Privacy Policy
Your privacy matters. This policy explains how Bricoule collects, uses, and protects your personal data.
Last updated: June 12, 2026
1. Data Controller
The data controller responsible for your personal data is:
2. Data We Collect
We collect the following types of personal data when you use the Bricoule platform:
- Account Information: Name, email address, phone number, profile photo.
- Location Data: GPS location used for service matching and tracking during active jobs.
- Payment Information: Payment method details, transaction history.
- Photos: Profile pictures, task documentation photos, identity verification photos.
- Communication Data: Chat messages, voice call metadata, support inquiries.
- Device Information: Device type, operating system, app version, crash logs.
- Usage Data: App interactions, features used, session duration.
3. How We Use Your Data
We use your personal data for the following purposes:
- Service Delivery: To match clients with taskers, process bookings, and facilitate payments.
- Account Management: To create and manage your account, verify your identity, and provide customer support.
- Communication: To send booking confirmations, reminders, notifications, and support responses.
- Safety and Security: To verify taskers, prevent fraud, and ensure platform safety.
- Analytics: To improve the platform, analyze usage patterns, and optimize service quality.
- Legal Compliance: To comply with applicable laws and regulations.
4. Legal Basis for Processing
We process your data based on the following legal grounds:
- Contractual necessity: Processing is necessary to fulfill our contract with you (providing the service).
- Consent: You have given explicit consent for specific processing activities (e.g., push notifications, location tracking).
- Legitimate interest: Processing is necessary for our legitimate interests (e.g., improving the platform, preventing fraud).
- Legal obligation: Processing is required by law (e.g., tax records, anti-fraud measures).
5. Data Sharing
We may share your data with the following third parties:
- Payment Processors: Stripe, Paystack, CMI — to process payments securely.
- Cloud Services: Cloudinary — for file and image storage.
- Analytics: Firebase Analytics — for app analytics and crash reporting.
- Notifications: OneSignal — for push notifications.
- Communication: Agora — for voice/video calls; Twilio — for SMS and OTP verification.
- Other Users: Your name, profile photo, and rating are visible to other users for service coordination.
- Legal Authorities: When required by law, court order, or to protect the safety of our users.
We do not sell your personal data to third parties.
6. Cookies and Tracking
Our website uses cookies and similar technologies for:
- Essential cookies: Required for the website to function properly.
- Analytics cookies: To understand how visitors use our website (e.g., Google Analytics).
- Preference cookies: To remember your settings and preferences.
You can manage or disable cookies through your browser settings. Disabling essential cookies may affect website functionality.
7. Data Retention
We retain your personal data for as long as necessary to provide our services and comply with legal obligations:
- Account data: Retained while your account is active, and for 30 days after deletion.
- Transaction records: Retained for 5 years for tax and legal compliance.
- Chat messages: Retained for 12 months after the conversation ends.
- Location data: Retained for 90 days after the job is completed.
8. Your Rights (GDPR)
If you are in the EU/EEA, you have the following rights under the General Data Protection Regulation:
- Right of Access: Request a copy of the personal data we hold about you.
- Right to Rectification: Request correction of inaccurate or incomplete data.
- Right to Erasure: Request deletion of your personal data ("right to be forgotten").
- Right to Restriction: Request restriction of processing in certain circumstances.
- Right to Data Portability: Request your data in a structured, machine-readable format.
- Right to Object: Object to processing based on legitimate interests or direct marketing.
- Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent.
To exercise any of these rights, contact us at dpo@bricoule.com.
9. Your Rights (CCPA)
If you are a California resident, you have the following rights under the California Consumer Privacy Act:
- Right to Know: Request disclosure of the categories and specific pieces of personal information collected.
- Right to Delete: Request deletion of personal information we have collected.
- Right to Opt-Out: Opt out of the sale of personal information (we do not sell your data).
- Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.
To exercise these rights, contact us at dpo@bricoule.com.
10. International Data Transfers
Your data may be transferred to and processed in countries outside the EU/EEA. We ensure appropriate safeguards are in place, including:
- Standard Contractual Clauses (SCCs) approved by the European Commission.
- Adequacy decisions where applicable.
- Contractual obligations with third-party processors to protect your data.
11. Security Measures
We implement industry-standard security measures to protect your data, including:
- Encryption of data in transit (TLS/SSL) and at rest.
- Secure authentication (JWT + OTP via Twilio).
- Regular security audits and vulnerability assessments.
- Access controls and role-based permissions.
While we strive to protect your data, no method of transmission or storage is 100% secure. We encourage you to use strong passwords and keep your account credentials safe.
12. Third-Party Services
The following third-party services are used by Bricoule and may process your data:
- OneSignal — Push notifications
- Firebase Analytics — App analytics and crash reporting
- Agora — Voice/video calls
- Stripe / Paystack / CMI — Payment processing
- Twilio — SMS / OTP verification
- Cloudinary — File and image storage
Each third-party service has its own privacy policy. We encourage you to review their policies for more information.
13. Children's Privacy
Bricoule is not intended for children under 13 years of age. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child, we will delete it promptly.
14. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically.
15. Contact
If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at: