Privacy policy

What we collect and why

Our guiding principle is to collect only what we need to run the service. Here is what that means in practice.

Identity and access

When you create an account, we collect account, email, and profile information, including how you sign in: with Google or with an email-based sign-in code. That is so you can access INK TO BRICK, be recognized within your workspace, and be contacted about your account when needed. We also record workspace membership and workspace settings.

Product interactions

We store on our servers the content that you upload, generate, or maintain in your INK TO BRICK account, including:

• Floorplans, images, and other files that you upload.
• Project and model geometry and the edits you make to it.
• Generation requests and the results they produce.
• Exports you create from your projects.
• Public profile and project content, including anything you choose to publish, and comments posted on public projects.

This is so you can use INK TO BRICK as intended: to build, render, and, if you choose, publish your projects. We collect this information as the corresponding features are used, so not every account will have every category of information.

Publishing and public content

Publishing a project does not publish your uploaded source drawings or private generated-image gallery. If you choose to publish a project or profile, publishing exposes only the selected model, the public title and summary you write, your public profile fields, any labels you select, and the interactions the public page supports. Optional fields such as location are included only if you choose to publish them.

Published models are delivered to visitors' browsers and can be viewed, copied, or downloaded by anyone who can reach the public page. Search engines, caches, and screenshots taken by visitors may continue to show published content for some time after you unpublish it. Use your project and profile publication controls to choose what others can see.

Security and usage records

We log IP addresses, authentication and session identifiers, and request and security events tied to your account. We use this information for account security, fraud and abuse prevention, and to keep the service running reliably.

Cookies and analytics

We use required session and security cookies, and local preference storage, to keep you signed in and to remember your choices. These are separate from analytics and are not affected by the analytics choice described below.

When configured in production, INK TO BRICK loads Google Analytics and Microsoft Clarity automatically and shows a notice on your first visit. Google Analytics measures visits and product actions. Microsoft Clarity records interactions and a masked version of page content; it does not record authentication screens or replay sign-in activity. Advertising storage and ad personalization are disabled for both. If you would rather not be measured, opt out through the notice or at any time using the Analytics preferences button below. If your browser sends Do Not Track or Global Privacy Control signals, we treat that as a request to keep this tracking off, and team members can additionally exclude a browser used for testing.

Voluntary correspondence

When you email us with a question or to ask for help, we keep that correspondence, including your email address, so that we have a history of past correspondence to reference if you reach out again.

When we access or disclose your information

We share information with service providers who help us operate INK TO BRICK: cloud hosting and storage providers, our transactional email provider (Resend) for account and notification emails, Google for authentication, and AI processing providers when you request reconstruction or rendering features. Analytics providers (Google Analytics and Microsoft Clarity) receive usage data as described above unless you opt out. Each of these providers operates under its own terms and privacy policies.

Uploading a plan does not grant us permission to use it for research or model training. We send the content and requests needed for reconstruction or rendering to AI processing providers when you use those features. Their handling of that information is also governed by the applicable provider terms and privacy policies.

We may access or disclose information when needed to respond to your support request, investigate abuse or security incidents, enforce our terms, or meet a legal obligation. Public content is also shared with the audience you choose when you publish it.

Signing in with Google

When you sign in with Google, we request only the openid, userinfo.email, and userinfo.profile scopes. This gives us your Google account identifier, your verified email address, and basic profile data such as your name and profile picture. We store this basic Google profile and account information with your INK TO BRICK account, and we use it to sign you in, to link your Google account to your INK TO BRICK account, for account security, and to display your profile within the product. We do not receive your Google password, and we do not request access to Gmail, Drive, contacts, or any other Google service. Signing in with Google does not authorize us to use your floorplans or projects for research or model training.

Our use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements. You can review and revoke INK TO BRICK's access to your Google account at any time from your Google Account connections page. Revoking access removes that Google authorization; it does not automatically end an existing INK TO BRICK session, and it does not by itself delete the data already stored in your INK TO BRICK account. You can authorize Google again at any time, and you can also sign in using an email-based sign-in code instead of Google. Before we use or access Google user data for any new purpose or data type not already described in this policy, we will explain the change and obtain your consent.

Your rights with respect to your information

Depending on your relationship with us and applicable law, you may have rights to know what personal information we collect and use, to access it, to correct it, to request its erasure, to restrict or object to our processing of it, and to receive a copy of it (portability). You can withdraw consent at any time for processing that relies on consent, without affecting the lawfulness of processing carried out before that withdrawal.

You can manage what you publish from your project and profile settings, manage analytics permission using the Analytics preferences button on this page, and manage Google sign-in access from your Google account. To make any other request about your information, contact support@inktobrick.com. We may need to verify your identity or authority before acting on a request, using checks proportionate to the request. Where applicable under your local law, you also have the right to lodge a complaint with your competent data-protection authority.

How we secure your data

We maintain security and usage records to help protect accounts and detect abuse, and we restrict access to stored data to what is needed to operate and support the service. No method of storage or transmission is completely secure, and we cannot guarantee absolute security.

Deletion and data retention

We keep information for as long as needed to provide the service, maintain security, and comply with legal obligations. Retention depends on the type of information, whether your account or project remains active, and applicable retention requirements.

Use the available project controls or contact support to request deletion or account closure. Specific records may need to be retained to comply with a legal hold or another legal obligation. Copies in backups may remain until those backups are deleted under their retention cycle. We handle retention and deletion requests in accordance with applicable law.

You can export project files using the available project tools. For a copy of other personal information we hold about you, contact support@inktobrick.com.

Location of data

We use cloud hosting and storage providers to operate the service. If you are located outside of the country or region where our infrastructure providers process data, information you provide may be transferred to and processed in other locations as part of operating the service.

Changes and questions

We may update this policy as the service changes. We will update the date at the top of this page and provide notice of material changes through the service or an account communication. When a change requires your consent, we will obtain it before the new processing begins. This includes the Google data changes described above.

Have questions, comments, or concerns about this privacy policy, your data, or your rights with respect to your information? Please get in touch at support@inktobrick.com. See also our Terms of use.

Adapted for INK TO BRICK from the Basecamp open-source privacy policy, licensed under CC BY 4.0.