Privacy Policy

Tessable LLC, doing business as GiveBrick (“GiveBrick,” “we,” “us,” or “our”), respects your privacy. This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you visit givebrick.com, use app.givebrick.com, create or administer a campaign, purchase a digital brick, communicate with us, or otherwise use GiveBrick’s websites, applications, campaign walls, and related services collectively referred to as the “Service.”

By using the Service, you acknowledge the practices described in this Privacy Policy.

1. Scope of This Policy

This Privacy Policy applies to information processed by GiveBrick in connection with the Service.

It does not govern the independent privacy practices of:

• Campaign organizers;
• Schools, churches, teams, booster organizations, memorial organizers, nonprofits, or other organizations using GiveBrick;
• Stripe or another payment provider;
• Websites linked from campaign pages or brick messages; or
• Other third-party services that maintain their own privacy policies.

Campaign organizers may receive certain supporter information as described below and are independently responsible for using that information lawfully.

2. Information We Collect

The information we collect depends on how you use GiveBrick.

A. Information provided by campaign organizers

When you apply to create, create, administer, or publish a campaign, we may collect:

• Your name;
• Email address;
• Telephone number;
• Organization name and type;
• Your title, role, or relationship to the organization;
• Campaign title, purpose, fundraising goal, and proposed brick pricing;
• The identity and role of an authorized signatory;
• Statements confirming your authority to create the campaign;
• Statements confirming that you have the necessary rights and consent to use campaign content;
• Campaign photographs, artwork, logos, text, and other uploaded materials;
• Organization website and publicly available organization information;
• Review notes and communications concerning approval of the campaign;
• Campaign and account identifiers; and
• Information about the status and classification of your connected payout account.

Organizers may also communicate with us by email or through support channels. We collect the contents of those communications and any information included with them.

B. Information provided by supporters

When you claim or purchase a digital brick, we may collect:

• The name you choose to display;
• An optional message or dedication;
• An optional website link;
• Your email address, generally received through Stripe after checkout;
• The campaign and brick you selected;
• The brick price;
• Any optional tip;
• Any optional amount selected to help cover payment-processing costs;
• Payment status;
• Refund or dispute status;
• Stripe checkout-session and payment identifiers; and
• Communications you send to GiveBrick or the campaign organizer.

A supporter account is not ordinarily required to purchase a brick.

C. Payment information

Payments are processed through Stripe or another authorized payment provider.

Payment providers may collect:

• Card or digital-wallet information;
• Billing information;
• Payment authentication information;
• Device and fraud-prevention information; and
• Other information required to process the transaction.

GiveBrick does not receive or store complete payment-card numbers or card-security codes on its servers.

GiveBrick does not ordinarily store a supporter’s billing address as part of a completed purchase. If a refund is issued, GiveBrick may capture a snapshot of the billing address held by its payment provider to process and document the refund and address any related unclaimed-property obligations. GiveBrick removes that snapshot from its application database when the refund is successfully completed. The payment provider may separately collect and retain billing information under its own privacy policy.

D. Organizer payout and identity-verification information

Campaign organizers must generally complete payout onboarding through Stripe Connect.

Stripe may collect identity-verification, tax, banking, beneficial-ownership, and business information directly from the organizer.

GiveBrick may receive or maintain limited information about the connected account, including:

• The Stripe account identifier;
• Whether the account can accept charges;
• Whether payouts are enabled;
• Whether the account is classified as an individual, business, nonprofit, or government account;
• Whether certain business or tax information is on file;
• Account restrictions or onboarding status; and
• Information reasonably necessary to review the suitability of the payout account.

GiveBrick does not ordinarily receive or store an organizer’s complete bank-account or payment-card number.

E. Information collected automatically

When you use the Service, our systems and service providers may automatically collect:

• Internet Protocol address;
• Browser type;
• Device type;
• Operating system;
• Pages or campaign walls viewed;
• Referring and exit pages;
• Date and time of access;
• General geographic information inferred from an IP address;
• Authentication and session information;
• Error reports;
• Server and security logs; and
• Information about interactions with the Service.

This information is used primarily to operate, secure, troubleshoot, and improve the Service.

F. Information from third parties

We may receive information from:

• Stripe and other payment providers;
• Campaign organizers;
• Authentication and email-service providers;
• Fraud-prevention and security providers;
• Public organization registries and publicly available sources;
• People reporting suspected misuse, infringement, or unauthorized content; and
• Government agencies or legal authorities where permitted or required by law.

3. Public Information

GiveBrick campaign walls are designed for public recognition.

The following information may be publicly displayed:

• The campaign title and description;
• The campaign image;
• The organization’s name;
• Campaign progress;
• The display name selected for a purchased brick;
• The brick message or dedication;
• An approved link associated with the brick; and
• Other content that an organizer intentionally publishes.

Do not submit information in a brick name, message, link, or campaign image that you do not want publicly displayed.

Supporter email addresses, payment identifiers, and complete payment information are not included in the public campaign-wall data.

GiveBrick or the campaign organizer may edit, hide, or remove publicly displayed brick content in accordance with our Terms of Service and Acceptable Use Policy.

4. How We Use Information

We may use personal information to:

• Operate and provide the Service;
• Create and administer organizer accounts;
• Review campaign applications;
• Confirm an organizer’s authority;
• Review campaign images and content;
• Create and display campaign walls;
• Reserve and assign digital bricks;
• Process purchases through Stripe;
• Direct the organizer’s share of proceeds to its connected account;
• Record payment, refund, and dispute activity;
• Send sign-in links, receipts, security notices, and other transactional communications;
• Allow organizers to view and administer their campaigns;
• Respond to questions, support requests, and content-correction requests;
• Prevent duplicate sales of the same brick;
• Detect and prevent fraud, abuse, unauthorized access, and prohibited activity;
• Moderate campaign and brick content;
• Enforce our Terms of Service and other policies;
• Maintain transaction, accounting, security, and compliance records;
• Diagnose technical problems;
• Develop and improve the Service;
• Protect GiveBrick, organizers, supporters, and the public;
• Comply with legal obligations; and
• Establish, exercise, or defend legal claims.

We may use aggregated or deidentified information for reporting, security, service improvement, and business analysis, provided the information cannot reasonably be used to identify an individual.

5. How We Disclose Information

We may disclose personal information in the following circumstances.

A. Campaign organizers

When a supporter purchases a brick, the organizer may receive information reasonably necessary to administer the campaign and address supporter requests, such as:

• The supporter’s display name;
• Brick message or dedication;
• Approved link;
• Email address;
• Brick purchased;
• Purchase amount;
• Payment status; and
• Refund or dispute status.

Campaign organizers do not receive complete card numbers or card-security codes from GiveBrick.

Organizers are required to use supporter information only for legitimate campaign administration, fulfillment, accounting, support, legal compliance, and related purposes.

B. Service providers

We use service providers to operate GiveBrick, including:

• Stripe, for payment processing, connected-account onboarding, fraud prevention, refunds, disputes, and payouts;
• Supabase, for database services, authentication, file storage, access controls, and backups;
• Vercel, for website hosting, application hosting, serverless functions, delivery, and operational logs;
• Resend, for authentication and transactional email; and
• Other vendors that provide security, communications, technical support, legal, accounting, or operational services.

These providers may process information only as necessary to provide their services to us and are subject to their own contractual and legal obligations.

C. Public campaign walls

We disclose the campaign and brick information that organizers and supporters choose to make public, as described in Section 3.

D. Legal and safety reasons

We may disclose information when we reasonably believe disclosure is necessary to:

• Comply with a law, regulation, subpoena, court order, or governmental request;
• Enforce our agreements and policies;
• Investigate suspected fraud, infringement, abuse, or illegal conduct;
• Protect the rights, property, safety, or security of GiveBrick, its users, or others; or
• Prevent or address security or technical problems.

E. Business transactions

Information may be disclosed or transferred as part of a merger, financing, acquisition, restructuring, bankruptcy, sale of assets, or similar business transaction.

Any successor may continue to process information subject to this Privacy Policy unless users are notified otherwise.

F. With your direction or consent

We may disclose information when you direct us to do so or provide consent.

6. Sale of Personal Information and Advertising

GiveBrick does not sell personal information for money.

GiveBrick does not currently use personal information for cross-context behavioral advertising or serve third-party behavioral advertisements through the Service.

GiveBrick does not currently use PostHog or a comparable product-analytics platform in the production Service.

We may use essential operational logs and measurements supplied by our hosting, database, security, and payment providers. If we later introduce analytics, advertising, or tracking practices that materially change how personal information is processed, we will update this Privacy Policy and provide any notices or consent controls required by law.

7. Cookies and Similar Technologies

GiveBrick and its service providers may use cookies, browser storage, and similar technologies that are necessary to:

• Maintain authentication sessions;
• Keep organizers signed in;
• Protect account security;
• Remember limited preferences;
• Maintain checkout and campaign functionality;
• Prevent fraud;
• Balance traffic and deliver content; and
• Diagnose errors.

We also use first-party browser storage to measure how the Service is used — for example, which pages a visit reaches, and which link, QR code, or referring website introduced it — so that we can understand what is working and improve the Service. This measurement is first-party and anonymous. It uses a randomly generated identifier stored in your browser’s session storage, which is erased when you close the tab; it is not a cookie, it is not linked to your name, email address, or any account, and it is not used for cross-site tracking, advertising, or profiling. We record the domain name of a referring website only (for example, that a visit came from a social network) — never the full referring address. We do not sell or share this information with advertising networks or third-party analytics providers.

Stripe and other third-party services may use their own cookies or similar technologies when you interact with their services.

You can control cookies through your browser settings. Blocking necessary cookies or browser storage may prevent authentication, checkout, or other features from working properly.

