Privacy Policy for Bryx AI

Bryx AI provides tools for creating, managing, and organizing marketing, media, and business content. This Privacy Policy explains how we collect, use, store, share, and protect personal data when you use our website, apps, platform, support channels, account authentication, and connected third-party services.

For the purposes of UK GDPR, EU GDPR, and applicable data protection laws, Bryx AI is the controller of personal data we collect directly from users unless a separate agreement says otherwise.

Account information: name, email address, profile details, login method, workspace membership, billing status, and account preferences.

Authentication information: data received from sign-in providers such as Google, LinkedIn, TikTok, Instagram, Facebook, or Meta where you choose to connect or authenticate through those services.

Content and project data: prompts, uploaded files, generated images, videos, audio, documents, brand assets, campaign drafts, workspace content, and related metadata that you create or store in Bryx AI.

Technical information: device type, browser type, IP address, approximate location, session information, log data, error reports, cookies, and similar technologies used to keep the service secure and functioning.

Payment and subscription information: plan type, subscription status, transaction identifiers, billing contact details, and payment-provider records. We do not store full card numbers on our own systems.

Support and communications: messages, requests, feedback, call notes, or other information you send to us through support, email, forms, or sales conversations.

We use personal data to create and manage accounts, authenticate users, operate workspaces, provide generation and editing tools, store user content, process subscriptions, provide support, detect abuse, improve reliability, and communicate important service information.

We may also use limited usage and product analytics to understand feature performance, fix bugs, improve user experience, and protect the platform from misuse.

We do not sell your personal data. We do not use private user content to train public models unless you have given explicit permission or a separate agreement allows it.

When you sign in to Bryx AI using Google Authentication, we request and store the minimum information needed to identify and manage your account, usually your name and email address.

Bryx AI uses Google as an authentication provider. Unless a specific product feature clearly asks you to connect another Google service, we do not request or access Google Calendar, Drive, Gmail, Contacts, Photos, YouTube, or other Google service data.

Bryx AI's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for serving personalised advertisements, sell it to data brokers, or allow humans to read it except where needed for security, support, compliance, or with your consent.

You can revoke Bryx AI's access to your Google account through your Google Account permissions. You may also request deletion of Google-authenticated account data by contacting us.

If you choose to connect LinkedIn, TikTok, Instagram, Facebook, or Meta accounts, we may receive information that those platforms make available through their authentication or API permissions. This can include your public profile, account identifier, username, profile image, email address where available, connected pages or business accounts, ad account identifiers, permissions granted, access tokens, refresh tokens, post metadata, media references, analytics, comments, campaign information, or publishing status.

We only request permissions that are needed for the feature you choose to use, such as account connection, content planning, post drafting, publishing, campaign management, analytics, or asset organization.

We use connected social platform data to provide the requested integration, maintain the connection, display relevant account or content information, publish or schedule content when you instruct us to, retrieve performance data where authorised, troubleshoot issues, and comply with platform rules.

Each connected platform remains governed by its own privacy policy, terms, API permissions, and account controls. You can usually revoke Bryx AI's access from the relevant platform's settings or permissions page.

We do not sell social platform data or use it for unrelated advertising. We do not publish, schedule, edit, or delete social content unless you or an authorised workspace member instructs the platform feature to do so.

Content you upload, create, generate, edit, or store in Bryx AI may include personal data. You are responsible for ensuring you have the right to upload and process any content that contains personal data, confidential information, images of people, customer records, or third-party intellectual property.

We process this content to provide the product features you use, including generation, editing, storage, retrieval, export, collaboration, support, and safety checks.

Workspace owners and authorised workspace members may be able to view, edit, export, or delete workspace content depending on their permissions.

Where UK GDPR, EU GDPR, or similar laws apply, we process personal data under one or more legal bases: performance of a contract, legitimate interests, consent, compliance with legal obligations, and protection of vital interests where relevant.

Examples include using account data to provide the service, technical logs to secure the platform, billing data to manage subscriptions, consent-based cookies where required, and records we must keep for legal or tax obligations.

We may share personal data with trusted service providers who help us operate Bryx AI, such as hosting providers, database providers, payment processors, email services, analytics providers, customer support tools, security tools, and AI or media processing providers.

These providers may only process personal data as needed to provide their services to us and must protect it under appropriate contractual and security obligations.

We may also disclose information if required by law, to enforce our terms, protect users, investigate abuse, prevent fraud, respond to lawful requests, or in connection with a business transfer such as a merger, acquisition, restructuring, or sale of assets.

We do not sell personal data.

Bryx AI and its service providers may process personal data in the United Kingdom, European Economic Area, United States, and other countries where our infrastructure or providers operate.

Where required, we use appropriate safeguards for international transfers, such as adequacy decisions, standard contractual clauses, data processing agreements, and other lawful transfer mechanisms.

We use technical and organizational measures designed to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure. These measures may include access controls, encryption in transit, secure infrastructure, logging, monitoring, and permission-based workspace controls.

No online service can guarantee absolute security. You should use a strong password, protect your login credentials, and only grant workspace access to people you trust.

We retain personal data for as long as needed to provide the service, maintain your account, comply with legal obligations, resolve disputes, enforce agreements, improve security, and support legitimate business operations.

When you delete content or request account deletion, we will delete or anonymise personal data unless we need to retain it for legal, security, fraud-prevention, tax, accounting, backup, or dispute-resolution reasons.

Backups and logs may persist for a limited period before being overwritten or deleted in the ordinary course of business.

Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a copy of your personal data. You may also have the right to withdraw consent where processing is based on consent.

If GDPR or UK GDPR applies, you may also have the right to lodge a complaint with your local data protection authority. In the United Kingdom, this is the Information Commissioner's Office.

To exercise your rights, contact us using the details below. We may need to verify your identity before completing a request.

We may use cookies, local storage, pixels, and similar technologies to keep you signed in, remember preferences, measure performance, improve the product, and protect the platform.

Where required by law, we will ask for consent before using non-essential cookies. You can also control cookies through your browser settings.

Bryx AI is not intended for children under 13, and we do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, please contact us and we will take appropriate steps to delete it.

We may update this Privacy Policy from time to time to reflect product changes, legal requirements, platform integrations, or operational updates. When we make material changes, we will take reasonable steps to notify users or make the update clear on this page.

For questions about this Privacy Policy, connected platform data, account deletion, or data protection rights, please contact:

Bryx AI

Email: info@bryxai.com