Security

A private AI assistant: your data stays on your computer

Biilda runs on your computer, so your workflows, history and files stay there. Only what an AI request needs is sent out to get an answer. Secrets are kept in your operating system’s secure storage, risky actions can wait for your approval, and a spend cap stops you from spending more than you’ve added.

The safeguards

Your work lives on your computer

What you build, your workflows and your history are stored in your computer’s user-data folder, outside the app itself. Biilda updates replace the app and never touch that folder, so the features and data you’ve built survive every update.

Secrets stay in your operating system’s secure storage

Connector sign-ins and other secrets are kept in Keychain on macOS and Credential Manager on Windows, not in plain files.

Backups are local

Biilda doesn’t copy your data or secrets to a cloud backup. Backups stay on your machine. You can export your setup as an encrypted zip and import it later. Secrets are left out of the export, so you reconnect your accounts after importing.

You approve risky actions

Actions that reach outside your machine, like sending a message, can wait for your sign-off in the Approvals tab before they run. New AI employees start with approval switched on. You can turn it off per employee.

You choose what Biilda can touch

Biilda reaches your files only inside folders you pick with your computer’s own folder picker. The first time it wants to use a connector, a website or a tool, it asks. You can see everything you’ve allowed, and remove it, under Settings, then Permissions.

Spending is capped on the server

You can never spend more than you deposited. The cap is enforced in the cloud before each AI call, not just in the app. If you run low mid-task, the task pauses and picks up where it left off once you top up.

Updates are signed

Biilda checks that an update is genuine before it installs it. A tampered download is rejected.

Untrusted content is treated as data

Emails, web pages, messages and files that an employee reads are treated as information, never as instructions. This guards against text that tries to trick an AI into doing something you didn’t ask for. It lowers the risk. It doesn’t remove it, which is why approvals exist.

What does go to the cloud

A small set of things has to be central. Here it is, plainly.

Sign-in
One account for the app and the website.
The AI model service
Your requests go through our service to reach the AI. Only what a request needs is sent.
Your credit balance
Your balance and usage are kept so the spend cap works.
Payments
Top-ups are handled by Stripe.
Update downloads
The app fetches new versions from our servers.

The full list of what we collect and why is in the privacy policy.

Questions people ask

Does Biilda store my files in the cloud?

No. Your work lives on your computer, and Biilda doesn’t keep a cloud backup of your data or secrets. Only what an AI request needs is sent to get a reply.

Where are my passwords and connector sign-ins kept?

In your operating system’s secure storage: Keychain on macOS and Credential Manager on Windows.

Can an AI employee do things without asking me?

Only what you’ve allowed. Risky actions can wait for your approval, new employees start with approval on, and everything you’ve allowed is listed under Settings, then Permissions, where you can remove it.

Could Biilda spend more than I put in?

No. The spend cap is enforced on the server before each AI call, so you can never spend more than you deposited.

Do Biilda updates delete what I built?

No. Updates replace the app. What you build and your data live in a separate folder on your computer that updates never touch.

Found a security problem? Tell us at contact.

Keep your work on your own machine