Privacy Policy

Brevin Marketing ("Brevin", "we", "us") provides a managed web-presence and lead-capture service for local service businesses. This policy explains what data we handle, why, and the processors we rely on. It covers our business customers (contractors), the end customers who submit enquiries through a contractor's website, and prospective customers who request a free marketing audit from us directly through our tool at brevinmarketing.com.

Data controller

For contractor account data, Brevin is the data controller. For end-customer lead data captured on a contractor's site, the contractor is the controller and Brevin acts as a processor on their behalf. For marketing-enquiry (prospect) data you submit through our audit tool at brevinmarketing.com, Brevin is the data controller — you provide it to us directly, not on behalf of a contractor.

Data we collect

• Contractor / owner account data — name, email, and authentication credentials used to sign in and manage your account.
• End-customer lead data — name, email, phone number, and job description submitted through a contractor's quote form. This is personal data of the contractor's prospective customers.
• Google user data — if and when Google Business Profile features are enabled, data accessed via Google OAuth, used only to provide those features (see the Limited Use disclosure below).
• Billing data — subscription status and Stripe identifiers. Card details are entered on Stripe's hosted pages; we never receive or store full card numbers.
• Marketing-enquiry (prospect) data — the email address, business name, and Google Place ID you provide through our audit tool at brevinmarketing.com. For this data Brevin is the data controller (collected directly by us, not on behalf of a contractor). Lawful basis: your consent and our legitimate interest in responding to your enquiry. We use it to send you your audit results and to follow up about our service — nothing more.

How we use data & Google Limited Use

We use data to provide, maintain, and improve the service: hosting websites, capturing and routing leads, sending speed-to-lead alerts, and processing payments.

Brevin's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, Google user data is used only to provide or improve user-facing features; is not sold or transferred to advertising platforms, data brokers, or other parties; is not used for advertising or retargeting; is not used to determine credit-worthiness or for lending purposes; and is not read by humans except with your explicit consent, for security, to comply with applicable law, or as part of aggregated and anonymized operations.

Service providers (sub-processors)

We rely on the following processors to operate the service:

• Supabase — database, authentication, and storage.
• Vercel — application hosting and content delivery.
• Stripe — payment processing (card data is handled by Stripe; we store no card numbers).
• Google — Google Business Profile integration (when enabled).
• Twilio — SMS lead alerts.
• Postmark — transactional and lead-alert email.

Lead data handling, retention & isolation

Each contractor's data is isolated from every other contractor's using database row-level security; one contractor can never read another's leads or account data. Lead data is retained for as long as the contractor account is active or as needed to provide the service, and is deleted on request or on account closure, subject to legal retention requirements.

Marketing-enquiry (prospect) data is retained for 18 months from collection, then deleted automatically.

Cookies & analytics

We use strictly necessary cookies for authentication and session management. We do not use third-party advertising cookies.

Security

We protect data with encryption in transit, scoped access controls, row-level isolation, and signature-verified payment webhooks. No system is perfectly secure, but we work to safeguard your data.

Your rights & deletion

Subject to applicable law, you may request access to, correction of, or deletion of your personal data. End customers who submitted an enquiry through a contractor's website should contact the contractor who collected their data; we will assist the contractor in fulfilling such requests. Contact us using the details below.

If you submitted details through our audit tool at brevinmarketing.com, Brevin is the controller of that data. To access or delete it, contact privacy@brevinmarketing.com.

Children

The service is not directed to children and we do not knowingly collect their data.

Changes & contact

We may update this policy; material changes will be reflected by the effective date above. Questions? Contact privacy@brevinmarketing.com.