Who this policy covers
BRIX Strategies (“Brix,” “we,” “us,” or “our”) provides a website and business workspace for managing leads, customer communications, appointments, and related services. This policy covers information we handle when you visit our website, use our workspace, connect an integration, or contact us.
When a business uses Brix to manage its customers’ information, that business determines why the information is collected and how it is used. We process that information to provide the service on the business’s behalf. If you are a customer of a business using Brix, you can contact that business about its practices or contact us for help directing your request.
Information we collect
- Account and business information: your name, email address, sign-in identifiers, business or workspace details, team membership, role, preferences, and calling number when provided.
- Workspace information: customer names and contact details, leads, notes, uploaded photos and attachments, message content, communication consent and opt-out records, call history and status, tasks, and appointment details entered or received through Brix.
- Connected service information: authorization credentials and meeting details needed to create and manage meetings when you choose to connect Zoom or Google Meet. See Zoom & meeting data.
- Technical information: IP address, browser and device information, request and error logs, session information, and notification subscription details when you enable push notifications.
- Communications with us: information you include in support requests, sales inquiries, and bookings, including your name, email address, call-back number, appointment details, text-reminder choice, and the issue or service you want to discuss.
Information comes from you, authorized members of your workspace, connected services you authorize, communications providers, and the devices used to access Brix.
How we use information
We use personal information to provide and administer Brix, authenticate users, organize customer records, deliver requested communications and meeting features, respond to inquiries, maintain reliability and security, investigate misuse, and meet applicable legal obligations.
Where data protection law requires a legal basis, we rely on performing our agreements, our legitimate interests in operating and securing the service, compliance with legal obligations, and your consent where required. When we act on behalf of a business customer, we process its customer information under that business’s instructions.
Sign-in services use cookies and similar technologies to maintain sessions and protect accounts. Brix uses browser storage for service preferences and public application assets. Workspace data may be held temporarily in tab memory to make navigation faster; the service worker does not cache customer records, messages, attachments, or authenticated API responses. You can manage cookies and storage through your browser, although disabling them may prevent sign-in or other features from working.
Analytics & advertising measurement
Our growth-plan page also measures engagement in our own systems. We assign random browser and visit identifiers and record step and section views, visible and active time, field focus time, edit counts, validation categories, booking progress, and video playback activity. Video measurements include playback and attentive watch time, pauses, buffering, seeks, playback speed, and which portions were played. These engagement records do not contain your form answers, contact details, screen recordings, keystroke contents, full page addresses, or IP addresses. Authorized Brix administrators can review visit timelines to improve the page.
The random browser identifier is stored in your browser for 90 days after your last visit. A visit identifier is stored for the current browser tab and can be reused on reload for up to 30 minutes after activity. These identifiers do not follow you across devices or browsers. If browser storage is blocked, tracking uses temporary identifiers for that page view. Internal engagement events are scheduled for deletion from our active database after 90 days.
When configured, our growth-plan page uses Google Analytics 4 to measure page and step views, active time, field engagement, validation errors, available-time loading, and booking completion. We disable Google analytics and advertising cookie storage and advertising personalization. Our custom event code sends predefined step and field names, counts, durations, and error categories. It does not send your form entries, contact details, booking identifiers, or query-string values. Google may still receive technical information when its tag sends measurements without cookies. See the Google Privacy Policy.
Our growth-plan page loads the Meta Pixel automatically to send Meta a page-view event and sends lead and scheduling events when your booking is confirmed. We use these events to measure and improve our Facebook and Instagram ads. Our browser event code does not include your form answers, name, email address, or phone number. The pixel uses advertising cookies, and Meta may also receive technical information such as your IP address and browser details. See Meta’s Privacy Policy for how Meta uses the information it receives.
We also use Meta’s Conversions API to send a scheduling event from our server after a growth-plan booking is confirmed. This can operate without cookies or the browser pixel. The event includes a booking event identifier, the booking-confirmation time, the page address, your IP address and browser details, and a hashed version of your email address for matching. Hashing changes the format of your email address; it does not make the information anonymous. We may also include an advertising click identifier from the page address and Meta’s browser and click identifiers from cookies when available. We do not include your phone number, SMS consent, or growth-plan answers in this server event.
We honor a Global Privacy Control signal by suppressing our internal engagement tracking, Google analytics, the Meta pixel, and the server scheduling event. You can also contact us using the privacy-request details below about applicable rights to opt out of sharing or targeted advertising.
Text messaging privacy
When you text START to our BRIX Strategies text number, we record your mobile number, the time and source of your opt-in, your messages, and any opt-out request so we can provide the conversation and honor your choices.
