Privacy and Cookie Notice

1. Who controls your data

Wolff Solutions operates Brique and is the controller of the personal data described here. Privacy questions and data-rights requests may be sent to support@brique.club.

2. Data we handle

• Account data: email address, username, optional name and profile image, verification status, session identifiers, and security information.
• Listing data: descriptions, prices, locations, photos, structured listing details, status, and publication dates.
• Interaction data: buyer questions, public or participant-only seller answers, contact requests, reports, and moderation records. A question becomes public only together with a public seller answer. Buyer usernames are disclosed only to the listing seller.
• Technical data: IP address, request and security logs, device/browser information needed to deliver and protect the service, and aggregated performance measurements.
• Support and legal communications that you send to us.

3. Why we use it

Depending on the activity, processing is based on performing the service or steps requested by you, legitimate interests that do not override your rights, compliance with legal obligations, protection of rights, or consent where the law specifically requires it.

• Provide accounts, publish and display listings and identity-redacted answered Q&A, deliver unanswered and private exchanges only to their participants, and operate requested features.
• Authenticate users, screen listing photos and text for quality, relevance and safety, prevent fraud and abuse, enforce limits and policies, investigate reports, and protect users and the service.
• Maintain, troubleshoot, measure, and improve reliability and performance.
• Comply with legal duties and establish, exercise, or defend legal claims.

4. Cookies and browser storage

Brique does not use advertising, retargeting, or behavioural-profiling cookies. Public browsing does not initialize Clerk for a signed-out visitor. Because the remaining storage is necessary or directly requested, Brique does not display a consent banner. You can clear saved cookies and site data in your browser, although clearing authentication cookies signs you out.

• Authentication: Clerk is loaded when you open sign-in or sign-up and while you are signed in. It uses session/client cookies and security storage required to authenticate you and protect the login flow.
• Security: Clerk and its infrastructure provider may set short-lived anti-abuse or bot-management cookies while serving authentication.
• Preferences: NEXT_LOCALE and brique_theme are saved for one year only after you choose a language or theme.
• Performance: Cloudflare Web Analytics measures page performance without cookies, localStorage, cross-site profiles, or advertising identifiers.

5. Providers and sharing

We share data only as needed to operate the service, follow your instructions, protect rights and safety, or comply with law. Current service providers include Cloudflare for hosting, databases, media, automated listing-content analysis, security and privacy-focused performance analytics; TypeSafe AI for automated interpretation of search queries, listing text and report narratives, which never decides publication or enforcement on its own; Clerk for authentication and account management; and Resend if transactional email is enabled. We do not sell personal data or share it for targeted advertising.

6. International processing

Our providers may process data outside Brazil. Where required, we use contractual and organizational safeguards appropriate to the transfer and require providers to process data for documented service purposes.

7. Public and private information

Published listings and seller-profile information are public. A buyer question becomes public only when the seller chooses a public answer; the question and answer are then published together without the buyer's identity. Public answer is the default, but the seller may choose a private answer visible only to that seller and the original buyer. Unanswered questions are also participant-only. Buyer usernames are visible only to the listing seller. Account email addresses, private Q&A exchanges, contact requests, and non-public moderation information are not public. An exchange detected as containing a phone number, email address, or URL remains participant-only regardless of the seller's selection. Moderators may access non-public material only for reports, abuse prevention, safety, or legal needs.

8. Retention

We keep data only for as long as reasonably needed for the purposes above. Active listings normally expire after 30 days unless renewed; an expired listing is scheduled for deletion after a further 30-day grace period.

When you delete your Clerk account, Brique immediately removes your seller profile and listings from public access, removes direct identifiers from the operational account row, and requests invalidation of publicly cached profile, listing, and photo URLs. A retryable background process then deletes listing photos and listing/account content. Cache copies may take a short time to disappear globally if a provider purge is delayed.

Completed deletion-job records contain no Clerk identifier or content and are removed after 30 days. We may keep pseudonymized, structured safety and moderation totals for up to 24 months, and pseudonymized agreement and financial records for up to five years, solely for abuse prevention, accounting, legal obligations, disputes, or the exercise of rights. Free-form listing content, messages, report notes, IP addresses, user agents, payment-provider references, and direct account identifiers are not included in those retained summaries. A legal hold or mandatory law may require a longer period, which is limited to the affected records and purpose.

Residual copies may remain temporarily in provider backup or disaster-recovery systems after deletion. They are not kept in the active service or used for ordinary processing and expire under the provider's protected backup cycle; if a recovery occurs, the deletion job remains the source of truth and cleanup is retried.

9. Your LGPD rights

Subject to the LGPD and applicable exceptions, you may request confirmation of processing, access, correction, portability where available, information about sharing, anonymization, blocking or deletion of unnecessary or unlawfully processed data, review of applicable automated decisions, withdrawal of consent, or opposition to processing. Send requests to support@brique.club. We may need to verify your identity before responding.

10. Security and changes

We use technical and organizational safeguards appropriate to the service, but no online system can guarantee absolute security. We may update this notice when the service or law changes. Material changes will be communicated with reasonable prominence, and the date above will be updated.