Privacy Policy

We collect the following categories of personal data:

Account information: Full name, email address, phone number, country, city, and profile photo when you create an account.

Property data: Listing details, photos, addresses, prices, and property documents you upload to the platform.

Transaction data: Offer amounts, payment records, escrow details, and transaction history for purchases, rentals, and service bookings.

Communication data: Messages sent through our messaging system, enquiries, and support requests.

Usage data: Pages visited, features used, device information, IP address, and browser type. This data is collected automatically when you use the platform.

Location data: Approximate location based on your IP address, and precise location when you use map features (with your permission).

We use your personal data to:

• Provide and improve our platform services
• Process transactions, payments, and escrow
• Send notifications about your listings, offers, and bookings
• Send transactional emails (offer updates, payment confirmations, welcome messages)
• Verify your identity and prevent fraud
• Comply with legal obligations and resolve disputes
• Analyse platform usage to improve features and performance
• Provide customer support

We do not sell your personal data to third parties. We do not use your data for targeted advertising.

We share your data with the following third-party service providers, solely to operate the platform:

Flutterwave — Payment processing for land purchases, rent payments, and service bookings. Flutterwave processes your payment details under their own privacy policy.

Supabase — Database hosting and authentication. Your data is stored in Supabase's infrastructure.

Mapbox — Map rendering and geolocation services for property location display.

Resend — Email delivery for transactional emails (confirmations, notifications).

Vercel — Application hosting and content delivery.

We may also disclose your data when required by law, court order, or to protect the rights, safety, or property of FirmBrik, our users, or the public.

We retain your personal data for as long as your account is active or as needed to provide you with our services. If you delete your account, we will delete your personal data within 30 days, except where we are required by law to retain certain records (e.g., transaction records for tax compliance).

Transaction and payment records may be retained for up to 7 years after the transaction date for legal and regulatory compliance.

You have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Update or correct inaccurate information via your account settings.
• Deletion: Delete your account and all associated data from Settings > Danger Zone. You can also email us to request deletion.
• Data portability: Request your data in a machine-readable format by contacting us.
• Objection: Object to certain processing of your data (e.g., marketing communications).

To exercise any of these rights, contact us at privacy@firmbrik.com. We will respond within 30 days.

FirmBrik uses essential cookies required for the platform to function (authentication, session management). We do not use third-party tracking cookies or advertising cookies.

We may use anonymous analytics to understand how the platform is used and to improve our services. This data does not identify individual users.

FirmBrik is not intended for users under 18 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

Your data may be transferred to and processed in countries outside your country of residence. Our primary data infrastructure is hosted in the European Union via Supabase. Payment data is processed by Flutterwave, which operates under Nigerian and international financial regulations.

We ensure that any international transfers of personal data comply with applicable data protection laws and are subject to appropriate safeguards.

We implement industry-standard security measures to protect your personal data, including encryption in transit (TLS/SSL), encrypted storage, row-level security policies on our database, and secure authentication with session management.

While we take reasonable precautions, no system is completely secure. We cannot guarantee the absolute security of your data.

We may update this Privacy Policy from time to time. When we make significant changes, we will notify you via email or through a notice on the platform. The "Last updated" date at the top of this page indicates when the policy was last revised.

If you have questions about this Privacy Policy or our data practices, please contact us at:

Email: privacy@firmbrik.com

FirmBrik Ltd
Kampala, Uganda