Privacy Policy
What we collect. The public pages work without an account. Standard web server logs (IP address, user agent, pages requested, timestamps) are kept briefly for security and capacity planning. Preferences you set — interface language, theme, view mode, and ★ Saved properties — are stored in your own browser (cookies/localStorage), not on our servers.
Accounts and sessions. Signing in stores your account details (name, e-mail, role, organization) and a session cookie (HttpOnly, secure) that keeps you signed in. Passwords are stored only as salted scrypt hashes. Sign-ins, uploads, record changes, and permission grants are written to your organization's audit trail — that is a product feature for your organization's governance.
Property records. Documents and data uploaded to a property belong to and are visible to the uploading organization only, subject to the roles and per-property grants its administrators configure. Organizations are isolated from one another; AI context is built only from records the asking user is permitted to see. AI questions and answers are logged per property for audit. Records are processed to provide the service (storage, text extraction, analytics, AI answers) and are not sold, shared across customers, or used to train models.
Your own cloud storage. An organization's administrator can connect the organization's own Google Drive, Microsoft OneDrive or Dropbox under Settings › Storage. Once connected, uploaded files are written to a Brikka folder in that account and are not kept on our servers; we keep the property record, each file's title, type and dates, and the text read from it for search and AI answers. Access is limited to what the file storage needs (on Google Drive, only files Brikka creates; on Dropbox, only the Apps/Brikka folder), access tokens are stored encrypted, and disconnecting removes our access immediately while leaving the files in place. Until a cloud is connected, files are stored on our servers.
Contact and updates. If you submit the contact form or sign up for e-mail updates, we store what you send to respond and to send the updates you requested. We do not sell or share this information. You can request deletion at any time via Contact.
Cookies. First-party cookies/localStorage are used for the session and the preferences above.
Advertising (Google AdSense). If advertising is enabled on the public pages of this Site, third-party vendors, including Google, use cookies to serve ads based on your prior visits to this and other websites. Google's use of advertising cookies (such as the DoubleClick cookie) enables it and its partners to serve personalized ads. You may opt out of personalized advertising at Google Ads Settings, and learn more at Google's advertising policies. Where required, ad personalization is subject to your consent choices. Advertising never appears inside the authenticated workspace.
Third-party links. News headlines and some resources link to external publishers; their privacy practices are their own.
Changes. This policy may be updated; material changes will be reflected on this page.