Privacy Policy

Brick Pulse, LLC (“Brick Pulse,” “we,” “us,” or “our”) is a Michigan limited liability company. We provide the inventory-management and synchronization tools available at brickpulse.app and our related services (the “Service”).

This Policy explains what personal data we collect, how we use and share it, and the choices and rights you have. The Service is available internationally; your data is processed and stored in the United States (see “International Data Transfers”).

Our role. For information about your Brick Pulse account and your use of the Service, we act as a data “controller.” For the inventory, listing, order, and related data that we read from and write to the marketplaces you connect, we act as your service provider and process that data on your behalf and on your instructions (a “processor” under the GDPR). Business customers who need a data processing agreement can request one at [email protected].

1. Information We Collect

• Account information — your name, email address, and a securely hashed password.
• Marketplace credentials — the API keys and tokens for the marketplaces you connect (currently BrickLink, BrickOwl, and eBay), stored encrypted and used only to operate the synchronization you authorize.
• Inventory, listing, and order data — catalog, quantity, pricing, order, and related data we read from or write to your connected marketplaces to provide the Service.
• Payment information — handled by Stripe, our payment processor. We receive limited billing details (such as your subscription status and the last four digits of your card) but we do not store full card numbers. Stripe also processes limited location and tax-status data to calculate any tax due at checkout.
• Collector and scanning features — collection data you choose to import (for example, from Rebrickable) and images you submit for part, set, or minifigure recognition (processed by Brickognize — see Section 3).
• Usage and device data — log data such as IP address, browser type, actions taken, and timestamps, used for security, troubleshooting, and operating the Service. We also use a privacy-friendly, cookieless analytics tool (Cloudflare Web Analytics) to understand, in aggregate, how the Service is used; it does not set cookies, does not identify you individually, and does not track you across other websites. We use only strictly necessary cookies.

2. How We Use Information and Our Lawful Bases

We use the information above to operate, secure, and improve the Service; perform the synchronization you request; process billing and calculate tax; provide support; prevent fraud and abuse; communicate with you about the Service; and comply with our legal obligations.

Where the GDPR or UK GDPR applies, our lawful bases are: performance of a contract (to provide the Service you sign up for), legitimate interests (to secure, maintain, and improve the Service and prevent fraud, balanced against your rights), legal obligation (for tax, accounting, and similar requirements), and consent where we ask for it (which you can withdraw at any time).

3. How We Share Information

We do not sell your personal information, and we do not “share” it for cross-context behavioral advertising. We disclose information only as follows:

• Service providers (sub-processors), under contract and only as needed to run the Service. Our current sub-processors — including Cloudflare (hosting, infrastructure, database, and privacy-friendly analytics), Stripe (payments, billing, and tax calculation), Resend (transactional email), Rebrickable (collection import), and Brickognize (image recognition) — are listed and kept current on our Sub-processors page at brickpulse.app/subprocessors.
• Image recognition. When you use a scanning feature, the images you submit are sent to Brickognize to identify the item. Brickognize may store those images and use them to improve its recognition model. If this matters to you, avoid submitting images that contain personal or sensitive content.
• Marketplaces you connect, to perform the synchronization you authorize.
• Legal and safety reasons — to comply with law, enforce our terms, or protect the rights, safety, and property of Brick Pulse, our users, or others.
• Business transfers — in connection with a merger, acquisition, or sale of assets, subject to this Policy.

4. International Data Transfers

We are based in the United States and process data there. If you use the Service from outside the U.S. (including the EEA, UK, or Switzerland), your information is transferred to and processed in the U.S. Where required, we rely on appropriate safeguards for these transfers, such as the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum.

5. Data Security

We use industry-standard safeguards designed to protect your information, including encryption of sensitive data — such as marketplace credentials — at rest (for example, AES-256-GCM) and in transit (TLS), along with access controls and least-privilege access. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If we become aware of a data breach affecting your personal data, we will notify you and the relevant authorities as required by applicable law.

6. Data Retention

We keep your information for as long as your account is active and as needed to provide the Service. After you delete your account, we delete or de-identify your personal data within 30 days, except where we must retain certain records for legal, tax, accounting, or dispute-resolution purposes, or where retention is required by a third party such as Stripe for payment records.

7. Your Rights and Choices

You can access and update your account information in your settings, disconnect any marketplace at any time, and delete your account and associated data using the in-app deletion option or by emailing [email protected].

• EEA, UK, and Swiss users (GDPR / UK GDPR): You have rights to access, rectification, erasure, restriction, data portability, and objection, and to withdraw consent at any time. You may also lodge a complaint with your local supervisory authority.
• California users (CCPA / CPRA): You have rights to know, access, delete, and correct your personal information, and not to be discriminated against for exercising those rights. We do not sell or “share” personal information as those terms are defined under California law.
• Other U.S. state privacy laws: Where they apply, we honor the equivalent rights they provide.

We respond to verified requests within the timeframes required by applicable law and may need to verify your identity before acting on a request.

8. Cookies

We use only strictly necessary cookies — for example, to operate the Service, keep you signed in, and protect the Service through our infrastructure provider's security features. For analytics we use Cloudflare Web Analytics, which is cookieless and sets no cookies on your device. We do not use advertising or cross-site tracking cookies.

9. Children's Privacy

The Service is intended for adults. You must be at least 18 years old to use it, and the Service is not directed to anyone under 18. We do not knowingly collect personal data from anyone under 18. If you believe someone under 18 has provided us information, contact [email protected] and we will delete it.

10. Changes to This Policy

We may update this Policy from time to time. If we make material changes, we will give you reasonable notice (for example, by email or an in-app notice) before they take effect. The “Last updated” date above shows when this Policy was last revised.

11. Contact

Questions or requests? Contact us at [email protected].

Brick Pulse, LLC · 5618 Charolais Dr SW, Wyoming, MI 49418, USA