Privacy Policy

1. Information We Collect

When you register for a Briksio account, we collect personal information such as your name, email address, business name, billing address, and payment details. This information is necessary to create and maintain your account and process transactions.

As you use the platform, we automatically collect usage data including IP addresses, browser type, device identifiers, pages viewed, features accessed, and time spent on the platform. This telemetry helps us understand how sellers interact with Briksio and allows us to improve performance and usability.

We also collect inventory data you upload, marketplace credentials you connect, order history, shipping records, and any communications you have with buyers or other sellers through the Exchange. This operational data is the core of what powers the Briksio platform.

2. How We Use Your Information

Your personal information is used to operate, maintain, and improve the Briksio platform. This includes authenticating your identity, processing payments, synchronizing your inventory across connected marketplaces, generating pick lists and shipping labels, and providing financial analytics and reporting.

We use aggregated and anonymized usage data to improve our machine learning models for demand forecasting, pricing suggestions, and fraud detection. No individual seller's data is shared in this process — only anonymized signals that help the platform perform better for everyone.

We may use your email address to send transactional communications such as account confirmations, invoices, security alerts, and critical platform updates. With your explicit consent, we may also send product news, feature announcements, and promotional offers. You can opt out of marketing emails at any time.

3. Data Sharing and Third Parties

Briksio does not sell your personal information to third parties. We share data only with trusted service providers who help us operate the platform, including payment processors (Stripe), cloud infrastructure providers (AWS), email delivery services, and analytics platforms. All third-party processors are bound by data processing agreements that restrict how they may use your information.

When you connect an external marketplace (e.g., BrickLink, eBay, Amazon), you authorize Briksio to exchange inventory, order, and pricing data with that marketplace on your behalf. The marketplace's own privacy policy governs how they handle data received from Briksio.

We may disclose information when required by law, in response to a valid legal process, or to protect the rights, property, or safety of Briksio, our users, or the public.

4. Data Retention

We retain your account data for as long as your subscription is active. If you cancel your account, we will retain your data for 90 days to allow for reactivation, after which it will be permanently deleted from our production systems. Anonymized and aggregated data may be retained indefinitely for analytical purposes.

Transaction records and financial data are retained for 7 years to comply with tax and accounting regulations. You may request an export of your data at any time from your account settings before deletion.

5. Cookies and Tracking

Briksio uses essential cookies to maintain your session, remember your preferences, and protect your account from unauthorized access. These cookies are strictly necessary and cannot be disabled without affecting platform functionality.

We also use analytical cookies to understand aggregate usage patterns. You can manage your cookie preferences at any time through the settings panel in your account or via your browser's built-in controls. We do not use cookies for cross-site advertising or behavioral tracking outside of our own platform.

6. Security

Briksio implements industry-standard security measures to protect your data. All data in transit is encrypted using TLS 1.3. Data at rest is encrypted using AES-256. We perform regular penetration testing, maintain a responsible disclosure program, and conduct annual security audits.

Marketplace API credentials are stored using envelope encryption with hardware security modules (HSMs). Payment information is handled exclusively by our PCI-DSS compliant payment processor and is never stored on Briksio servers.

Despite our best efforts, no system is entirely immune to attack. If we become aware of a security breach that affects your data, we will notify you within 72 hours as required by applicable regulations.

7. Your Rights

Depending on your location, you may have rights under applicable data protection laws (including GDPR, CCPA, and similar regulations) to access the personal data we hold about you, request correction of inaccurate data, request deletion of your data, restrict or object to certain processing, and receive a portable copy of your data.

To exercise any of these rights, please contact our Data Protection team at privacy@briksio.com. We will respond to your request within 30 days. In some cases, we may need to verify your identity before fulfilling a request.

8. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email and display a prominent notice on the platform at least 14 days before the changes take effect. Your continued use of Briksio after the effective date constitutes acceptance of the updated policy.

The date at the top of this page always reflects when this policy was last updated. We encourage you to review it periodically.

9. Contact Us

If you have questions about this Privacy Policy or how your data is handled, please reach out to us:

Briksio, Inc. — privacy@briksio.com — 340 Pine Street, Suite 800, San Francisco, CA 94104, United States.