Brickwise

Privacy Policy

Last updated: November 11, 2025

Brickwise AI Privacy Policy

1. Introduction

Brickwise AI ("Brickwise," "we," "us," or "our") respects your privacy and is committed to protecting your personal data.

This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our platform, websites, APIs, and related services (the "Services").

Brickwise is a trading name of Ismail Jeilani (sole trader), based in London, United Kingdom.

2. Scope

This Privacy Policy applies to:

  • Account users (landlords, agents, or other platform users).
  • Contacts uploaded by users (e.g., tenants, contractors, landlords).
  • Visitors to our website and demo pages.

3. Roles and Responsibilities

  • For your account data (e.g., your email, phone, subscription details), Brickwise acts as a data controller.
  • For uploaded tenant/contractor/landlord data, you (the landlord or agent) are the data controller and Brickwise acts as your data processor. We process that data solely to provide the Services in accordance with your instructions.

4. Information We Collect

a. Information You Provide

  • Account data: Name, email, phone, company, password.
  • Billing data: Payment method, billing address, subscription history (processed via Stripe).
  • Contacts you upload: Tenant, landlord, or contractor details (names, emails, phone numbers, addresses, lease details, rent/deposit amounts, contractor contact information).
  • Communications: Calls, SMS messages (including content, metadata, and opt-in/opt-out status), WhatsApp, emails (including metadata, transcripts, recordings, and summaries).
  • Support and demo requests: Details you provide when contacting us.

b. Information Collected Automatically

  • Device and usage data: Browser type, IP address, operating system, pages visited.
  • Analytics: User events, actions, and attributes (via GA4, Microsoft Clarity).
  • Logs: Requests to our servers and edge functions, which may include identifiers (e.g., email, phone, tenant IDs).

c. Information From Third Parties

  • Contractor data: Fetched from Google Places API (ratings, reviews, contact info).
  • CRM integrations: HubSpot, Salesforce, or other CRMs you connect.
  • Scheduling: Calendly (name, email, phone when booking a demo).
  • Payment processing: Stripe (card details processed directly by Stripe, not stored by us).

5. How We Use Information

We process data for the following purposes:

  • To provide our Services: Managing tenants, handling calls, tracking issues, sending communications, recommending contractors.
  • To contact uploaded individuals on your behalf: Sending maintenance updates, rent reminders, scheduling notifications, issue status updates, or other service-related communications (including via SMS, subject to consent).
  • To manage billing and subscriptions: Charging fees, handling trials, enforcing usage limits.
  • To improve our Services: Troubleshooting, analytics, product development.
  • To comply with legal obligations: Tax, regulatory, or fraud-prevention requirements.
  • For marketing to account users: With your consent (or as allowed by law), we may send you product updates and promotions.

We do not use uploaded tenant/contractor contact details for Brickwise's own marketing unless those individuals independently opt in.

6. SMS Communications Policy

This section applies specifically to SMS (text message) communications with individuals such as tenants.

  • Purpose: We use SMS to provide 24/7 tenant support, maintenance coordination, rent reminders, and important property operation updates on behalf of your (the account user's) instructions.
  • Consent: We only send recurring service messages to individuals who have given their explicit, documented consent. Our standard opt-in process is user-initiated (e.g., a tenant texts us first for support). After resolving their initial query, we will send a separate, explicit offer to receive future recurring messages. Consent is only granted if the user replies with a specific keyword (e.g., "YES") to that offer.
  • Opt-Out: You may opt out of SMS communications at any time by replying STOP to any message you receive from us. You will receive one final confirmation message confirming your unsubscription.
  • Help: For assistance or more information, reply HELP to any message.
  • Cost and Frequency: Message and data rates may apply. Message frequency varies based on user activity and settings (e.g., maintenance requests). Recurring alerts are typically 2-5 messages per month.
  • Non-Sharing: We do not sell, rent, or share mobile phone numbers collected for SMS communications with third parties or affiliates for their own marketing purposes.

7. Legal Bases for Processing (UK/EU GDPR)

We rely on the following lawful bases:

  • Contract: To provide the Services you request.
  • Legitimate Interests: Service improvement, security, fraud prevention.
  • Consent: Where required for analytics, marketing, non-essential cookies, or to send recurring SMS messages.
  • Legal Obligation: Compliance with applicable laws.

When processing uploaded tenant/contractor data, we act as a processor on the basis of your instructions.

8. Sharing and Disclosure

We may share personal data with:

  • Service providers and sub-processors (for hosting, payments, analytics, communications, AI, etc.).
  • Third-party integrations you choose to enable (e.g., HubSpot).
  • Contractors suggested via Google Places, if you choose to share tenant issues with them.
  • Legal authorities, where required by law or to protect rights and safety.
  • Mobile Phone Numbers: We do not sell, rent, or share mobile phone numbers collected for SMS communications with unaffiliated third parties for their own marketing or promotional purposes.

Current Sub-Processors

  • Supabase (authentication, database, hosting – globally, primarily EU/US).

  • Stripe (payments – US/EU).

  • Google Maps/Places (address autocomplete, contractor data – US).

  • HubSpot (CRM – US/EU).

  • Google Analytics 4 (analytics – US).

  • Microsoft Clarity (analytics – US).

  • Resend (email delivery – US).

  • OpenAI & Hugging Face (AI processing – US/EU).

  • Calendly (scheduling – US).

  • (Note: A communications sub-processor like Twilio for SMS would also be listed here).

We enter into Data Processing Agreements (DPAs) and Standard Contractual Clauses (SCCs) where required for international transfers.

9. International Transfers

Your data may be transferred to and processed in countries outside your own, including the United States. Where required, we use legal safeguards such as Standard Contractual Clauses (SCCs) or equivalent frameworks to protect personal data.

10. Data Retention

  • Account data: Retained for as long as your account is active.
  • Tenant/contractor data: Retained until you delete it or close your account.
  • SMS messages, call logs, transcripts, recordings: Retained up to 24 months (unless you delete them sooner).
  • Analytics data: Retained in GA4 according to its default retention (up to 14 months).
  • Logs: Retained for troubleshooting and security, then deleted or anonymized.

11. Your Rights

Depending on your jurisdiction, you may have rights to:

  • Access your data.
  • Correct inaccuracies.
  • Request deletion ("right to be forgotten").
  • Restrict or object to processing.
  • Data portability.
  • Withdraw consent (where processing is based on consent). For SMS messages, you can withdraw consent at any time by replying STOP.
  • File a complaint with a supervisory authority.

To exercise these rights, contact us at privacy@brickwiseai.com.

If you uploaded third-party data (e.g., tenants), you are responsible for honoring their rights requests. Brickwise will assist where possible.

12. Security

We implement appropriate technical and organizational measures, including:

  • Encryption of data in transit and at rest.
  • Role-based access controls and Row-Level Security (RLS).
  • Token storage protections (with plans to migrate OAuth tokens to secure vaults).
  • Monitoring and logging for suspicious activity.

No system is 100% secure, but we work to minimize risks.

13. Children's Privacy

Our Services are not directed to individuals under 18. We do not knowingly collect data from children. If we become aware that data has been provided about a minor without proper authority, we will delete it.

14. Changes to This Policy

We may update this Privacy Policy from time to time. Significant changes will be notified by email or in-app notice. Continued use after updates indicates acceptance.