Privacy Policy

Depending on how you interact with Briskflow, we may collect:

• Account and profile information, such as your name, business email, organization, role, login credentials, and account settings.
• Customer content, including documents, structured reporting data, tagging decisions, comments, approvals, and other material submitted to a workspace.
• Communications, such as messages you send to our sales, support, or account teams and feedback you choose to provide.
• Usage and device information, such as IP address, browser and device type, pages or features used, timestamps, referring pages, and diagnostic events.
• Business relationship information, such as your organization's service plan, contracting details, and records of our interactions with you.

We receive information directly from you, from the organization that provides your account, and automatically when you use our website or platform.

Briskflow does not use Customer Content to improve its products or train artificial intelligence or machine-learning models.

We use personal information to:

• provide, operate, maintain, and improve the website and platform using service usage, feedback, and diagnostic information, but not Customer Content;
• authenticate users, administer accounts, and support collaboration;
• process customer instructions and provide requested platform features;
• respond to enquiries, provide support, and manage customer relationships;
• protect the security, integrity, and availability of our services;
• detect, investigate, and prevent misuse, fraud, and security incidents;
• comply with legal obligations and enforce our agreements; and
• send service notices and, where permitted, relevant product communications.

Where European data-protection law applies, we rely on performance of a contract, legitimate interests in operating and securing our business, compliance with legal obligations, and consent where the law requires it.

The Briskflow platform uses essential cookies and similar storage technologies to keep you signed in, protect sessions, remember settings, and operate requested features. Our servers may also create routine access and security logs when you visit the website or platform.

You can configure your browser to block or delete cookies, but blocking essential cookies may prevent the platform from working. Briskflow does not use personal information for cross-context behavioral advertising.

We may disclose personal information to:

• your organization, including workspace administrators and other users authorized to collaborate with you;
• service providers that support hosting, security, communications, diagnostics, and other business operations, subject to appropriate restrictions;
• professional advisers, such as lawyers, auditors, and insurers, where needed for their services;
• authorities or other parties when reasonably necessary to comply with law, protect rights or safety, investigate misuse, or enforce our agreements; and
• a successor in connection with a merger, financing, acquisition, reorganization, or sale of assets, subject to applicable confidentiality requirements.

We do not sell personal information or share it for cross-context behavioral advertising. We may disclose aggregated or de-identified information that cannot reasonably identify you.

We retain personal information only as long as reasonably necessary for the purposes described in this policy, including to provide the services, meet customer commitments, comply with legal requirements, resolve disputes, and enforce agreements. Customer content is retained and deleted according to the applicable customer agreement, workspace settings, and legal-hold requirements.

We use administrative, technical, and organizational safeguards designed to protect personal information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Briskflow is based in the United States and may process information in the United States and other countries where we or our service providers operate. Where required, we use recognized safeguards for international transfers, such as contractual protections.

Depending on where you live, you may have rights to access, correct, delete, restrict, or obtain a copy of personal information, object to certain processing, withdraw consent, or appeal our response to a request. You may also have the right to complain to a data-protection authority. We will not discriminate against you for exercising a privacy right.

To make a request, email us using the address below. We may need to verify your identity and authority. If your information belongs to a customer-controlled workspace, please contact that organization first; we will assist the customer as required by our agreement and applicable law.

In the preceding 12 months, Briskflow may have collected the categories described above, including identifiers, professional or employment-related information, commercial information, and internet or other electronic network activity. Customer Content may contain additional categories selected and provided by a customer. We use and disclose these categories for the business purposes described in this policy.

California residents may have rights to know, access, delete, or correct personal information, and to receive information about its sources, purposes, and disclosures. Where applicable, they may also opt out of sale or sharing and limit certain uses of sensitive personal information. Briskflow does not sell personal information or share it for cross-context behavioral advertising, and does not discriminate against people who exercise their privacy rights. Submit a request using the contact details below.

Briskflow is a business service and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to us, please contact us so we can take appropriate action.

We may update this policy as our services or legal obligations change. We will post the updated policy here, revise the effective date, and provide additional notice when required by law.