Privacy Policy

Last updated: May 2026

Who's responsible for your data

Data controller

Rocket Science Pte. Ltd. (operator of Brixfox)

Registered office

160 Robinson Road, #14-04 Singapore Business Federation Center, Singapore (068914)

Privacy contact

info@brixfox.com

What we collect, why, and how long we keep it

Account data — email + password hash

Collected when you sign up. Used to authenticate you and send transactional email about your account. Lawful basis: performance of contract (GDPR Art. 6(1)(b)). Retained while your account is active and for 24 months after last login, after which it's deleted.

Subscription & payment data

Handled by Stripe. We never see your card number. We store your Stripe customer ID and subscription status so we can grant or revoke access. Lawful basis: performance of contract. Retained as long as your subscription is active plus the legally required accounting period.

Saved properties & portfolios

When you save listings or build a portfolio, we store those preferences linked to your account. Lawful basis: performance of contract. Deleted with your account.

Analytics & usage data — only if you consent

Page views, anonymised user agent, country-level location, and aggregated interaction events. Sent to Google Analytics 4. Lawful basis: consent (GDPR Art. 6(1)(a)) — collected only after you accept analytics cookies in our consent banner. GA4 default retention: 14 months. You can withdraw consent any time via the .

Marketing data — only if you consent

Conversion measurement and audience signals shared with Google Ads. Lawful basis: consent. Retained per Google Ads defaults (typically 540 days). Same withdrawal mechanism as analytics.

Server logs & fraud signals

Brief records of your IP address, request path, and response code, retained for up to 30 days. Used for security, abuse prevention, and debugging. Lawful basis: legitimate interest in protecting the platform (GDPR Art. 6(1)(f)).

Who we share data with

We don't sell your personal data. We share it only with the third-party processors that make Brixfox work:

  • Vercel — hosts the website and serverless functions (US/EU regions).
  • Supabase — managed Postgres database for your account & saved data (EU region).
  • Stripe — payment processing & subscription management (US/EU/SG).
  • Google (Analytics + Ads) — only if you grant consent (US/global).
  • Anthropic / Google AI — power our AI analysis features. Property data and your questions are sent at request time; no long-term storage of your prompts on our side.

Where data leaves the EEA (e.g. to Stripe US, Google US, or our Singapore HQ), transfers rely on the EU Standard Contractual Clauses or each provider's adequacy decisions where applicable.

Cookies

Essential cookies — needed for login, checkout, and CSRF protection. Always on; can't be turned off without breaking the site.

Analytics cookies — Google Analytics. Off by default. Turn on or off any time:

Marketing cookies — Google Ads. Off by default. Same controls.

Your rights

If you're in the EU, EEA, UK, or any jurisdiction with similar laws, you have the right to:

  • Access the personal data we hold about you
  • Rectify data that's wrong or incomplete
  • Erase your data ("right to be forgotten") — request deletion of your account
  • Restrict or object to certain processing
  • Portability — receive a copy of your data in a machine-readable format
  • Withdraw consent at any time, where processing is based on consent
  • Lodge a complaint with your local data protection authority

To exercise any of these, email info@brixfox.com with the subject line "Privacy request". We respond within 30 days.

Changes to this policy

We may update this policy as the platform evolves. Material changes will be flagged on the site and the "Last updated" date at the top will move. Continued use after the update means you accept the revised policy.

Questions about your privacy? Email us at info@brixfox.com