Data Processing
What data we process and where it lives.
This page describes which categories of data Blanca's Builder processes, where they are stored, and who is allowed to access them.
Last updated: 2026-06-28
This page is maintained by Blanca's IT Professional SL to answer common security, privacy and trust questions about Blanca's Builder.
This page is app-owned editable content. It is not an independent audit or certification.
Security is a shared responsibility between Blanca's IT Professional SL, the platforms we run on (Cloudflare, Supabase) and you as the account owner.
Categories of data
Account data, organization membership, project content (briefs, blueprints, files, AI memory), AI usage metering, billing metadata and technical telemetry.
Where it lives
Persistent data is stored in a Supabase PostgreSQL project in the EU region. Static assets and edge cache live on Cloudflare's global network. Transactional email is delivered via Resend.
Who can access it
Customer data is accessible to the customer through the product. Internal staff access is limited to named individuals with explicit staff roles in the database and is audit-logged when used.
Cross-border transfers
Where subprocessors are outside the EEA, transfers are protected by the European Commission's Standard Contractual Clauses or an adequacy decision.
Retention
Account and project data are retained while your account exists. Billing records follow Spanish and EU tax retention requirements (currently 6 years).
Canonical: https://blancasbuilder.com/trust/data-processing · Blanca's Builder