Privacy Policy

Last updated: 17 July 2026 · Data controller: ProSysTech, Netherlands (esoysal@prosystech.nl).

1. What we collect

Account data: your e-mail address, name (optional), a hash of your password (never the password itself), plan and language preference. Content: the websites, texts and images you create or upload. Community: your feedback reports with the page, browser and operating system you attached, plus XP history. Payments: handled by Stripe — we never see or store card numbers. Site statistics: privacy-friendly visit counts without cookies or personal identifiers.

2. What we use it for

To run your account and host your websites (contract), to secure the platform with login codes and rate limits (legitimate interest), to bill paid plans (contract), and to send service e-mails such as verification codes and important notices (contract). We don't sell your data and we don't run third-party advertising or tracking on the platform.

3. Where it lives

Everything is hosted in Microsoft Azure data centres in the EU (Netherlands/Ireland region), encrypted in transit (TLS) and at rest (AES-256). E-mail is sent through Azure Communication Services from brixcanvas.com.

4. Who else is involved

Three processors: Microsoft Azure (hosting, storage, e-mail), Stripe (payments and subscriptions), and Azure OpenAI (the AI features — your prompts are processed to generate text/images and are not used to train models). Each is bound by its own GDPR data-processing agreement.

5. Cookies

We only use functional cookies: your login session, a "trusted device" cookie so you don't need a security code on every login, and your dashboard language. No analytics cookies, no ad cookies — so no cookie banner is needed on brixcanvas.com. Websites our customers build may set their own cookies; that's between them and their visitors, with their own consent banner where required.

6. How long we keep it

As long as you have an account. Delete your account (Account → Delete account) and your sites, media and personal data are permanently removed. Free sites with no login for 90 days may be cleaned up after warning. Backups roll over automatically within weeks.

7. Your rights

Under the GDPR you can ask for access, correction, export or deletion of your data, and you can object to or restrict processing. Most of it you can do yourself in the dashboard; for the rest, mail esoysal@prosystech.nl and we'll respond within 30 days. You can always complain to the Dutch DPA (Autoriteit Persoonsgegevens).

8. Changes

If this policy changes in a way that matters, we'll tell you by e-mail or in the dashboard first.