Your business, kept safe
A website holds your name, your customers’ messages and the way people find you. Here is what Buildly does to protect your account, your site and your data - in plain words, and only what is true today.
Your account
Passwords leak, often from another website where the same one was used. So a password on its own is never enough to get into Buildly.
- A second step, every time
- After your password, Buildly asks for a six-digit code from an authenticator app on your phone. A stolen password alone does not open your account.
- Recovery codes for a lost phone
- When you set up your second step you get ten recovery codes, each good for one sign-in. You cannot remove your last second step, so you cannot lock the door and lose the key by accident.
- Guessing is slowed down
- Repeated wrong passwords are limited, and each attempt after the first few takes longer, so a program trying password after password gets nowhere fast.
- Sessions that end
- A sign-in lasts at most thirty days, and ends sooner if it goes unused for two weeks. Settings lists every browser you are signed in from, and you can end any of them.
- A new password closes old doors
- Changing your password signs out every other browser you were signed in from.
Your website
Your visitors trust your site with their messages and their browsing. It is built to deserve that.
HTTPS on every address
Your site is served over HTTPS on its free Buildly address, and on your own domain once it is connected. The certificate is issued for you; there is nothing to buy or renew.
Forms that keep spam out
Contact forms on your site are checked by a self-hosted captcha, submissions are limited per visitor and per site, and you can block a sender or a whole email domain from your leads.
Your visitors decide
Nothing that counts visits loads until a visitor agrees in the cookie banner - neither Buildly’s visit counter nor Google tags you add. A browser that sends Global Privacy Control is treated as a no.
Your name, not ours
Your site carries your own name, colors and fonts. Buildly’s branding and styles are kept off it, and a check fails our build if they leak in.
What a visitor’s browser stores, and when, is listed in full in the Cookie Policy.
Your data
Give each person on your team the role that fits. What a role cannot do is refused by the server, not just hidden on screen.
| Task | Owner | Admin | Editor | Viewer |
|---|---|---|---|---|
| See the organization and its sites | Yes | Yes | Yes | Yes |
| Edit words and pictures | Yes | Yes | Yes | No |
| Read form leads | Yes | Yes | Yes | No |
| Publish, create and delete sites | Yes | Yes | No | No |
| Invite and manage the team | Yes | Yes | No | No |
| See everyone's activity | Yes | Yes | No | No |
| Manage billing | Yes | No | No | No |
| Download or delete the organization's data | Yes | No | No | No |
Kept apart by the database
Every organization’s records are separated by row-level security in the database itself, so even a mistake in our code cannot hand one business another’s data. We test it by trying to read across that line on purpose.
A record of who did what
Activity shows changes made in your organization. Everyone sees their own; Owners and Admins see the whole team’s. When Buildly’s staff act on your organization, that shows there too.
Take it with you
An Owner can download the organization’s profile, team, site settings and leads as a file. Anyone can download what Buildly holds about them personally.
Delete it when you are done
You can erase your own account from Settings. An Owner can delete the whole organization: its sites go offline at once, and everything is deleted after a grace period in which you can still change your mind.
Keys stay hidden
Keys you save for connected tools are encrypted when stored and masked once saved, so nobody - you included - sees them again on screen.
Who at Buildly can look
A small number of Buildly staff roles can read what you told the builder and your site drafts, to give support and keep the service running. They cannot read your password.
What we collect, why, how long we keep it and who else is involved is in the Privacy Policy, the list of subprocessors and the security notes in our legal pages.
Reporting a problem
If you think you have found a weakness in Buildly, tell us privately before telling anyone else. We will confirm we have it and keep you posted while we look into it.
Locked out of your own account? Your recovery codes get you back in. If you have lost those too, contact support and we will confirm it is you another way.
A website you can trust from the first day
Every Buildly account starts with these protections switched on. Tell Juno about your business and see your site take shape.
- Free while Buildly is in beta
- A draft to read before anything is published
- Your words and photos stay yours to change
Juno
Buildly’s website builder
Hi - I’m Juno. I’ll ask a few things about your business, then build your website from what you tell me.
Tell Juno about your businessTakes a few minutes. No design skills.
See every feature