Privacy Policy

We use personal information to:

• Provide, maintain, and improve the Service.
• Create and manage your account.
• Send invoices, reminders, and other communications you configure for your clients.
• Process subscriptions and payments for Brisk plans.
• Respond to support requests and communicate with you about the Service.
• Monitor performance, troubleshoot issues, and protect against fraud or abuse.
• Analyze product usage to improve features and reliability.
• Comply with legal obligations and enforce our terms.

If you are located in the European Economic Area, the United Kingdom, or another region with similar data protection laws, we process personal information on one or more of the following bases:

• Contract: processing needed to provide the Service you requested.
• Legitimate interests: operating, securing, and improving Brisk, provided those interests are not overridden by your rights.
• Consent: where required, such as for certain analytics or marketing cookies.
• Legal obligation: where we must retain or disclose information to comply with law.

We do not sell your personal information. We may share information with:

• Service providers: vendors that help us host the Service, process payments, send email, provide analytics, and support customer operations. These providers may access personal information only to perform services for us and under appropriate confidentiality obligations.
• Payment processors: Stripe and related providers when you use card payments or subscribe to a paid plan.
• Your clients: when you send invoices or other materials through Brisk, the content you choose to share is visible to those recipients.
• Legal and safety purposes: when required by law, to protect rights and safety, or in connection with a merger, acquisition, or asset sale, subject to appropriate safeguards.

We retain personal information for as long as your account is active or as needed to provide the Service, resolve disputes, enforce agreements, and comply with legal obligations. You may request deletion of your account by contacting us. Some information may remain in backups or logs for a limited period after deletion.

We use administrative, technical, and organizational measures designed to protect personal information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Depending on where you live, you may have rights to access, correct, delete, restrict, or object to certain processing of your personal information, and to data portability or withdrawal of consent where applicable.

To exercise these rights, email hello@staybrisk.com. We may need to verify your identity before responding. You may also lodge a complaint with your local data protection authority.

We use cookies and similar technologies to keep you signed in, remember preferences, understand how the website and product are used, and improve performance. We may use analytics tools such as PostHog to collect usage information.

You can control cookies through your browser settings. Disabling certain cookies may affect how parts of the Service work.

We may process and store information in countries other than your own. Where required, we use appropriate safeguards for cross-border transfers, such as standard contractual clauses or equivalent mechanisms.

Brisk is not directed to children under 16, and we do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us and we will take appropriate steps to delete it.

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. Material changes may also be communicated through the Service or by email where appropriate.

Questions about this Privacy Policy or our data practices can be sent to hello@staybrisk.com.

For terms governing use of the Service, see our Terms of Service.