Cookie Policy

BuildFlo ("we", "us", "our") operates BuildFlo, a web application for building services and MEP design professionals in the United Kingdom.

This Cookie Policy explains what cookies and similar technologies we use, why we use them, and how you can control them.

We use cookies in accordance with the UK Privacy and Electronic Communications Regulations (PECR) and the UK General Data Protection Regulation (UK GDPR).

For information about how we handle personal data more broadly, see our Privacy Policy at /privacy.

If you have questions, contact us at privacy@mepgpt.com.

Cookies are small text files placed on your computer, tablet, or phone when you visit a website. They are widely used to make websites work, keep users signed in, remember preferences, and understand how a service is used.

We also use browser local storage and session storage, which work in a similar way but store data in your browser rather than as traditional cookies. We explain these below.

We group cookies and similar technologies into the following categories:

• Strictly necessary — required for authentication, security, routing, and core functionality. These do not require consent under UK PECR.
• Functional — help us provide optional features such as remembering demo usage on the marketing site. These are first-party and support a fair free preview.
• Analytics — help us understand aggregated usage patterns so we can improve BuildFlo. We only use these if you opt in through our cookie banner.

The list below describes the main cookies and similar technologies used on buildflo.com and related BuildFlo pages.

• mep-gpt-auth-session — Purpose: keeps you securely signed in to your account. Type: strictly necessary. Duration: up to 14 days. Provider: BuildFlo (first party). Set when you log in.
• bf-demo-quota — Purpose: counts how many free demo questions you have used on the marketing site (limit of three). Type: functional. Duration: up to 12 months. Provider: BuildFlo (first party). Set when you use the public demo.
• Firebase / Google Analytics cookies (e.g. _ga, _ga_*) — Purpose: aggregated analytics on page views and product usage. Type: analytics. Duration: varies (typically up to 24 months). Provider: Google (third party). Set only if you accept analytics cookies in our banner.

When you interact with our cookie banner, we store your preference locally in your browser under the key bf-cookie-consent. This record includes whether analytics is enabled, the time of your choice, and the version of this Cookie Policy that applied.

If you are signed in, we may also save your cookie preference to your BuildFlo user profile in Firestore so we have an audit record of consent.

Strictly necessary cookies are always active because the service cannot function securely without them.

In addition to cookies, BuildFlo uses browser storage to run the application:

• mep-gpt-session — stores a lightweight client-side sign-in indicator (your email and login time). Strictly necessary for the signed-in experience.
• bf-cookie-consent — stores your cookie banner choice. Strictly necessary for remembering consent.
• Workspace data — projects, chats, notes, calculator favourites, UI preferences, and draft form inputs may be stored in local storage or session storage on your device.
• Quick sketch workspace — may use local storage or session storage for schematic drawings.

We use Google Firebase, including Firebase Authentication and Firebase Analytics, to operate BuildFlo securely and, where you consent, to understand product usage.

Google may process technical data such as browser type, device information, and approximate location derived from IP address. Google's privacy information is available at policies.google.com/privacy.

We do not use advertising or cross-site tracking cookies.

When you first visit BuildFlo, we show a cookie banner where you can accept all cookies, reject non-essential cookies, or manage preferences category by category.

• Accept all — enables analytics cookies in addition to strictly necessary and functional cookies.
• Reject non-essential — keeps strictly necessary and functional cookies, but blocks analytics.
• Manage preferences — choose analytics on or off using an explicit toggle (off by default).

You can reopen the cookie banner at any time by clicking Cookie settings in the site footer.

You can also control or delete cookies through your browser settings. Blocking strictly necessary cookies may prevent you from signing in or using parts of the service.

Clearing browser storage will remove your saved projects and preferences stored locally on that device.

For general information about cookies, visit www.aboutcookies.org or the UK ICO guidance at ico.org.uk/for-organisations/direct-marketing-and-privacy-and-electronic-communications/guide-to-pecr/cookies-and-similar-technologies.

We may update this Cookie Policy when we add new features, change providers, or update legal requirements. When we make material changes, we will update the date at the top of this page and may ask you to review your cookie preferences again.

Questions about cookies or this policy? Email privacy@mepgpt.com.