Your account and your data

Resetting your password

Use the forgot-password link on the sign-in page. The reset link is single-use and expires after an hour. Passwords are hashed before they are stored - nobody here can read or recover yours, which is why a reset is the only route.

Changing your email

From account settings. You will need to verify the new address before the change takes effect, and the old address is notified.

Email preferences

Transactional email - verification, password resets, receipts, failed payments, trial-ending notices - cannot be turned off while the account exists. Product email, including price-drop alerts and new-chassis notices, can be turned off in settings at any time.

Exporting your builds

CSV export is a Pro feature, but you can always see and copy everything in a build from its page, and we will export your data for you on request whatever plan you are on. Your data is not held hostage by your plan.

Deleting a build

From the build page. It is removed immediately; backups age out within 30 days.

Deleting your account

Email support@buildsideways.com and ask. We delete the account, your builds and your support tickets - no retention argument, no exit survey. Backups are kept for 30 days, so a deletion can take up to 30 days to work through every copy.

Two-factor authentication

Not available yet, and we would rather say that than imply otherwise. The account holds your email, your builds and a Stripe customer reference - no payment details, because those live with Stripe and never touch our servers - so the exposure from a compromised account is lower than most services. It is still on the list, and sign-in is rate limited in the meantime.

Signing in on another device

Use the same email and password. Sessions are per-device, so signing in on your phone does not sign you out on your laptop, and signing out only ends that device's session. Sessions last 30 days.

If someone else has got into your account

Change your password immediately, which invalidates every existing session on every device, then email us so we can check the account history. If a subscription was started that you did not authorise, we refund it in full regardless of when it happened.

What we store

Your email address, a password hash, your builds, and a Stripe customer ID if you subscribe. We never see your card details. The full list is on the privacy page.