AirBuild
Back to AirBuild

Privacy Policy

Last updated: October 5, 2026

This Privacy Policy describes how Increatech Business Solution Pvt Ltd ("AirBuild", "we", "us", or "our") collects, uses, and protects your personal information when you use the AirBuild platform and related services (the "Service"). We are committed to protecting your privacy in compliance with the Digital Personal Data Protection Act, 2023 (DPDP Act) and applicable Indian laws.

1. Information We Collect

1.1 Information You Provide

  • Account information: Name, email address, and password (hashed).
  • Phone number: If you enable phone verification, your phone number (E.164 format) and verification status. OTP codes are delivered via WhatsApp through our messaging provider.
  • Organization information: Organization name, slug, and member roles.
  • Payment information: Billing details processed via Razorpay. We do not store full card numbers or banking credentials.
  • Profile information: Profile photo (if uploaded via Google OAuth).

1.2 Information Collected Automatically

  • Usage data: IP address, browser type, device information, and interaction logs.
  • Build metadata: File names, version numbers, platform (iOS/Android), bundle identifiers, and checksums of uploaded builds.
  • Download logs: Install link access events, including IP address, user agent, and timestamp, for analytics and security.
  • Tester device identifiers: When a tester installs an iOS ad-hoc build, a one-tap configuration profile collects the device's UDID, name, model, OS version, and serial number so the device can be registered for ad-hoc provisioning. Testers are prompted to consent before installing the profile.
  • CodePush device data: When a device checks in for OTA updates, we collect a per-device identifier (device UUID for Flutter, update bucket key for React Native), platform, app version, architecture, and channel. This data is used solely for delivering the correct update and providing analytics on update adoption.
  • Cookies: Session cookies for authentication and security.

1.3 Information from Third-Party Services

  • Google OAuth: If you sign in with Google, we receive your name, email, and profile photo from Google.
  • Razorpay: Payment status and subscription details from Razorpay webhooks.

Embedded SDKs: When you use the CodePush (OTA Updates) feature, open-source SDKs are embedded in your application binary — the Shorebird updater runtime (for Flutter) and the expo-updates library (for React Native). These SDKs communicate only with AirBuild's servers to check for and download updates. They do not send data to Shorebird (Code Town, Inc.) or Expo (650 Industries, Inc.). See our Third-Party Licenses page for details.

2. How We Use Your Information

  • To provide, operate, and maintain the Service.
  • To authenticate users and manage sessions.
  • To process subscription payments and issue invoices.
  • To send service-related notifications (e.g., build upload confirmations, security alerts).
  • To monitor for fraud, abuse, and security threats.
  • To provide analytics on app downloads, installs, and build usage.
  • To comply with legal obligations under Indian law.
  • To improve the Service and develop new features.

3. Legal Basis for Processing

Under the DPDP Act, 2023, we process your personal data based on:

  • Consent: You have consented to the processing for the purposes described above.
  • Contractual necessity: Processing is necessary to provide the Service under our Terms of Service.
  • Legal compliance: Processing is required to comply with Indian laws and regulations.
  • Legitimate interests: Processing is necessary for security, fraud prevention, and service improvement.

4. Data Sharing

We do not sell your personal data. We share data only with the following categories of recipients:

  • Cloud infrastructure providers: For hosting the Service and storing build files.
  • Payment processor (Razorpay): For processing subscription payments.
  • Email service providers: For sending transactional and notification emails.
  • Messaging provider (DialogPulse): Phone numbers are shared with our messaging provider solely to deliver WhatsApp OTP verification codes.
  • Law enforcement: When required by Indian law or valid legal process.

CodePush: Device checkin data for OTA updates is processed solely by AirBuild and is not shared with Shorebird, Expo, or any other third party. The open-source SDKs embedded in your app (Shorebird updater, expo-updates) communicate only with AirBuild's servers.

5. Data Retention

  • Account data: Retained for the duration of your account. Deleted within 30 days of account termination.
  • Build files: Retained while your subscription is active. Deleted within 30 days of subscription cancellation.
  • Download logs: Retained for 90 days for analytics and security, then automatically deleted.
  • Tester device identifiers (UDID data): Retained while your app and account are active, and deleted within 30 days of account termination. Testers can request removal of their device record via the app owner or at privacy@airbuild.dev.
  • CodePush device checkins: Retained for 90 days for update analytics and rollout tracking, then automatically deleted.
  • Invoices: Retained for 7 years as required by Indian tax laws (GST).
  • Audit logs: Retained for 1 year for security and compliance, then automatically deleted.
  • Phone numbers: Retained while associated with your account; removed when you delete your account or disable phone verification.

6. Data Security

We implement industry-standard security measures including:

  • Encryption of data in transit (TLS 1.2+).
  • Encryption of data at rest in cloud storage.
  • Hashed passwords using bcrypt.
  • Automated malware scanning (ClamAV) of uploaded build files.
  • Role-based access control within organizations.
  • Regular security audits and vulnerability assessments.

Despite these measures, no system is 100% secure. In the event of a data breach, we will notify affected users and the relevant authorities as required by the DPDP Act, 2023.

7. Your Rights

Under the DPDP Act, 2023, you have the following rights regarding your personal data:

  • Access: Request a copy of your personal data.
  • Correction: Request correction of inaccurate or incomplete data.
  • Erasure: Request deletion of your personal data (subject to legal retention requirements).
  • Grievance: File a complaint with our Data Protection Officer.
  • Withdrawal of consent: Withdraw consent for processing at any time (note that this may affect your ability to use the Service).

To exercise any of these rights, contact us at privacy@airbuild.dev.

8. International Data Transfers

Your data is primarily stored in cloud infrastructure that may be located outside India. We ensure that such transfers comply with the DPDP Act, 2023 and that appropriate safeguards are in place. By using the Service, you consent to the transfer of your data as described in this policy.

9. Cookies

We use essential cookies for authentication and session management. We do not use third-party advertising or tracking cookies. Analytics cookies (if used) are configured with your consent.

10. Children's Privacy

The Service is not intended for individuals under 18 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.

11. Data Protection Officer

Our Data Protection Officer can be reached at dpo@airbuild.dev for any privacy-related concerns, requests, or complaints.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of material changes via email or in-app announcement at least 30 days before the changes take effect.

13. Contact

For any questions about this Privacy Policy, please contact us at privacy@airbuild.dev or write to:

Increatech Business Solution Pvt Ltd
Coimbatore, Tamil Nadu
India