Privacy Policy

1. Who we are

Bric is operated by RGHL Brands Pte. Ltd., trading as Bric Lab ("Bric", "we", "us" and "our"), a company incorporated in Singapore. We are responsible for the personal information described in this policy, and where data-protection law uses the term, we are its "controller". Section 17 explains how to contact us and our Data Protection Officer.

This policy explains what personal information we collect when you use the Bric website, app and related services (the "Service"), how we use and share it, and the choices and rights you have. It is a notice, not a contract: your use of the Service is governed by our Terms of Use, and words defined there, such as "Output", have the same meaning here.

2. What we collect from you

• Account information: your email address, and the display name, handle and workspace name you choose. Until you change it, your display name is the part of your email address before the "@".
• Your content: the descriptions you type, your conversations with Bric, briefs, comments and notes, custom instructions, and the pictures, sketches, 3D models and other files you upload. Please do not include other people's personal information, or sensitive information about yourself, in your content.
• Voice: if you use dictation, your recording is sent to a service provider to be turned into text, and the text is added to your message. Bric does not ordinarily keep the recording in your project after it has been transcribed. The service provider that transcribes it may process or keep it for a limited period under its own terms.
• Your workshop and preferences: the printers, materials, units and other settings you tell us about.
• Print results: if you answer "Did you print it?", your answer and, if you choose to add one, a photo of the print. A photo may show part of your home, so please leave out people and anything you would rather keep private. It is stored with your project and handled like the rest of it: it is not shown to other users unless you publish it, and authorised Bric personnel and our service providers, including our AI provider, may access and process it.
• Messages to us: anything you send us, such as support requests, feedback and requests about your information.

3. What Bric creates and records

• Outputs: the briefs, answers, pictures, 3D models, files, check results and other material the Service creates for you, stored with your projects.
• Build attempts: attempts Bric makes while building a 3D model — such as the program that describes it, its measurements and its preview pictures — including attempts you are not shown.
• Change history: the changes you ask for, and what you did next — for example whether you downloaded the result, changed it again or went back to an earlier version.
• Usage information: what you do in the Service — for example the actions you take, the features and credits you use, the files you download, when, and whether they succeeded — together with your account, project and version identifiers.
• Records of agreement: where the Service asks you to accept terms or acknowledge a notice or warning — for example a notice about hazards before a 3D model is built, or before your first download — a record of that, including the notice or hazards shown, the version of the wording, the project and version concerned, the time, and, for a download, a fingerprint of the file.
• Safety records: if Bric declines to design something, a record of the project's name, Bric's short reason and the time, which authorised Bric personnel review to check that Bric is not refusing too much.
• Technical information: information our hosting providers record when your browser connects, such as IP address, browser and device type, pages requested and times. When you sign in, our sign-in provider records the time, your IP address and your browser, to keep your account secure. When you ask for an invite, Bric keeps a scrambled, one-way form of your IP address for a limited period, usually about a day, to stop automated requests.
• Error reports: if something breaks, we may record technical information about the failure. We configure error-monitoring tools to minimise the collection of your content and personal information, and to collect the technical information reasonably necessary to diagnose and resolve failures.

4. Invitations

Bric is invite-only. If someone invites you, or you ask to join, we keep your email address, when it was added, how you came to be invited, and any note our team adds, so we can let you in and understand how people find Bric.

5. How we use it

We use personal information to:

• provide the Service: sign you in, understand what you ask for, generate, check and store pictures, 3D models and files, look things up, and keep your projects;
• run credits and limits, and stop the Service being overused or abused;
• support you and communicate with you, including sign-in links, service messages and messages about templates you publish;
• keep the Service, our users and the public safe and secure: detect and investigate fraud, abuse, misuse and security incidents, and enforce our Terms;
• understand how the Service is used and fix problems, including by looking back over build attempts and change histories;
• evaluate, test, develop and improve Bric — including by reviewing projects, conversations, build attempts, change histories, feedback and print results to improve how Bric understands requests and how it designs and checks objects; by building test sets from requests, with names and personal details removed, and testing AI models, prompts, instructions and automated checks against them; and by combining print results from many people into statistics that do not identify anyone;
• keep records of what you downloaded and, where the Service asks for them, of what you agreed to and acknowledged, as evidence for compliance and in case of disputes or legal claims;
• comply with law, respond to lawful requests, and establish, exercise or defend legal claims;
• carry out any other purpose we tell you about when we collect the information, or with your consent.

