Privacy Policy

1. What Information We Collect

We collect information you provide directly to us and information collected automatically when you use our service:

• Form Data: When you submit our intake form, we collect your name, email, business information, and responses to questions about your AI needs and workflow. This data is stored in Google Sheets, operated by Google LLC, who acts as a data processor on our behalf.
• Payment Information: When you purchase a package, Stripe processes your payment details securely. We do not store full credit card information.
• Authentication Data: We use Supabase for user authentication and session management.
• Usage Data: We collect information about how you interact with our site, including pages visited, time spent, and clicks (via Google Analytics if enabled).
• Device Information: Browser type, operating system, IP address, and referral source.

2. How We Use Your Information

We use the information we collect for the following purposes:

• Service Delivery: To create and deliver your personalized AI roadmap PDF based on your intake form responses.
• Payment Processing: To process transactions and manage your subscription or purchase.
• Communication: To send you confirmation emails, updates about your order, and respond to your inquiries.
• Analytics: To understand how users interact with our site and improve our service.
• Legal Compliance: To comply with applicable laws and regulations.

3. Cookies and Tracking

We use cookies and similar tracking technologies to enhance your experience. Cookies are small files stored on your device that help us recognize you and remember your preferences.

Types of cookies we use:

• Necessary: Required for authentication, security, and payment processing.
• Analytics: Help us understand site usage and improve performance.
• Marketing: Used to deliver personalized ads and track conversion.
• Preferences: Remember your settings and personalization choices.

For a complete list of cookies we use, see our Cookie Policy.

4. Do Not Sell My Personal Information

Under the California Consumer Privacy Act (CCPA) and similar state privacy laws, you have the right to request that we do not sell or share your personal information.

We do not sell your personal information. We do not share your data with third parties for their marketing purposes. We only share information with service providers who assist us in operating our website and conducting our business, and only under strict confidentiality agreements.

If you have concerns about how your data is used, please contact us at team@briixai.com.

5. Data Processors & Third-Party Services

We use the following third-party service providers (data processors) who may process your personal data on our behalf. Each processor is bound by appropriate data processing agreements and handles your data only as instructed by us.

• Google LLC (Google Sheets): Form submission data — including your name, email, business information, and intake responses — is stored in Google Sheets. Google acts as a data processor on our behalf and processes this data in accordance with Google's Privacy Policy.
• Stripe, Inc.: Payment processing. Stripe handles all payment card data securely and is PCI-DSS compliant. We do not store full card details on our systems.
• Supabase: User authentication and session management.

6. Your Rights

GDPR Rights (EU residents):

• Right to access your personal data
• Right to rectify inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent at any time

CCPA Rights (California residents):

• Right to know what personal information is collected
• Right to delete personal information
• Right to opt-out of the sale or sharing of personal information
• Right to non-discrimination for exercising your privacy rights

To exercise any of these rights, please contact us at team@briixai.com.

7. Data Retention

We retain your personal information only for as long as necessary for the purposes described in this policy. The following specific timeframes apply:

• Intake form data (Google Sheets): Retained for up to 2 years from the date of submission, after which it is deleted. If you request deletion earlier, we will action this within 30 days.
• Payment records: Retained for 7 years to comply with financial record-keeping obligations under UK and EU law. Payment data is held by Stripe; we retain only transaction references and amounts.
• Authentication data (Supabase): Retained for the duration of your account. If you request account deletion, your authentication data is removed within 30 days.
• Analytics data: Aggregated and anonymised analytics data may be retained indefinitely. Individual session data is retained for up to 26 months in line with Google Analytics default settings.

Use of intake form data to inform AI outputs: Yes — the information you provide in the intake form (including your name, business details, and responses to our questions) is used as direct input to the AI language model that generates your personalised roadmap. This is the core purpose for which that data is collected. Your data is not used to train AI models, and it is not shared with AI providers for any purpose other than generating your specific roadmap. See our Terms of Service for full AI transparency disclosure.

Consent Data: Your cookie consent preferences are stored locally in your browser (localStorage) under the key briix_consent_v1. This data is not sent to our servers and is only used to remember your preferences. You can clear this data by clearing your browser's local storage.

You can request deletion of your personal data at any time by contacting us at team@briixai.com. We will respond within 30 days.

8. Data Deletion Requests

You have the right to request that we delete the personal data we hold about you. This includes your intake form responses, contact details, and any other information collected during your use of our service.

How to request deletion: Send an email to team@briixai.com with the subject line "Data Deletion Request" and include the name and email address associated with your submission. We will action your request within 30 days and confirm once your data has been deleted.

Please note that we may be required to retain certain records (such as payment transaction references) for legal and financial compliance purposes, as described in Section 7 above. We will inform you of any such exceptions at the time of your request.

9. Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us: