Privacy Policy

1. Information We Collect

We collect the following types of information:

• Account data — name, email address, and password when you register
• Business data — business name, logo, contact info you enter in Settings
• Customer data — client records, jobs, invoices, and bookings you create
• Usage data — pages visited, features used, and actions taken within the app
• Payment data — processed through our payment provider; we do not store card numbers

2. How We Use Your Information

We use your data to:

• Provide, maintain, and improve the Brilla platform
• Process payments and send billing-related communications
• Send service announcements and support messages
• Analyze aggregate usage to improve the product
• Comply with legal obligations

We do not sell or rent your personal information to third parties.

3. Data Storage and Security

Your data is stored on secure servers provided by Supabase (hosted on AWS). We use industry-standard encryption in transit (TLS) and at rest. We maintain access controls and audit logs to protect against unauthorized access. No system is 100% secure, so please use a strong, unique password.

4. Third-Party Services

Brilla uses the following third-party services:

• Supabase — authentication and database hosting
• Resend — transactional and campaign email delivery
• Whop — payment processing
• Vercel — application hosting
• Google Analytics — aggregate usage analytics
• OpenStreetMap (Nominatim) — geocoding, which turns an address or ZIP code into map coordinates

Each service has its own privacy policy governing their use of data.

Geocoding sends the text of an address to OpenStreetMap. Client and job addresses, and the ZIP code a customer enters on a booking page, are looked up by our servers rather than from a customer's own browser, and the resulting coordinates are stored so each address is looked up once. The business-address and mileage tools look addresses up directly from the account owner's browser or the mobile app.

5. Cookies

Brilla uses cookies and similar technologies to maintain your session and remember your preferences. We use Google Analytics cookies for aggregate usage analysis. You can disable cookies in your browser, but some parts of the Service may not function correctly.

6. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and data
• Export your data at any time
• Opt out of marketing emails

To exercise these rights, contact us at support@getbrilla.co

7. Data Retention

We retain your data for as long as your account is active. If you cancel your account, we delete your data within 30 days, except where we are required to retain it for legal or accounting purposes.

8. Children's Privacy

Brilla is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you via email or in-app notice before material changes take effect. Continued use of the Service after changes constitutes acceptance.

10. Contact

Questions about your privacy? Email support@getbrilla.co