This Privacy Policy explains what information Brixstep ("we") collects when you use Brixstep (the "Service") at brixstep.com, how we use it, and who we share it with.
1. Information we collect
We collect:
- Account information — when you sign in with Google or GitHub, we receive your name, email address, and profile picture from that provider. We never see or store your sign-in password.
- Content you create — models you build in the builder, MOCs you view or save, and any Custom Creation Requests you submit, including whatever description or reference material you provide with them.
- Billing information — if you subscribe to a paid plan, our payment processor (Paddle) collects and stores your payment details directly. We never see or store your full card number; we only receive confirmation of your subscription status and billing history from Paddle.
- Usage data — standard technical data like IP address, browser type, and pages visited, collected automatically to operate and secure the Service.
2. How we use this information
We use the information above to:
- operate the Service — sign you in, save and load your builds, run the viewer;
- process subscriptions and respond to billing questions;
- fulfill Custom Creation Requests you submit;
- communicate with you about your account, orders, or changes to our policies; and
- maintain the security of the Service and prevent abuse.
We don't use your information for targeted advertising, and we don't sell it.
3. Who we share it with
We share information only with the service providers that help us run Brixstep — our payment processor (Paddle), our hosting and database providers, and your chosen sign-in provider (Google or GitHub) — and only to the extent needed for them to provide that service. We don't sell your information to third parties, and we don't share it for their own marketing purposes.
We may also disclose information where required by law, or to protect the rights, property, or safety of Brixstep, our users, or others.
4. Cookies
We use a session cookie to keep you signed in. We don't use third-party advertising or tracking cookies.
5. Data retention
We keep your account information and content for as long as your account is active. If you'd like your account and associated data deleted, contact us at the address below and we'll delete it, except where we're required to keep records (for example, billing records) for legal or accounting reasons.
6. Your rights
You can ask us to access, correct, or delete the personal information we hold about you at any time by contacting us. Depending on where you live, you may have additional rights under local law (such as the GDPR or CCPA); we'll honor requests made under those laws to the extent they apply to you.
7. Children's privacy
Brixstep isn't directed at children under 13, and we don't knowingly collect personal information from them. If you believe a child has provided us with personal information, contact us and we'll delete it.
8. Security
We take reasonable technical and organizational measures to protect your information, but no method of transmission or storage is completely secure, and we can't guarantee absolute security.
9. Changes to this policy
We may update this Privacy Policy from time to time; the "Last updated" date above reflects the latest revision. Continuing to use the Service after a change means you accept the updated policy.
10. Contact
Questions about this policy, or requests about your data, can be sent to inkhill@brixstep.com.