Bricks — Privacy Policy

BRICKS PRIVACY POLICY

Effective: August 27, 2026
Last updated: October 30, 2026
Organization: Bricks Group
Privacy contact: privacy@brxs.ca

This policy explains how Bricks Group collects, uses, and discloses personal information for brxs.ca, the Bricks apps, and related booking and photographer-apply flows, under PIPEDA and applicable Ontario privacy rules.

1. What we collect

Booking: name, brokerage, email, phone, property address, property type/size, package and add-on choices, booked date and clock time, access notes.
Payment: processed by Stripe. We do not store full card numbers. We may store Stripe customer id, last four, brand, and payment status.
Launch / marketing email: email, if you opted in.
Photographer applicants: name, phone, email, city, travel radius, specialties, equipment, portfolio URLs, resume file, HST number if provided, and IC-acceptance record.
Technical: IP address, device/browser, pages, and similar logs needed to run and secure the site.

1A. Bricks mobile apps

If you use our mobile apps, we also collect:

Account and profile: name, email, phone, and (for photographers) photo, skills, service area, availability, and drone certificate details you enter.
Photos, scans, and files you choose to upload: listing photos, 360° and floor plan captures, documents you scan or attach to a listing file, and portfolio samples.
Location (photographer accounts only): required to check in to a job, and used only to confirm you’re at the property. We store your position, its accuracy and your distance from the property when you check in, and use them if you report that the client did not show up. While the app is open, we also read the compass during 360° capture. We do not track your location in the background.
Device push token: if you allow notifications, a token from Apple or Google that lets us send job and listing updates. Turning notifications off in your phone’s settings stops them.
Saved data on your phone: your job list or listing files are stored on the device so you can read them without signal. Signing out removes them.

The apps do not include advertising or analytics SDKs, and we do not track you across other companies’ apps or websites.

Service providers for the apps: Supabase (sign-in, database, file storage; Canada), Expo (push notification delivery; United States), Apple and Google (push delivery, and sign-in if you choose it), Stripe (photographer payouts), and Mapbox (map tiles in a Bricks listing file; receives your IP address and the map area you view).

Deleting your account: in the Bricks app, photographers go to Me > Delete account; real estate offices go to Account > Delete account. You can also email privacy@brxs.ca. What we delete and keep is listed at brxs.ca/account-deletion.

2. Why

Provide quotes, take payment, schedule, dispatch, shoot, deliver, support, and refund.
Review photographer applications and keep a record of the IC agreement version accepted.
Tax, accounting, and legal records.
Improve the site (aggregated or de-identified where practical).
Marketing email only with CASL-compliant consent.

3. Who we share with

We do not sell personal information. We share what is needed with: Stripe; Supabase; OpenStreetMap/geocoding; Expo, Apple and Google push services, and Mapbox (for the apps); the assigned photographer (address, time, access notes, contact name as needed); counsel, accountants, or authorities when required by law. Photographers are independent contractors and must keep booking details confidential under the IC agreement.

4. Where

Primary app database, authentication, and storage run on Supabase in Canada. Other processors include Stripe and Vercel (United States), Expo push delivery and Mapbox for the apps (United States), and similar providers listed in section 3. By using the site you consent to those transfers where needed. We remain accountable under PIPEDA for personal information we collect.

5. Retention

Booking and payment records: generally 7 years. Delivered media: until delivered plus a limited operational window. Photographer applications: while we evaluate or engage you, then as required for records. Marketing consent records: as required by CASL. App push tokens: until you delete the account or the token stops working. On-device saved data: until you sign out. Deletion on request unless we must keep a record.

6. Your rights

Email privacy@brxs.ca to access, correct, or withdraw consent (subject to legal and booking obligations). You can also delete your account in the Bricks app (see 1A and brxs.ca/account-deletion). Aim to respond within 30 days. Complaint: Office of the Privacy Commissioner of Canada (priv.gc.ca).

7. CASL

Commercial electronic messages only with CASL consent. Unsubscribe on marketing. Transactional booking/application messages as needed to perform the service.

8. Children

Adults 18+. We do not knowingly collect information from children. Listing media is of property, not of children.

9. Security

TLS in transit, access-limited systems. Notify of a PIPEDA-significant breach as required.

10. Cookies and analytics

This site uses Vercel Analytics to measure aggregate usage. Vercel Analytics is cookieless: it does not set cookies, does not build a profile of you, and does not track you across other sites. The site sets no advertising or tracking cookies. If we ever add a tool that sets cookies, we will name it here first and ask for consent where the law requires it.

11. Changes

Posted on this page and dated.

Privacy Policy