Privacy Policy

Quick Summary

We collect only the data we need to run and improve Brixel.
We use your data to provide services, keep systems secure, and support customers.
We share data only when needed, for example with trusted processors and legal authorities.
We do not use your personal data to train general-purpose AI models.
You can ask to access, correct, delete, or export your data at any time.

For privacy requests, contact privacy@brixel.ai.

About this Privacy Policy

This Privacy Policy explains how Brixel collects, uses, protects, and shares your personal data. It applies to our website, products, services, and all interactions with our team.

In this document, "Brixel," "we," "us," and "our" refer to Brixel and its subsidiaries, headquartered at 67 boulevard du Val Claret, 06600 Antibes, France.

By using our services, you acknowledge the practices described here. If you have questions, contact privacy@brixel.ai.

Scope

This Policy applies whenever you:

Visit our website or our social media pages,
Use our products and services, including our workflow-building platform,
Participate in an event (in person or virtual) that we organize or sponsor,
Contact us (by email, via an online form, or any other channel),
Or otherwise interact in any way with Brixel.

We may provide extra privacy notices for specific situations, such as events or certain product features.

Who are we?

Brixel is headquartered at 67 boulevard du Val Claret, 06600 Antibes, France. We are responsible for processing your personal data when you use our services or interact with us.

For any questions about this Policy, email us at privacy@brixel.ai

Which Personal Data do we collect?

In the course of our activities, we may collect the following categories of Personal Data:

Contact and professional information

Name, email address, postal address, phone number, and job title.
In some cases, login credentials to access our services.

Communication and interaction data

Content of your interactions with us, such as emails, chats, feedback, and event participation.
Event registration details, including accessibility or dietary needs when relevant.

Platform / application usage data

Technical details about your activity, such as features used, pages visited, and logs.
Device and hardware details when needed for technical support.

Browsing and device data

IP address, browser type, device type, operating system, pages visited, and session duration.

We collect this data directly from you, and in some cases from third parties such as your employer, business partners, or public sources.

Why do we process your Personal Data?

To provide our services and fulfill contractual obligations

We manage accounts, answer support requests, and deliver services under our contracts.

To improve and develop our services

We analyze usage, feedback, and surveys to improve product quality and user experience.

To ensure security and compliance

We protect users and systems from fraud, abuse, and unauthorized access. We also meet legal and regulatory obligations.

To conduct communication, marketing, and event activities

We send product updates, manage event registrations, and run marketing communications. We may use event photos or recordings when you have consented or when allowed by law.

Other legitimate business purposes

We manage partner relationships, run satisfaction surveys, and evaluate campaign performance. We also perform audits and business analyses.

On what legal basis do we process your Personal Data?

Under applicable laws, including GDPR where relevant, we process personal data only when one of the following legal bases applies:

Contractual necessity: to perform a contract or take steps at your request before a contract.
Legitimate interest: for needs like security and product improvement, without overriding your rights.
Consent: when you have clearly agreed, for example for newsletters or optional cookies.
Legal obligations: when required by law or regulation.

With whom do we share your Personal Data?

When needed for the purposes above, we may share your personal data with:

Our internal teams and subsidiaries, on a need-to-know basis.
Trusted processors, such as hosting, payment, or email providers, under strict contracts.
Professional advisors, such as lawyers or auditors, under confidentiality obligations.
Authorities or courts when required by law or needed to protect our legal rights.

If we transfer data outside the EEA, we apply appropriate safeguards, including Standard Contractual Clauses when required.

Sharing with Third-Party Services and AI Commitment

We use third-party services, such as hosting, authentication, email delivery, and document management, to run our platform.

Data processed through these services, including Google Workspace APIs, is not used to develop, improve, or train general-purpose AI or ML models.

More broadly, neither Brixel nor providers acting for Brixel use your personal data to train general-purpose AI models.

We process personal data only for the purposes described in this Policy.

How long do we store your Personal Data?

We keep personal data only as long as needed for the purposes in this Policy or for legal obligations. In general:

Account and contract data is kept during the service period, then for applicable limitation periods.
When laws require retention, for example tax or accounting laws, we keep data for the required period.
When data is no longer needed, we delete it or anonymize it securely.

How do we protect your Personal Data?

We use physical, technical, and organizational safeguards to protect your personal data from unauthorized access, disclosure, alteration, and loss.

For example:

Storing data on secure servers,
Enforcing access control and authentication procedures,
Encrypting data where relevant,
Applying regular backup and data recovery protocols.

Your rights

Depending on applicable law, you may have the following rights:

Right of access: request details about the personal data we hold and a copy of it.
Right to rectification: ask us to correct inaccurate or incomplete data.
Right to erasure ("right to be forgotten"): ask us to delete your data in specific cases.
Right to object: object to processing based on legitimate interest in certain situations.
Right to restrict processing: ask us to pause processing in specific situations.
Right to data portability: receive your data in a structured format, or ask us to transfer it when feasible.
Right to withdraw consent: withdraw consent at any time when processing is based on consent.
Right to lodge a complaint with the competent data protection authority (in France: the CNIL).

To exercise these rights, contact us at privacy@brixel.ai.

Children's Privacy

Our services are not intended for children under 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided data, contact us at privacy@brixel.ai and we will take steps to delete it.

Data Breach Notification

If a personal data breach is likely to create a risk to your rights and freedoms, we will notify the competent authority (CNIL) within 72 hours of becoming aware of it. If the risk is high, we will also notify you without undue delay.

Cookies

Strictly Necessary Cookies

We currently use only strictly necessary cookies so our website and services work correctly. These cookies are essential for actions you request, such as logging in or submitting forms. You can block them in your browser, but parts of the site may stop working. These cookies do not directly identify you.

Updates

We may update this Policy to reflect changes in our practices, operations, or legal requirements. Please check this page regularly. The "last updated" date at the top shows the latest revision.

Contact Us

For any question about this Policy or our data processing practices, email us at privacy@brixel.ai