Privacy Policy
Last updated: March 9, 2026
1. Introduction
Brinix, Inc. ("Brinix," "we," "our") operates the Brinix brand asset management platform at brinix.io and app.brinix.io (the "Service"). This Privacy Policy explains how we collect, use, and protect your information.
2. Information We Collect
You provide: Name, email, organization details, profile information, uploaded files and assets, communications within the Service, and payment details (processed by our third-party payment provider — we never store full card numbers).
Collected automatically: Usage data (pages viewed, features used, timestamps), device information (browser, OS, screen resolution), IP addresses, access times, and essential cookies for authentication.
From third parties: Your email address when an organization administrator invites you, and limited data from connected integrations you authorize.
3. How We Use Your Information
We use your information to operate and maintain the Service, authenticate your identity, process your assets (including AI-powered tagging, metadata extraction, and search), facilitate collaboration and team features, send transactional emails (magic links, invitations, approvals), provide support, improve the Service, and comply with legal obligations.
4. AI Features
Our AI processes your uploaded files to generate tags, descriptions, color palettes, and other metadata. We use AI for natural language search including query expansion and semantic matching. We do not use your content to train general-purpose AI models. Some AI features use third-party providers bound by data processing agreements that prohibit training on your data.
5. Sharing
We do not sell your personal information. We share data only: within your organization (as permitted by its settings), with service providers who help us operate (hosting, email, payments, analytics — all contractually bound to protect your data), when required by law, or in connection with a business transfer (with notice to you).
6. Security and Retention
Data is encrypted in transit (TLS 1.2+) and at rest (AES-256). We use role-based access controls and maintain an incident response plan. No system is 100% secure, but we apply industry-standard protections.
We retain account data while your account is active, uploaded assets until you or your admin deletes them, and anonymized usage data for analytics. After account termination, personal data is deleted within 90 days unless legally required otherwise.
7. Cookies
We use essential cookies (authentication, sessions — cannot be disabled), functional cookies (theme and language preferences), and analytics cookies (usage insights — you can opt out via browser settings). We do not use advertising cookies or third-party trackers.
8. Your Rights
You may request access to, correction of, or deletion of your personal data by contacting [email protected]. We will respond within 30 days.
9. Children
The Service is not directed to individuals under 16. We do not knowingly collect information from children. Contact [email protected] if you believe a child has provided us with personal information.
10. Changes
We may update this policy and will notify you of material changes via the Service or email. Continued use after changes constitutes acceptance.