Privacy Policy

Last updated: March 31, 2026

BRX Evergreen ("we," "us," or "our") operates the brxevergreen.com website and the BRX Evergreen platform (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

1. Information We Collect

We may collect the following types of information:

  • Account Information: Name, email address, phone number, business name, and password when you create an account.
  • Billing Information: Payment card details and billing address, processed securely through Stripe. We do not store full card numbers on our servers.
  • Business Data: Client records, appointment details, revenue data, and other information you enter into the platform.
  • Usage Data: Information about how you interact with the Service, including pages visited, features used, and session duration.
  • Device Information: Browser type, operating system, IP address, and device identifiers.
  • Communications: Messages you send or receive through our unified inbox, including SMS, email, and social media direct messages from Instagram, Facebook, and TikTok.
  • Identity Verification: A photo of your government-issued ID, uploaded during account setup. We use AI-powered text extraction to read and verify the name on your ID. The image is stored in encrypted storage.
  • Social Media Data: When you connect social media accounts (Instagram, Facebook, TikTok), we store OAuth access tokens and receive incoming direct messages on your behalf to display in your unified inbox.

2. How We Use Your Information

We use collected information to:

  • Provide, maintain, and improve the Service
  • Process transactions and send related information (confirmations, invoices)
  • Send appointment reminders and booking confirmations to you and your clients
  • Provide customer support and respond to inquiries
  • Send marketing communications (with your consent)
  • Monitor usage patterns and analyze trends to improve user experience
  • Detect, prevent, and address technical issues and security threats
  • Comply with legal obligations

3. Data Sharing

We do not sell your personal information. We may share data with:

  • Service Providers: Third-party vendors who assist in operating our Service, including:
    • Stripe — Payment processing, subscription billing, and promotion code handling. Stripe receives your payment card details, billing address, and transaction amounts. Stripe's privacy policy applies to data they process.
    • Supabase — Database hosting, user authentication, and file storage (including identity documents). All data is encrypted at rest and in transit.
    • Twilio — SMS messaging for appointment reminders and booking confirmations.
    • SendGrid — Transactional and marketing email delivery.
    • Anthropic (Claude AI) — AI-powered identity verification (name extraction from ID photos) and intelligent message responses. We send image data and conversation context to Anthropic's API for processing. Anthropic does not retain data submitted via their API beyond the duration of the request.
    • Meta (Instagram, Facebook) — When you connect your Instagram or Facebook account, we access your page's messaging features through the Meta Graph API to display and respond to DMs within BRX Evergreen.
    • TikTok — When you connect your TikTok account, we access your account's messaging features through the TikTok API to display and respond to DMs within BRX Evergreen.
    • Vercel — Web application hosting and deployment.
  • Legal Requirements: When required by law, subpoena, or government request.
  • Business Transfers: In connection with a merger, acquisition, or sale of assets.
  • With Your Consent: When you explicitly authorize us to share information.

4. SMS / Text Messaging

BRX Evergreen uses SMS messaging (powered by Twilio) to send appointment reminders, booking confirmations, and marketing campaigns on behalf of our users. By providing your phone number and opting in, you consent to receive text messages from BRX Evergreen or businesses using our platform.

  • Message frequency varies based on your activity and the businesses you interact with.
  • Message and data rates may apply.
  • Reply STOP to opt out. You may opt out of SMS messages at any time by replying STOP to any message.
  • Reply HELP for help. For assistance, reply HELP to any message or contact us at the information below.
  • We do not share your phone number or SMS opt-in consent with third parties for their marketing purposes.
  • Carriers are not liable for delayed or undelivered messages.

5. Identity Verification Data

During account activation, you upload a government-issued photo ID for identity verification. Here is how we handle this data:

  • Your ID image is stored in Supabase Storage with encryption at rest, accessible only to our backend systems.
  • We use Anthropic's Claude AI to extract the legal name from your ID image. The image is sent to Anthropic's API for processing and is not retained by Anthropic after the request completes.
  • The extracted name is stored on your user profile for identity verification during account recovery.
  • Your ID image is retained as a backup record for fraud prevention. You may request deletion of your ID image by contacting support@brxevergreen.com.
  • We do not share your ID image with any third party other than Anthropic for the purpose of name extraction.

6. Social Media Inbox Data

When you connect social media accounts to BRX Evergreen, we process messaging data as follows:

  • Incoming direct messages from Instagram, Facebook, and TikTok are received via official platform APIs and stored in our database to display in your unified inbox.
  • We store the sender's name, platform identifier, and message content. We do not access or store the sender's private profile information beyond what is provided in the message.
  • OAuth access tokens for connected accounts are stored securely and used only to access your account's messaging features.
  • You may disconnect any social account at any time. Upon disconnection, we stop receiving new messages but retain previously received messages in your inbox unless you request deletion.

7. Email Communications

We may send you emails related to your account, transactions, and Service updates. With your consent, we may also send promotional emails about new features, offers, or other information we think you may find interesting. You can unsubscribe from marketing emails at any time by clicking the "unsubscribe" link in any email or by contacting us directly.

8. Data Security

We implement industry-standard security measures to protect your data, including encryption in transit (TLS/SSL), encryption at rest, secure authentication, and regular security audits. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

9. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. If you close your account, we will delete or anonymize your data within 90 days, unless retention is required by law or for legitimate business purposes (e.g., resolving disputes).

10. Your Rights

Depending on your location, you may have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data
  • Object to or restrict processing of your data
  • Request a portable copy of your data
  • Withdraw consent at any time (where processing is based on consent)

To exercise any of these rights, please contact us using the information below. We will respond within 30 days.

11. Cookies and Tracking

We use cookies and similar tracking technologies to maintain your session, remember preferences, and analyze usage. You can control cookies through your browser settings. Disabling cookies may limit some features of the Service.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the revised policy.

13. Contact Information

If you have questions about this Privacy Policy or wish to exercise your rights, contact us at:

BRX Evergreen
Website: brxevergreen.com
Email: support@brxevergreen.com