Privacy Policy

1. Overview

This Privacy Policy applies to the personal information we handle as part of providing Red Bricks OS, the Launchpad dashboard, and related services (the "Services"). It does not apply to third-party websites or services we do not control.

By using the Services, you agree to the practices described here. Where required by law, we rely on your consent, which you may withdraw at any time (subject to legal or contractual limits).

2. Our role: controller and processor

For information about your own account and your use of Launchpad — such as your name, email, and billing details — we act as the controller (the business that decides how the information is used).

For data you collect and manage through the Services about your clients, leads, and contacts ("Contact Data"), you are the controller and we act as a processor/service provider acting on your instructions. You are responsible for having a lawful basis and any required consents for that data. See Section 7.

3. Information we collect

Information you provide

• Account information: name, email address, password (stored hashed), brokerage details, and preferences.
• Site and branding content: the information you enter to launch and operate your site.
• Billing information: handled by our payment processor, Stripe. We do not store full card numbers; we receive limited details such as the card brand, the last four digits, and your subscription status.
• Support communications: messages you send us.

Information collected automatically

• Usage and device data: log data, IP address, browser type, pages viewed, and similar analytics used to operate and secure the Services.
• Cookies and similar technologies (see Section 5).

Information from third parties

Real-estate boards and data providers (for listing data tied to your account), and service providers that help us deliver the Services.

4. How we use information

• Provide, operate, maintain, and secure the Services.
• Provision and manage your site, domain, email, and subscription.
• Process payments and prevent fraud.
• Communicate with you about your account, including service and security notices.
• Provide support and respond to your requests.
• Monitor, analyze, and improve the Services.
• Comply with legal obligations and enforce our Terms.

5. Cookies and similar technologies

We use strictly necessary cookies to keep you signed in and to operate the dashboard (for example, an authentication cookie). We may use limited analytics to understand usage.

You can control cookies through your browser, but disabling necessary cookies may prevent the Services from working.

6. How we share information

We do not sell your personal information. We share it only as needed to provide the Services or as described below, with providers bound by appropriate confidentiality and data-protection obligations:

• Hosting and infrastructure (for example, Vercel and Supabase) to run the platform and databases.
• Payments (Stripe) to process subscriptions.
• Email delivery (Amazon Web Services / SES) to send transactional and platform email.
• Domain and DNS (for example, Cloudflare) to provision and secure domains.
• AI features (for example, OpenRouter and its underlying model providers) to power the assistant; your inputs are sent to process your request.
• Real-estate boards and data providers, as required to enable listing features tied to your account.

We may also share information to comply with law, enforce our Terms, protect rights and safety, or in connection with a merger, acquisition, or sale of assets (with notice where required).

7. Data about your clients and contacts

When you use the Services to collect and manage Contact Data, you are the controller of that data and we process it on your behalf to provide the Services.

You are responsible for providing any required privacy notices to, and obtaining any required consents from, your contacts, and for handling their privacy-rights requests. We will reasonably assist you as required by law.

8. Data retention

We retain personal information for as long as your account is active and as needed to provide the Services, comply with legal obligations, resolve disputes, and enforce our agreements.

After account closure, we may retain certain information for a reasonable period or as required by law, after which we delete or de-identify it.

9. Security

We use reasonable administrative, technical, and physical safeguards designed to protect personal information, including encryption of sensitive credentials and access controls.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. International data transfers

We and our service providers may process and store information in countries other than yours, including the United States. Where required, we take steps to ensure appropriate protection for such transfers.

11. Your privacy rights

Subject to applicable law (including Canada's Personal Information Protection and Electronic Documents Act (PIPEDA)), you may request to access, correct, or delete your personal information, or withdraw consent. To make a request, contact us using the details in Section 14.

We will respond within the time required by law. We may need to verify your identity, and some information may be retained where permitted or required by law.

If you have a concern we cannot resolve, you may contact the Office of the Privacy Commissioner of Canada or your local regulator.

12. Children's privacy

The Services are intended for real-estate professionals and are not directed to children. We do not knowingly collect personal information from children under the age of majority.

13. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version, revise the "Last updated" date, and provide additional notice where required.

14. How to contact us