Privacy Policy
Effective: May 23, 2026 · Compliant with PIPEDA (Canada) and Ontario privacy law
This Privacy Policy explains how Bricks Media Inc. collects, uses, discloses, and safeguards personal information. We are committed to compliance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable Ontario privacy legislation.
1. Who We Are
Bricks Media Inc. ("Bricks") is the organization responsible for personal information collected through brxs.ca and our booking, dispatch, and brokerage platform applications. Our Privacy Officer can be reached at privacy@brxs.ca.
2. Information We Collect
We collect the following categories of personal information:
| Category | Specific Data | Source |
|---|---|---|
| Identity | Full name, email address, phone number, profile photo | Account registration |
| Professional | Real estate license number, brokerage name, team affiliation | Account registration / onboarding |
| Property | Listing addresses, property type, square footage, booking notes | Booking flow |
| Payment | Payment card last four digits, card brand, Stripe customer ID (full card numbers are never stored by Bricks) | Stripe payment processing |
| Usage | IP address, device type, browser, pages visited, feature interactions, session duration | Automatic collection via platform |
| Communications | Support emails, in-app messages, feedback submissions | Direct communications |
| Photographer / Vendor | Portfolio links, equipment list, service area polygon, WSIB certificates, insurance certificates, government ID (for onboarding verification) | Photographer application |
3. Why We Collect and Use Your Information
We process personal information for the following purposes:
- Service Delivery: Creating accounts, processing bookings, dispatching photographers, delivering media files, and sending job notifications.
- Payments: Processing subscription fees, overage billing, and photographer payouts via Stripe.
- Platform Security: Detecting fraud, preventing abuse, and verifying identity.
- Communications: Sending booking confirmations, delivery notifications, account alerts, and (where consented) marketing messages.
- Platform Improvement: Analyzing usage patterns to improve features and fix errors. No individual-level analysis is performed for advertising.
- Legal Compliance: Retaining records required by tax law, responding to lawful requests, and enforcing our Terms of Service.
4. Consent and Legal Basis
By creating an account, you consent to the collection and use of your personal information as described in this Policy. You may withdraw consent at any time by closing your account or contacting us, subject to legal and contractual obligations. Where consent withdrawal would prevent service delivery, we will inform you before proceeding.
5. Who We Share Your Information With
We do not sell your personal information. We share information only in the following circumstances:
- Photographers: Your booking details (property address, shoot date, special notes, contact name) are shared with the assigned Photographer to fulfil the booking.
- Service Providers: We share data with trusted third-party processors under data processing agreements:
- Stripe (payments and billing)
- Supabase (database and authentication infrastructure)
- Cloudflare (CDN, R2 file storage)
- Google (Maps geocoding, authentication)
- Fotello / Autoenhance (automated photo enhancement)
- BoxBrownie (virtual staging on request)
- Resend / Twilio (transactional email and SMS)
- Google Gemini (AI-powered dispatch routing — metadata only, no personal property images)
- Brokerage Administrators: If your account is linked to a Brokerage plan, your brokerage administrator can view your booking history, credit usage, and schedule through the Brokerage console.
- Legal Obligations: We may disclose information when required by law, court order, or to protect the rights and safety of Bricks, our users, or the public.
6. Data Storage and Location
Your data is stored on servers operated by Supabase (data centre: US East) and Cloudflare R2 (distributed globally via CDN). By using Bricks, you consent to your data being transferred to and processed in the United States and other jurisdictions. Transfers to these jurisdictions are protected by contractual data processing agreements consistent with applicable Canadian privacy law.
7. Data Retention
We retain personal information for as long as your account is active or as required to provide services and meet legal obligations:
- Account data: retained for the duration of the active account plus 7 years (to meet Ontario tax and business record requirements).
- Booking records: 7 years from the booking date.
- Delivered media files: retained for the duration of your active subscription. Files are deleted 90 days after account closure; you are responsible for downloading your files beforehand.
- Payment records: retained by Stripe per their data retention policy (minimum 7 years for tax compliance).
- Marketing consent records: retained indefinitely as required by CASL.
8. Cookies and Tracking
Our website uses cookies for session management, authentication, and usage analytics. We do not use third-party advertising cookies. You may disable cookies in your browser settings; however, doing so will prevent you from logging in to the platform.
9. Your Rights Under PIPEDA
You have the following rights regarding your personal information:
- Access: Request a copy of the personal information we hold about you.
- Correction: Request correction of inaccurate or incomplete information.
- Withdrawal of Consent: Withdraw consent to the use of your information (subject to legal obligations).
- Complaint: File a complaint with the Office of the Privacy Commissioner of Canada (OPC) at priv.gc.ca if you believe your privacy rights have been violated.
To exercise any of these rights, contact our Privacy Officer at privacy@brxs.ca. We will respond within 30 days.
10. CASL Compliance (Marketing Communications)
We will only send commercial electronic messages (email, SMS) to you if you have provided express or implied consent in accordance with Canada's Anti-Spam Legislation (CASL). Every marketing message includes an unsubscribe mechanism. Transactional messages (booking confirmations, delivery notifications, account alerts) are sent regardless of marketing consent as they are necessary to the service.
11. Children's Privacy
The Bricks platform is intended for professional use by adults aged 18 and over. We do not knowingly collect personal information from individuals under 18. If you believe we have inadvertently collected such information, contact us immediately.
12. Security
We implement technical and organizational measures appropriate to the sensitivity of personal information we hold, including TLS encryption in transit, encrypted at-rest storage, role-based access controls, and periodic security reviews. No system is completely secure; we cannot guarantee absolute security but we will notify you of a material breach affecting your personal information without unreasonable delay, as required by PIPEDA's mandatory breach reporting rules.
13. Changes to This Policy
We may update this Policy from time to time. We will provide notice of material changes via email or prominent notice on the platform at least 14 days before the effective date. Continued use of the platform after the effective date constitutes acceptance of the updated Policy.
14. Contact
Privacy Officer: privacy@brxs.ca
Bricks Media Inc. · Toronto, Ontario, Canada