuiltWith collects, analyses, uses, discloses, and safeguards publicly observable website information and limited personal information that appears in a business context.

SUMMARY: BuiltWith is a B2B SaaS service focused on company-level insights derived from public website signals. Our datasets are designed to describe websites, technologies, companies, and market activity. Where limited personal information appears on public websites, it is incidental, business-contextual, and secondary to the company-level purpose of the service.


NATURE OF PERSONAL INFORMATION

BuiltWith primarily collects company-level information and technical website information. Limited personal information may also appear where it is publicly displayed on a business website in connection with a business role.

That limited personal information is generally confined to names, roles or titles, and business contact context published on public websites, such as company team pages, executive pages, or business contact pages.

BuiltWith does not intentionally collect sensitive information through this public data service. The service is designed for B2B intelligence, not consumer profiling.


HOW WE COLLECT INFORMATION

BuiltWith collects information from publicly accessible websites and observable internet signals. Collection is automated and limited to information that is publicly available without authentication or circumvention of access controls.

Our systems analyse public website content and related technical signals to identify technologies, company attributes, and other business-relevant indicators. This collection is directed to company-level information first, with only limited personal information captured where it is publicly displayed in a business context.

BuiltWith does not access password-protected areas, private databases, or restricted systems for this dataset.


PUBLIC INFORMATION AVAILABILITY

BuiltWith organises and presents information that website operators have made publicly available on the internet. The information available through BuiltWith reflects content and technical indicators that are observable from public websites at the time of collection.

BuiltWith does not alter the underlying content published by third parties and does not claim ownership of that underlying content. If a website operator changes or removes publicly available information, BuiltWith may update its datasets as public websites are reprocessed over time.

The availability of information within BuiltWith services does not imply endorsement, affiliation, or verification by BuiltWith.


AUTOMATED DECISION-MAKING

BuiltWith may use automated systems to analyse website data, public website signals, and related technical indicators in order to generate company-level insights and business intelligence outputs.

Where limited personal information is present, it is used only in a limited, business-contextual manner alongside company-level information. BuiltWith does not use personal information through this service to make decisions intended to significantly affect individuals.

If BuiltWith introduces automated decision-making involving personal information in a way that is material to this service, BuiltWith will describe the nature and effect of that processing in its privacy disclosures.


USE OF INFORMATION

BuiltWith uses collected information primarily to analyse technologies, companies, websites, and market trends, and to provide related B2B intelligence through its services.

Any person-level information in the dataset is incidental to that purpose, used in a business context, and not used to evaluate individuals personally.

BuiltWith does not use personal information through this service to make decisions intended to significantly affect individuals. Use of BuiltWith data is also governed by the BuiltWith Terms of Service.


SOURCE OF DATA

BuiltWith sources data from publicly accessible web pages and other publicly observable internet sources relevant to website and company analysis. BuiltWith does not source this dataset from private consumer databases or information that requires authentication to obtain.


DISCLOSURE AND DISTRIBUTION

BuiltWith provides data and insights through its SaaS platform, APIs, and customer exports. The primary outputs are company-level insights, technology intelligence, and related business information.

Where limited personal information appears in those outputs, it is contextual to the relevant company or business role and is not the primary focus of the service.

BuiltWith applies controls and review processes designed to reduce inappropriate exposure of personal information in the distribution of its services.


SECURITY

BuiltWith applies reasonable technical and organisational measures designed to protect information against unauthorised access, misuse, loss, and disclosure.

These measures are proportionate to the nature of the service and are intended to safeguard both customer access to the service and the information made available through it.


CCPA

BuiltWith operates as a B2B business intelligence provider collecting publicly available information about business websites. In limited circumstances this may include limited personal information relating to business representatives outside the European Union and California.

California residents may request information about personal information we hold about them and may request deletion of such information, subject to applicable legal exceptions under the California Consumer Privacy Act (CCPA).


CUSTOMER RESPONSIBILITY FOR DATA USE

Customers using BuiltWith data are responsible for ensuring their own use of the data complies with applicable laws and regulations, including privacy, marketing, and data protection laws in their jurisdiction.

BuiltWith provides publicly sourced business intelligence data but does not control how customers use that information once it is accessed or exported from our services. Customers are responsible for determining whether their intended use is lawful.

BuiltWith does not authorise the use of its services or datasets for unlawful activities including harassment, unlawful marketing communications, identity fraud, or misuse of personal information.


ACCESS, CORRECTION, AND REMOVAL

Individuals or organisations may request access to, correction of, suppression of, or removal of publicly sourced information associated with their website or business context.

Requests may be submitted through our website removal page or by contacting support@builtwith.com. BuiltWith will review requests and take appropriate action where reasonable in light of the nature of the information, the context in which it appears, and applicable privacy requirements.


CHILDREN

BuiltWith services are not directed to children. BuiltWith does not knowingly collect personal information from children through this public data service.


CHANGES TO THIS PRIVACY POLICY

We encourage you to review this page periodically for the latest information on our privacy practices.


PRIVACY QUESTIONS / FEEDBACK

If you have questions or concerns about BuiltWith’s Privacy Policy please contact us at support@builtwith.com.