Privacy Policy

This Privacy Policy explains who is responsible for your personal data, what we collect, why we use it, how long we keep it, who may receive it, and how you can exercise your rights.

Effective date: September 30, 2026
Last updated: September 30, 2026

Who controls your data

Brushcrit.com acts as the data controller for the personal data described in this Privacy Policy.

Controller name: Brushcrit.com
Contact address: 1 E Erie St, Suite 525-2384, Chicago, IL 60611, United States
Privacy contact: contact@brushcrit.com

Personal data we collect

Depending on how you interact with Brushcrit, we may collect:

  • Contact data: your email address when you join the Beta list or contact us.
  • Communication data: the content of messages you send to us and our replies.
  • Technical and usage data: IP address, browser and device information, timestamps, page views, website interactions, referring URLs, campaign parameters, and basic request logs collected when you use the website.
  • Consent data: when, where, and how you subscribed or withdrew your consent.

We collect this information directly from you and, where applicable, automatically through the website and our service providers.

Why we use your data

Manage the Beta waiting list and send Beta invitations. Data used: email address and consent data. Legal basis: your consent.

Send product news and development updates you requested. Data used: email address and consent data. Legal basis: your consent.

Respond to questions and privacy requests. Data used: contact and communication data. Legal basis: our legitimate interests and compliance with legal obligations.

Keep the website secure and diagnose technical problems. Data used: technical data. Legal basis: our legitimate interests in operating a secure and reliable service.

You may withdraw consent at any time. Withdrawal does not affect processing that took place before consent was withdrawn.

How long we keep your data

We keep personal data only for as long as necessary for the purpose for which it was collected:

  • Beta and update subscriptions: until you unsubscribe, withdraw consent, or the relevant waiting list or update service is discontinued.
  • Privacy and support correspondence: for as long as reasonably necessary to respond, resolve the matter, and meet applicable legal obligations.
  • Technical logs: generally for up to 7 days, unless longer retention is reasonably necessary to investigate a security incident or comply with law.

We may retain limited information for longer where required by law, to establish or defend legal claims, or to record that you opted out of future communications.

Who receives your data

We do not sell your personal data. We may share it only with:

  • Email and audience management provider: Loops, used to manage subscriptions and send requested emails.
  • Website hosting and database provider: Cloudflare, used to host the website and store waiting-list records in a Cloudflare D1 database in the United States.
  • Consent management provider: CookieYes, used to record and manage cookie choices.
  • Analytics and tag management provider: Google, used for Google Tag Manager, Google Analytics, Consent Mode, and related measurement tags when enabled.
  • Professional advisers or public authorities: when reasonably necessary or legally required.
  • A successor organisation: if Brushcrit is involved in a merger, acquisition, restructuring, or transfer of assets, subject to appropriate safeguards.

International transfers

Brushcrit and its service providers primarily process personal data in the United States. Where personal data is transferred from another country, we use safeguards required by applicable law, which may include contractual protections.

Your privacy rights

Depending on where you live, you may have the right to:

  • access the personal data we hold about you;
  • correct inaccurate or incomplete data;
  • request deletion of your data;
  • restrict or object to certain processing;
  • receive a portable copy of data you provided;
  • withdraw consent at any time; and
  • complain to your local data protection authority.

You may complain to the privacy or data protection authority in the country or state where you live or work, or where you believe a violation occurred.

How to request deletion

To ask us to delete your personal data, email contact@brushcrit.com with the subject line “Data deletion request”. Please use the email address connected to your subscription so we can locate your information. We may ask you to verify your identity before completing the request.

We will respond within the period required by applicable law. If we must keep any information, we will explain what we retain and why.

Security

We use appropriate technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse, or alteration. No internet service can guarantee absolute security.

Children's privacy

Brushcrit is not intended for children under 13. We do not knowingly collect personal data from children below that age. If you believe a child has provided data to us, contact us at contact@brushcrit.com.

Changes to this policy

We may update this Privacy Policy when our service or legal obligations change. We will publish the updated version here and change the “Last updated” date above. Where appropriate, we will also notify you by posting a notice on the website and, where a change materially affects subscribers, by email.

Contact us

For privacy questions or requests, contact:

Brushcrit.com
1 E Erie St, Suite 525-2384
Chicago, IL 60611, United States
Email: contact@brushcrit.com