6. Who can see your projects

Your projects are private from other users unless you publish them. They are not private from Bric. Authorised Bric personnel may access user projects, including their conversations, pictures, files, build attempts and print results, where reasonably necessary for support, troubleshooting, security, investigating abuse, legal compliance, and developing and improving the Service. Access is restricted to authorised personnel with an appropriate business need.

Bric may combine many people's print results into statistics — for example, which gap between parts fits on which kind of printer — and use them to improve the Service for everyone. These statistics do not identify anyone.

7. AI processing

Bric uses artificial intelligence to do what you ask. To do that, your content — including your descriptions, conversation, custom instructions, reference pictures, print photos and dictation recordings — is sent to our AI provider, OpenAI, to generate replies, pictures and 3D models, to transcribe speech, and to look things up on the web. When Bric looks something up, the search is written from your conversation and carried out by our AI provider.

OpenAI processes this data as our service provider. Its terms for API customers state that it does not use data sent through its API to train its models by default, and that it may keep that data for a limited period, for example to monitor for abuse.

Bric does not currently use identifiable customer content to train its own general-purpose foundation model. Bric may use information from projects, conversations, build attempts, change histories, feedback and print results, as described in this policy, to evaluate, test, develop and improve Bric's systems, models, prompts, instructions, automated checks and product functionality. When we test AI models from other providers, we use test sets from which names and personal details have been removed.

Decisions Bric's AI makes concern the objects you are designing. Bric does not use AI to make decisions about you that have legal or similarly significant effects.

8. Who we share it with

Bric does not sell personal information, use personal information for third-party targeted advertising, or track users across unrelated websites or services for behavioural advertising. We share personal information as follows:

• Service providers that process it for us, in areas such as artificial intelligence, cloud hosting, databases, file storage, authentication, computing, email, analytics, security and error monitoring. Our AI provider is OpenAI (section 7). Providers' use of personal information is governed by their contracts with us.
• Other users, when you choose: if you publish a project, what you publish — such as the finished pictures, 3D models, name and description, and your display name — is shown to other Bric users, and remixable templates can be copied by them. The Publishing Terms explain what is published.
• People involved in an intellectual-property complaint: if someone complains that your content infringes their rights, we may share the complaint, including the sender's contact details, with you, and share your response or counter-notice, including your contact details, with them.
• Professional advisers, such as lawyers, accountants and insurers, where needed.
• Authorities and others, where we believe in good faith that the law requires it, or that it is needed to protect the rights, property or safety of Bric, our users or others, or to enforce our Terms.
• In a business transaction: if we are involved in a merger, acquisition, financing, reorganisation, sale of assets or insolvency, information may be transferred as part of it.
• With your consent or at your direction, for example when you send a file to a printer or manufacturer yourself.

9. Cookies and similar technology

We use cookies and similar technology, such as browser storage, that the Service needs to work — for example to keep you signed in and remember small preferences — and we may use them for product analytics, performance and security monitoring, and error monitoring, to operate and improve the Service. We do not use them for third-party targeted advertising or to track you across unrelated websites. Because we do not track you across other sites for advertising, we do not respond differently to "Do Not Track" signals.

10. Where your information is processed

Our main database, file storage and website, and the computers that build 3D models, are hosted in the United States. An earlier copy of some data is held in the United Kingdom, and our providers may process information in other countries too. Wherever you live, your information will be transferred to, stored and processed in the United States, the United Kingdom and other countries whose data-protection laws may differ from yours.