On the growth-plan form, Brix saves your contact information, phone number, and any optional business details you provide when you choose to see available times, even if you do not finish booking. We use those answers to prepare for a possible sales conversation. If you book a public sales phone call, we give Calendly the number you entered so BRIX can call you at the requested time. You can separately opt in to a transactional text reminder 15 minutes before the call; if you do, we send the same number to Calendly for that reminder. Calendly and its messaging provider process and send the reminder. Brix records your choice but does not send a separate sales-call text. The reminder choice does not authorize marketing texts.
No mobile information or SMS opt-in data will be sold or shared with third parties for promotional or marketing purposes. We share information with communications providers only as needed to deliver messages, operate the service, and meet legal or carrier requirements. Reply STOP to opt out of further texts or HELP for assistance.
Zoom & meeting data
Connecting Zoom is optional. After you authorize it, Brix receives access and refresh tokens that allow it to create, retrieve, update, and delete meetings for the connected account. Tokens are stored encrypted on our server and associated with your Brix user and workspace. Brix does not receive your Zoom password.
For a linked event, Brix sends the event title, start time, duration, timezone, and meeting settings to Zoom. Brix stores the returned meeting identifier and participant join link with the appointment, along with the connection owner and synchronization status. Authorized workspace users can access appointment information and share the participant link.
The integration does not access Zoom meeting audio, video, recordings, transcripts, participant lists, or chat messages. Meeting information is used to provide and maintain the requested scheduling features; it is not used for advertising or training AI models. Brix does not automatically send customer invitations when a Zoom link is created.
Google Meet connections use Google Calendar authorization to create and manage linked events on your primary calendar. Brix sends the event title, timing, and timezone and stores the resulting event identifier and participant link. Connected meeting credentials stay on the server.
You control the connection. In Brix, open Account → Meeting accounts, choose Disconnect beside Zoom, and confirm Disconnect account. This deletes the saved connection credentials from Brix’s active database. You can also revoke Brix’s access through the Zoom App Marketplace. See the removal guide for both steps.
Disconnecting does not delete existing meetings in Zoom or the appointment records, meeting identifiers, and join links already saved in Brix. Removing the app in Zoom revokes access there; use Brix’s Disconnect control to remove the locally stored connection as well. To request deletion of retained Brix information, follow Your rights & requests.
Storage, security & retention
We use access controls, encrypted connections, and encryption for saved meeting authorization credentials to protect information. No service or transmission method can guarantee absolute security.
We retain account and workspace information while needed to provide the service and maintain the business records our customers manage. Information may also be retained where needed for security, resolving disputes, and legal obligations. Retention depends on the type of record, the purpose of processing, the business customer’s instructions, and applicable requirements; ending a meeting connection does not close your Brix account.
Meeting credentials remain stored while the connection is active and are removed from the active database when you disconnect in Brix. Appointment history remains until separately deleted under the business’s instructions or a valid deletion request. Limited copies may remain in backups until those backups expire or are overwritten, or where retention is legally required.
Brix and its providers may process information in the United States and other countries where they operate. Where applicable law requires safeguards for international transfers, those requirements apply to our handling of the information.
Your rights & how to exercise them
Depending on your location and applicable law, you may have the right to:
- Know whether we process your personal information and request access to or a copy of it.
- Correct inaccurate or incomplete personal information.
- Request deletion of personal information, subject to applicable exceptions.
- Request restriction of processing or object to certain processing.
- Receive eligible information in a portable format.
- Withdraw consent where processing relies on it, without affecting processing that occurred before withdrawal.
- Exercise applicable rights to opt out of sale, sharing, or targeted advertising, and appeal a decision where your local law provides those rights.
- Lodge a complaint with your local data protection authority.
To exercise a right, email admin@brixstrategies.com with the subject Privacy request. Include the email associated with your account, the business or workspace involved, and what you want to access, correct, export, or delete. You can use this process even if you do not have a Brix account. Do not send passwords or authorization tokens.
We may need to verify your identity and authority before acting. If your request concerns records controlled by a business using Brix, we will help direct it to that business and assist as appropriate. We respond within the time required by applicable law, explain applicable exceptions, and do not discriminate against you for exercising your rights.
Updates & contact
Brix is intended for business use and is not directed to children under 18. If you believe a child has provided us personal information, contact us so we can review and address it.
We may update this policy as our services or practices change. The date above identifies the latest revision. Where required, we will provide additional notice of material changes.
For privacy questions or requests, contact BRIX Strategies at admin@brixstrategies.com. For product help, visit Support.