Privacy Policy

Account Information

When you create a Bricksy AI account, we collect your name, email address, and password (encrypted). If you sign up using Google OAuth, we collect your Google profile information.

Content Data

We store the content you generate using our AI service, including articles, images, and related metadata. This helps you access your content library and track your usage.

Usage Information

We collect information about how you use our service, including feature usage, generation history, and credit consumption to improve our service and provide analytics.

Payment Information

Payment processing is handled securely by Stripe. We do not store your credit card information. We only receive transaction confirmation and subscription status from Stripe.

We use your information to provide, maintain, and improve our services, including:

• Processing your AI content generation requests
• Managing your account and subscriptions
• Sending service-related notifications and updates
• Providing customer support
• Analyzing usage patterns to improve our service
• Preventing fraud and ensuring security

We take data security seriously and implement industry-standard measures to protect your information:

• All data transmission uses HTTPS encryption
• Passwords are encrypted using bcrypt hashing
• Authentication tokens use JWT with secure signatures
• Database access is restricted and monitored
• Regular security audits and updates
• Secure cloud infrastructure with backup systems

We use trusted third-party services to provide our functionality:

OpenAI

We use OpenAI's API to generate AI-powered content. Your prompts and generated content are processed according to OpenAI's privacy policy.

Stripe

We use Stripe for secure payment processing. Your payment information is handled directly by Stripe and never stored on our servers.

Google OAuth

If you sign in with Google, we receive your basic profile information (name, email) according to Google's OAuth policies.

SendGrid

We use SendGrid to send transactional emails (verification, password reset, notifications).

You have the following rights regarding your data:

• Access: You can access your personal information and content library at any time
• Update: You can update your account information through your profile settings
• Delete: You can request account deletion by contacting our support team
• Export: You can export your generated content from your library
• Opt-out: You can unsubscribe from promotional emails at any time

We retain your data for as long as your account is active. If you delete your account, we will remove your personal information and content within 30 days, except where retention is required by law or for legitimate business purposes (e.g., transaction records for tax compliance).

Our Chrome Extension respects your privacy:

• Authentication tokens are stored locally in your browser using Chrome's secure storage API
• The extension only accesses websites when you explicitly activate it
• We do not track your browsing history or collect data from websites you visit
• Content generation requests are sent directly to our API over HTTPS
• No personal data is shared with third parties through the extension

We use minimal cookies and local storage to provide our service:

• Authentication cookies to keep you logged in
• Session storage for temporary data during your session
• No third-party advertising or tracking cookies
• No sale of personal data to advertisers