Where applicable law requires it, we use contractual and other safeguards intended to ensure that overseas recipients protect personal information to the standard that law requires — for example the data-processing terms our providers offer, and, where relevant, standard contractual clauses or similar mechanisms.

11. How long we keep it

We keep account information and projects while your account is open. When you delete a project, we delete it from our live systems, including the build attempts, change history, print answers and print photos kept with it. When your account is closed, we delete or de-identify your personal information in our live systems within a reasonable period.

Deleting something from our live systems does not remove every copy at once. Copies may remain, for a limited time or for the reasons below, in backups and logs until they expire or are overwritten in the ordinary course; in temporary processing copies; with service providers, under their own retention terms; in earlier copies of our database held in systems we have retired, until those systems are deleted; and where a deletion did not complete, until it is cleared.

We may also keep records relating to transactions, credits, usage and analytics events, costs, security events, consents, acknowledgements and the notices shown, export and download events, acceptance of our terms, safety records such as requests Bric declined, administrative actions, abuse and fraud, and legal disputes — including after the project or account they relate to is deleted — for as long as reasonably necessary for accounting, tax, fraud prevention, security, abuse prevention, legal and regulatory compliance, enforcing our agreements, resolving disputes, and establishing, exercising or defending legal claims. Templates you have published, and what other users have made from them, are kept as the Publishing Terms describe.

Messages you sent us, including feedback and requests to delete your account, are kept after your account is deleted, with the name and email address you sent them under, so we can keep fixing problems and improving Bric.

Information that has been aggregated or anonymised so that it no longer identifies an individual — such as statistics combined from many people's print results, and test-set examples from which names and personal details have been removed — may be kept and used without time limit.

12. Security

We take reasonable measures to protect personal information. No system is completely secure, and we cannot guarantee the security of your information. You are responsible for keeping your email account, and so your access to Bric, secure. If we learn of a breach affecting your personal information, we will notify you where the law requires us to.

13. Your choices and rights

You can change your display name, handle and settings in the Service, and delete projects yourself. To ask for a copy of your personal information, or for it to be corrected or deleted, or to close your account, email us at hello@briclab.com from the address on your account. We may need to verify your identity before we act, and we will respond within the time the law requires.

Depending on where you live, you may also have the right to: know what personal information we hold about you and how we use it; receive it in a portable form; object to or restrict our use of it; withdraw any consent you have given (which does not affect what we did before); and not be treated unfairly for using your rights. If we refuse your request, you may ask us to reconsider it. These rights have limits and exceptions, for example where keeping information is needed for legal reasons or where deleting it would affect other people's rights.

If you are in the European Economic Area or the United Kingdom, the legal bases we rely on are: performing our contract with you (to provide the Service); our legitimate interests (to secure, understand, evaluate, improve and protect Bric and to establish and defend legal claims), balanced against your rights; complying with legal obligations; and your consent, where we ask for it. You may complain to your local data-protection authority, although we would appreciate the chance to address your concern first.

If you are a California resident: in the last twelve months we have collected identifiers (such as your email address), your content and Outputs, usage and technical information, and inferences about your projects, for the purposes in section 5, from you, from your use of the Service and from our providers. We disclose these to the categories of recipients in section 8 for business purposes. We have not sold or shared personal information as those terms are defined in California law, and we do not use sensitive personal information to infer characteristics about you.

14. Children

The Service is for adults and is not directed at children. We do not knowingly collect personal information from anyone under 18. If you believe a child has given us personal information, contact us and we will delete it.

15. Links and other services

The Service may link to websites and services we do not operate, including sources Bric has looked things up in. Their privacy practices are their own, and this policy does not apply to them.

16. Changes to this policy

We may change this policy from time to time. The version number and publication date at the top of this page show which version applies and when it was published. Where the law requires it, we will tell you about a material change, for example in the Service or by email.

17. Contact us and our Data Protection Officer

Questions or requests about privacy: RGHL Brands Pte. Ltd., trading as Bric Lab, hello@briclab.com.

Our Data Protection Officer can be contacted at hello@briclab.com. Please put "Data Protection Officer" in the subject line.