Brevix is committed to protecting the privacy and personal data of all users. We process personal information in accordance with the EU General Data Protection Regulation (GDPR) and applicable local laws. This section outlines how we collect, use, store, and safeguard personal data for individuals located in the European Union.

1. Lawful Bases for Processing

We only collect and process personal data when we have a valid legal basis under GDPR, including:

• Consent: When you opt in to create an account, subscribe, or provide information snvoluntarily.
• Contractual Necessity: To provide platform functionality such as account management, service delivery, system notifications, and customer support.
• Legitimate Interests: To improve platform performance, enhance user experience, secure our systems, and prevent fraud.
• Legal Obligations: To comply with applicable laws, regulatory requirements, and record-keeping duties.

2. Types of Personal Data We Collect

Depending on how you use Brevix, we may collect:

• Account Information: Name, email address, username, and profile details.
• Usage Data: Logs, device information, IP address, settings, and interaction history.
• Communication Data: Support messages, service inquiries, and feedback.
• Payment Data: Billing details and transaction records (processed securely via third-party payment providers).
• Technical Data: Cookies, analytics identifiers, and diagnostic information.

We only collect the minimum amount of personal data necessary to deliver and improve our services.

3. How We Use Personal Data

Brevix uses personal data to:

• Provide and maintain the Brevix platform.
• Authenticate users and manage accounts.
• Personalize features and improve platform performance.
• Deliver customer support and service-related notifications.
• Conduct analytics to enhance user experience.
• Ensure security, detect misuse, and prevent fraud.
• Fulfil legal obligations and respond to regulatory requests.

We do not sell or rent personal data.

4. Data Subject Rights

Under the General Data Protection Regulation (GDPR), EU users have the following rights:

• Right to Access: Request a copy of your personal data.
• Right to Rectification: Correct inaccurate or incomplete information.
• Right to Erasure (“Right to Be Forgotten”): Request deletion of your personal data.
• Right to Restrict Processing: Limit how your data is used.
• Right to Data Portability: Receive your data in a structured, commonly used, machine-readable format.
• Right to Object: Object to processing based on legitimate interests.
• Right to Withdraw Consent: Withdraw consent at any time, where processing is based on consent.

You may exercise these rights by contacting us through our Contact page.

5. International Data Transfers

Brevix may store or process personal data in countries outside the European Union. Where international transfers occur, we implement GDPR-compliant safeguards, including:

• Standard Contractual Clauses (SCCs)
• Data Processing Agreements (DPAs)
• Verified security frameworks with third-party processors

These safeguards ensure that personal data remains protected regardless of where it is processed.

6. Data Retention

We retain personal data only for as long as necessary to:

• Deliver our services
• Fulfil legal and regulatory obligations
• Resolve disputes
• Enforce agreements

When personal data is no longer required, it is securely deleted or anonymized.

7. Data Security

We implement appropriate administrative, technical, and organizational measures to protect personal data, including:

• Encryption of data in transit and at rest
• Secure access controls
• Regular monitoring and security assessments
• Classification and minimization of personal data
• Restricted access to authorized personnel only

While we strive to protect personal data, no system is entirely immune to security risks. In the event of a data breach, we will notify affected users in accordance with GDPR requirements.

8. Data Processors and Third-Party Services

Brevix may engage verified third-party service providers to support platform operations, including:

• Hosting and cloud storage services
• Analytics providers
• Payment processors
• Communication and notification tools
• Customer support systems

All third-party processors are bound by GDPR-compliant agreements and may process personal data only in accordance with Brevix’s documented instructions.

9. Children’s Data

Brevix is not intended for individuals under the age of 16. We do not knowingly collect personal data from children. If such data is identified, we will take immediate steps to delete it.

10. Contact Information

If you have questions regarding this Privacy Policy, GDPR compliance, or wish to exercise your data protection rights, please contact us through our Contact page.