8. Transactional and Marketing Communications

We may send transactional communications such as:

• Sign-in links;
• Payment receipts;
• Campaign-administration notices;
• Payout-onboarding notices;
• Security alerts;
• Refund or dispute communications;
• Responses to support requests; and
• Material policy or Service notices.

You generally cannot opt out of communications that are necessary to operate your account, process a transaction, or provide legally required notices.

We may send marketing communications where permitted by law. Marketing messages will include an appropriate method to unsubscribe.

9. Data Retention

We retain personal information for as long as reasonably necessary to:

• Provide the Service;
• Keep public campaign walls functioning;
• Fulfill purchases;
• Maintain transaction and accounting records;
• Process refunds and disputes;
• Process and document refunds and determine and satisfy applicable unclaimed-property obligations when a refund cannot be completed;
• Protect against fraud;
• Enforce agreements;
• Comply with legal obligations; and
• Resolve disputes or defend claims.

Retention periods vary according to the type of information and the reason it was collected.

Transaction records may be retained after a campaign closes or an account is deleted when necessary for accounting, tax, payment, fraud-prevention, or legal purposes.

A refunded brick may remain part of the campaign’s visual reveal. However, GiveBrick or the campaign organizer may remove or hide the associated name, message, or link where appropriate.

When information is no longer reasonably necessary, we may delete, aggregate, or deidentify it.

10. Data Security

GiveBrick uses administrative, technical, and organizational safeguards designed to protect personal information.

These safeguards include, where appropriate:

• Access controls;
• Authentication controls;
• Database row-level security;
• Separation of public and private data;
• Restricted administrative privileges;
• Encrypted connections;
• Payment processing through Stripe-hosted checkout;
• Webhook-signature verification;
• Server-side handling of sensitive operations;
• Logging and monitoring;
• Backups; and
• Content and abuse controls.

No method of electronic transmission, processing, or storage is completely secure. We cannot guarantee absolute security.

You are responsible for maintaining control of your email account and devices used to access the Service.

11. Your Privacy Rights

Depending on where you live and applicable law, you may have the right to:

• Request access to personal information we maintain about you;
• Request correction of inaccurate information;
• Request deletion of certain information;
• Obtain a portable copy of certain information;
• Withdraw consent where processing is based on consent;
• Object to or restrict certain processing;
• Opt out of certain sales, sharing, or targeted advertising;
• Appeal a decision concerning a privacy request; and
• Submit a complaint to an applicable privacy or data-protection authority.

GiveBrick does not discriminate against individuals for exercising applicable privacy rights.

To submit a privacy request, email privacy@givebrick.com.

Please include enough information for us to understand the request and identify the relevant account, purchase, or campaign. We may need to verify your identity before completing a request.

We may deny or limit a request where permitted by law, including when information must be retained for transaction records, fraud prevention, legal compliance, security, or the rights of others.

A request to delete personal information may not require deletion of an entire campaign, the fact that a brick was purchased, or records GiveBrick must retain. We may instead remove or anonymize the public name, message, or link associated with a brick where appropriate.

Authorized agents may submit requests where permitted by law, subject to verification of the agent’s authority and the individual’s identity.

12. Children’s Privacy

GiveBrick is not directed to children under 13, and children under 13 may not independently create an organizer account or complete a brick purchase.

Schools, youth teams, churches, and family organizations may use GiveBrick. Campaign organizers must obtain any legally required permission before submitting or publishing:

• A child’s name;
• A child’s photograph or likeness;
• A message attributed to a child; or
• Other personal information concerning a child.

Parents or legal guardians who believe that a child’s personal information was submitted without appropriate permission should contact privacy@givebrick.com. We will review the request and take appropriate action.

13. Third-Party Links

Campaign descriptions and brick messages may contain links to third-party websites.

GiveBrick does not control and is not responsible for the privacy, security, content, or practices of third-party websites. Review the privacy policy of a third-party site before providing personal information.

14. International Users

GiveBrick is operated from the United States, and its primary service providers may process information in the United States and other countries.

If you access the Service from outside the United States, your information may be transferred to and processed in countries whose privacy laws differ from those in your location.

Where required by applicable law, GiveBrick or its service providers may use appropriate safeguards for international transfers.

15. Do Not Track and Preference Signals

Some browsers transmit “Do Not Track” signals. Because no uniform standard governs these signals, the Service does not currently respond to all Do Not Track settings.

Where required by applicable law and technically supported, GiveBrick may recognize legally binding browser-based opt-out preference signals.

Because GiveBrick does not currently sell personal information or use it for cross-context behavioral advertising, such a signal may not materially change your experience.

16. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in the Service, technology, vendors, legal requirements, or our information practices.

When we update it, we will revise the Effective Date at the top of the policy. We may provide additional notice when a change is material.

Your continued use of the Service after an updated policy becomes effective is subject to the updated policy.

17. Contact Us

For privacy questions, concerns, or requests, contact:

Tessable LLC d/b/a GiveBrick
1930 Village Center Circle, Suite 3, PMB 4449
Las Vegas, NV 89134
United States
Email: privacy@givebrick.com