Privacy policy
This page explains what 28bricks stores about you and your company, why, and what you can ask us to do with it.
Who is responsible
The data controller is SIA Oda fabrica, Latvia. Questions and requests go to contact@28bricks.com.
What we store
- Your email address and, if you sign in with Google, your name as Google shares it.
- When you use the form on the first page: your name, company, email, phone if you give it, your message and any files you attach. They are emailed to us and kept only in that email.
- Which company you belong to and your role there.
- Your signature of the confidentiality agreement: the name you typed, your company, the version and the time.
- Files your company uploads or picks from a connected folder (IFC models and PDF drawings), and the elements, tasks and settings made from them.
- A record of use: which element was opened, loaded or printed, and when. It is used for the plant's figures and for billing.
- For a connected Google Drive, Dropbox or OneDrive: an access key that lets 28bricks read the folder you chose. It stays on our server and is never shown in the browser.
Why
To run the service your company signed up for: signing you in, turning drawings into build steps, showing the plant's figures and sending invoices. We do not sell data, show advertising or use your drawings to train AI models.
Google user data
With Google sign-in we only receive your name and email address. With a Google Drive connection, 28bricks reads only the files in the folder you choose and only to copy IFC and PDF files into your company's file list. 28bricks' use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Where it is kept
The database and files are stored in the European Union (Frankfurt). The site runs on Vercel, sign-in emails are sent through Resend, and invoices through Stripe. Each only receives what its part of the work needs.
Cookies
Only the ones needed to keep you signed in and to remember the company and project you chose. No tracking or advertising cookies.
How long
As long as your company uses 28bricks. When a company leaves, its files and elements are deleted within 30 days; invoices are kept as long as accounting law requires.
Your rights
You can ask to see, correct, export or delete your data, and you can disconnect a Google Drive, Dropbox or OneDrive folder at any time on the dashboard. Write to contact@28bricks.com. You can also complain to the Latvian data protection authority (Datu valsts inspekcija).