Legal
Privacy Policy
How BricBook collects, uses, stores and protects your personal information. We take your data seriously — this document explains exactly what happens to it.
EFFECTIVE 19 SEPTEMBER 2026 · VERSION 1.0
1. Who we are
BricBook ("we", "us", "our") is a construction collaboration platform and architect marketplace operated for the Indian market. This policy describes how we handle personal information when you use bricbook.com, our client and studio dashboards, and any related services.
2. Information we collect
You give us directly
- Account details — name, email, phone number, WhatsApp number, profile photo, city, and (for architects) firm name, years of experience, portfolio, and specialties.
- Project content — site photos, drawings, chat messages, comments, annotations, and files you upload while collaborating on a project.
- Job briefs — details you post when hiring an architect, including budget range and project type.
Collected automatically
- Basic session information (login time, browser type) needed to keep you signed in and secure your account.
- Minimal error logs so we can fix bugs.
From third parties
- If you sign in with Google, we receive your name, email address, and profile picture from Google — nothing more.
We do not use advertising cookies, analytics trackers that identify you personally, or third-party data brokers.
3. How we use your information
- To create your account and let you sign in.
- To enable collaboration on your construction projects — sharing photos, drawings, chat, and updates with the specific people you've added to that project.
- To let clients discover architects on the marketplace.
- To send transactional notifications (project updates, mentions, invitations) via email and, where you've opted in, WhatsApp.
- To keep the service secure, prevent abuse, and comply with legal obligations.
We do not sell your personal information. We do not use your project content to train AI models. We do not share your data with advertisers.
4. Who can see your data
- Other project members — the client, architects, and any contributors you invite to a specific project can see the content of that project. Nothing crosses over to other projects.
- Marketplace visitors — if you're a listed architect, your public profile (name, firm, city, specialties, portfolio) is visible to anyone browsing the marketplace. Your contact details are not shown until a client engages you.
- Service providers — Supabase (Mumbai region) hosts our database, storage, and authentication. Google provides "Sign in with Google". Resend handles transactional email. Each is contractually bound to only process data for BricBook.
- Legal authorities — only when required by a valid Indian legal process.
5. Where your data is stored
All personal data is stored in Mumbai, India on Supabase's ap-south-1 infrastructure. It does not leave India during normal operation. Files (photos, drawings) are stored in Supabase Storage buckets scoped to your project with row-level security enforced at the database level.
6. How long we keep it
- Active accounts — for as long as you use BricBook.
- Closed accounts — most personal data is deleted within 30 days of account closure. Anonymised aggregate data (e.g. "N projects in Mumbai") may be kept for statistics.
- Legal hold — if we're legally required to retain something, we will.
7. Your rights under the DPDPA, 2023
India's Digital Personal Data Protection Act, 2023 gives you these rights over your personal data. You can exercise any of them by emailing sdefiners@gmail.com:
- Right to access — get a copy of what we hold about you.
- Right to correction — fix anything that's wrong.
- Right to erasure — ask us to delete your data.
- Right to withdraw consent — for anything we processed on the basis of your consent.
- Right to grievance redressal — if you're not satisfied with our response, you can escalate to the Data Protection Board of India.
8. Security
We use industry-standard practices: HTTPS everywhere, encrypted passwords, row-level security on the database, and access controls scoped to project membership. No system is perfectly secure, but we take reasonable steps to protect your information from unauthorised access, alteration, or loss.
9. Children
BricBook is not intended for anyone under 18. We do not knowingly collect data from children.
10. Changes to this policy
If we make material changes to this policy, we'll notify you by email (to the address on your account) at least 14 days before the change takes effect. Minor clarifications or corrections may be posted here without notice.
11. Contact us
Questions, requests, or concerns: