BuildWhatWeWant — operated by Keystone Digital Labs LLC
Effective Date: March 2026
Last Updated: March 2026
BuildWhatWeWant (“BWWW,” “we,” “us,” “our”) is a platform operated by Keystone Digital Labs LLC, a Pennsylvania limited liability company. We operate the website at buildwhatwewant.com.
This Privacy Policy explains what data we collect, how we use it, who we share it with, and your rights regarding that data. We believe in transparency — our entire business model is built on the principle that your data has value and you should know exactly how it's used.
BWWW is a demand intelligence platform. Here's how it works:
Your votes, wishes, attributes, and tips are the product. When you participate on BWWW, your contributions are aggregated — combined with other users' input — into data products that entrepreneurs purchase. This is the core of our business and the reason the platform exists.
We do not sell your name, email address, or account credentials. We do sell aggregated demand intelligence derived from your platform activity. An entrepreneur purchasing a report sees collective demand signals — such as “450 people want a Korean BBQ restaurant in East Austin” — not your name, email, or any identifying information. The exception is Community Intelligence tips where you explicitly opt in to being contactable (see Section 5).
Under certain privacy laws, including the California Consumer Privacy Act (CCPA), the aggregation and sale of data derived from your platform activity may constitute a “sale” of personal information. We describe this openly because transparency is fundamental to how we operate. See Section 10 for your rights, including the right to opt out.
When you create an account, we collect:
When you use the platform, we collect:
This platform activity data is the primary input for the demand intelligence products we sell. By using the platform, you understand that this activity data will be aggregated and included in commercial data products.
When you submit a wish, you provide a location for that wish (either by searching for an address, dropping a pin on the map, or using your device's geolocation). We store the latitude, longitude, city, and state associated with the wish. We use reverse geocoding (via Mapbox) to determine the city and state from coordinates.
We do not continuously track your location. Location data is only collected when you explicitly submit a wish or interact with the map.
When you purchase a Demand Intelligence Report, payment is processed by Stripe. We do not store your credit card number, CVV, or full payment details on our servers. Stripe handles all payment data in accordance with PCI-DSS standards. We receive from Stripe: a confirmation of payment, the last four digits of your card, and transaction metadata.
We use PostHog for product analytics. This collects:
PostHog data is used solely to improve the platform experience. We do not sell analytics data to third parties. You may opt out of analytics tracking — see Section 10.
We use cookies for:
We do not use advertising cookies or share cookie data with ad networks.
When you first visit BWWW, we will present a cookie consent notice allowing you to accept or decline non-essential cookies. You may change your cookie preferences at any time through the cookie settings link in the site footer.
When an entrepreneur purchases a Demand Intelligence Report for a wish, that report includes aggregated data from all users who interacted with that wish:
In the future, we may also sell aggregated demand data through API access, regional reports, franchise pattern detection products, and institutional data partnerships. These products will use the same types of aggregated platform activity data described above.
Reports and data products never include: your name, email address, account credentials, or information that directly identifies you as an individual — unless you explicitly opt in to contact permission on a community tip (see Section 5).
When you submit a Community Intelligence tip, you have the option to check a box indicating you are open to being contacted about your tip. This is entirely optional and defaults to off.
If you do not check the box: Your tip is visible to the report-owning entrepreneur (if they have Builder tier or above), but your identity is not revealed. They see the tip content and category only.
If you check the box: In future versions of the platform, the report-owning entrepreneur (Investor tier only) may be able to see your email address for the purpose of follow-up questions about your tip. This feature is not currently active. If and when it is activated, you will be notified and given the opportunity to confirm or withdraw your consent before any contact information is shared.
You can withdraw contact permission on any tip at any time by editing your submitted tips in the platform.
Some wishes on the platform were created through market research — analyzing public online discussions on platforms like Reddit, Facebook, and Nextdoor to identify unmet consumer demand. These wishes are flagged as “research-sourced” on the platform and are distinguished from wishes created organically by platform users.
Research-sourced wishes include simulated vote counts based on estimated public sentiment. These are clearly labeled and do not represent actual platform user votes. Reports are not available for purchase on research-sourced wishes until they receive sufficient organic votes from real platform users.
We use the following third-party services that process your data:
| Service | Purpose | Data Shared |
|---|---|---|
| Supabase | Database hosting and file storage | All platform data (encrypted at rest) |
| Stripe | Payment processing | Payment details, email, purchase history |
| Resend | Transactional email delivery | Email address, email content |
| Google OAuth | Authentication | Name, email, profile picture (as you authorize) |
| Mapbox | Map display and geocoding | Location coordinates, IP address |
| Google Places API | Competitive landscape data for reports | Wish location coordinates |
| Anthropic (Claude) | AI report generation, content moderation, attribute extraction | Wish titles, descriptions, aggregated vote data |
| US Census Bureau | Demographic data for reports | Location coordinates only |
| PostHog | Product analytics | Usage patterns, device info, IP address |
| Upstash | Rate limiting | IP address (temporarily) |
| Vercel | Website hosting | Standard web server logs |
Each of these services has its own privacy policy and data processing terms. We select services that maintain appropriate security and privacy standards and have data processing agreements in place with each provider.
What we sell:
What we never sell:
What we share with service providers:
What we may disclose when required by law:
You have the right to:
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):
To exercise any of these rights, contact us at privacy@buildwhatwewant.com. We will verify your identity before processing your request and respond within 45 days as required by law.
If you are a resident of the European Union or European Economic Area, you have rights under the General Data Protection Regulation (GDPR):
To exercise any of these rights, contact us at privacy@buildwhatwewant.com.
Residents of Colorado, Connecticut, Virginia, and other states with consumer privacy laws may have additional rights similar to those described above, including rights to access, delete, and opt out of the sale of personal information. Contact us at privacy@buildwhatwewant.com to exercise any applicable rights.
BWWW is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from anyone under 18. If you believe someone under 18 has provided us with personal information, contact us at privacy@buildwhatwewant.com and we will delete it promptly.
We implement reasonable security measures to protect your data:
No system is perfectly secure. If we become aware of a data breach affecting your personal information, we will notify affected users within 60 days of discovery and notify the Pennsylvania Attorney General if more than 1,000 Pennsylvania residents are affected, in accordance with Pennsylvania's Breach of Personal Information Notification Act (73 Pa. Stat. § 2303). We will also comply with breach notification requirements in other applicable jurisdictions.
Some browsers transmit “Do Not Track” (DNT) signals. There is no industry standard for how websites should respond to DNT signals. We currently do not alter our data collection or use practices in response to DNT signals. However, you may opt out of analytics tracking through the cookie settings link in the site footer.
We may update this Privacy Policy from time to time. If we make material changes — particularly changes to how we use or share your data — we will notify you by email or by posting a prominent notice on the platform at least 14 days before the changes take effect. Your continued use of the platform after the effective date constitutes acceptance of the updated policy.
If you disagree with any changes, you may close your account before the effective date.
For privacy-related questions or requests:
Email: privacy@buildwhatwewant.com
Mail:
Keystone Digital Labs LLC
4069 Green Park Drive
Mount Joy, PA 17552
For requests related to the sale of your personal information:
Email: privacy@buildwhatwewant.com
Subject line: “Do Not Sell My Personal Information”
