Last updated 21 August 2026
Privacy Policy
Bricklark is job management software for contractors. This explains what we hold, why we hold it, who we share it with, and how to get it back or deleted. It covers the people who buy Bricklark, the crews who use it, and the clients those businesses serve.
Who this is about
Bricklark is operated by Z & N Global Inc., a corporation registered in the State of Ohio, United States (“Bricklark”, “we”).
Three different groups have data in Bricklark, and the relationship differs for each:
- Businesses that subscribe. You are our customer. For your own account data we are the controller — we decide what is collected and why.
- Workers and clients of those businesses. The business decides what to record about you and why. They are the controller; we are the processor acting on their instructions. If you want your data changed or removed, ask the business you work for or hired — they can do it in the product, and we will help them.
What we hold
| Whose data | What we hold | Why |
|---|---|---|
| Account owners and staff | Name, email address, password (hashed, never stored in the clear), role, avatar, notification preferences, last-active timestamp | To sign you in, apply permissions, and send the notifications you asked for |
| Field workers | Name, email, phone, hourly and overtime rates, timesheets, submitted receipts and job photos | Scheduling, time tracking, expense reimbursement and payroll |
| Field workers — location | GPS coordinates and accuracy, captured when a worker marks arrival at or departure from a job | To evidence attendance on a job. See “Location” below — this one deserves its own section. |
| Clients of a business | Name, email, phone, billing and property addresses, quotes, invoices, payments and message history | To quote, schedule, invoice and communicate about the work |
| Everyone | Server logs and error reports, including IP address and browser, retained for a short period | Security, abuse prevention and diagnosing faults |
We do not sell personal data. We do not use it to train AI models, and we do not build advertising profiles.
Location data
Bricklark records a worker's GPS position at two moments: when they mark themselves as arrived at a job, and when they mark themselves as departed. It is a pair of points tied to a job, not a continuous track. We do not follow a worker between jobs, outside shifts, or when the app is closed.
Location is only captured when the employing business turns the feature on, and only with the permission the worker grants their device. A worker can decline or revoke that permission at the operating-system level; the rest of the product continues to work.
Tracking employees carries obligations that vary sharply by state — some require written notice, some require consent, some restrict it to working hours. Bricklark is used by contractors across many states, so if you switch this feature on, meeting the rules where your crews actually work is your duty as the employer, not ours.
Who we share it with
We use a small number of sub-processors to run the product. Each receives only what its job requires:
- Vercel — application hosting and delivery.
- DigitalOcean — the database, and Spaces object storage for receipts, job photos and documents.
- Stripe — subscription billing and client payments. Card details go to Stripe directly; we never see or store a full card number.
- Groq — the in-product assistant and receipt reading. Receipt images and the text of your questions are sent for processing and are not used to train models.
- SendPulse — transactional email such as quotes, invoices and password resets.
- Sendblue — SMS to clients, such as “the crew is on the way”.
- Mapbox — maps and address lookup.
- Sentry — error monitoring.
- Upstash — rate limiting.
If a business connects Google Calendar, Google Drive or QuickBooks, data flows to those services too — but only after that business explicitly connects them, and only what the integration needs.
We will also disclose data where the law requires it, and to a buyer if the business is sold — in which case this policy travels with it, and we will tell you before anything changes.
Where it is held
Data is stored in the United States. Some sub-processors above operate internationally, so data may pass through their infrastructure under the safeguards those providers offer. If you use Bricklark from outside the United States, you are asking us to transfer your data there.
How long we keep it
Account data is kept while the account is open. After it closes we keep it for 30 days so it can be restored if the closure was a mistake, then delete it.
Some records outlive that. Invoices, payments and payroll are financial records that tax law requires be retained — generally seven years. We keep those for as long as required and no longer.
Your rights
Depending on where you live, you can ask us to:
- Give you a copy of what we hold about you
- Correct anything wrong
- Delete it, where no law requires us to keep it
- Stop or limit a particular use
- Hand it over in a portable format
If you are a worker or a client, the business that invited you controls your record — contact them first, as they can act immediately. If you are an account owner, or the business is unresponsive, write to privacy@bricklark.com and we will respond within 30 days.
If you think we have handled your data badly, tell us first — we would rather fix it. You can also complain to the Ohio Attorney General, to your own state Attorney General, or, if you are outside the United States, to your local data protection authority.
Security
Passwords are hashed with bcrypt. Sessions are carried in signed, HTTP-only cookies. Traffic is encrypted in transit, and access to production data is limited to the people who need it. No system is perfect; if we discover a breach affecting you, we will tell you and the relevant regulator as the law requires.
Children
Bricklark is a tool for businesses and is not intended for anyone under 16. We do not knowingly collect data from children.
Changes
We will post any change here and move the date at the top. If a change materially affects how we use your data, we will tell account owners by email before it takes effect.
Contact
privacy@bricklark.com · Z & N Global Inc., Ohio, United States
See also our Terms of Service and Cookie Policy.