Brixels
How it worksSolutionsFeaturesPricingBlogFAQ
Brixels

Painfully simple websites for tradesmen.

  • For Lead Gen Agencies
  • For Web Agencies
  • For Tradesmen
  • Blog
  • Privacy
  • Terms
  • Cookies
  • Contact

© 2026 Brixels. Painfully simple websites for tradesmen.

Brixels is a trading name of Alaxu Limited. BRN 77907980.

Privacy Policy

Last updated: 12 August 2026

This policy explains what personal data Brixels collects, why we collect it, and the rights you have over it. Alaxu Limited, trading as Brixels, is the data controller for the personal data described here.

What data we collect

We collect and process the following categories of personal data:

  • Account data — your name, email address, phone number and trade information you provide when creating an account or completing the website brief.
  • Business data — business name, address, service areas, photos and other content you provide for your website.
  • Usage data — pages visited, features used, session timestamps and browser/device information.
  • Communications — messages you send us by email or through in-app support.

How we use your data

We use your personal data to:

  • Provide, operate and improve the Brixels platform and your generated website.
  • Authenticate your identity and manage your account.
  • Generate your trade website from the information you submit.
  • Send transactional messages (for example sign-in codes and build notifications).
  • Respond to support requests and communicate about your account.
  • Comply with our legal obligations.
  • Legal basis for processing

    We rely on the following legal bases under UK GDPR:

    • Contract performance — processing necessary to provide the service you have signed up for.
    • Legitimate interests — improving the platform, preventing fraud and maintaining security.
    • Legal obligation — where processing is required by law.
    • Consent — for optional analytics or marketing emails, where we request it explicitly.

    Data sharing

    We do not sell your personal data. We share data only with service providers who help us operate the platform:

    • Convex — application database and authentication.
    • Google — recaptcha enterprise bot protection.
    • Vercel — hosting.
    • Anthropic — AI website generation (business content only, never your contact data).
    • Stripe — payment processing, where payments apply to your account.
    • Cloudflare — domain and email-forwarding services, where connected.

    Google user data

    If you choose to connect a Google account, Brixels requests access to Google Analytics, Google Tag Manager and Google Search Console so that, when you publish a website, we can create and configure an Analytics property and a Tag Manager container for it, add the site to Search Console, verify your ownership of it and submit its sitemap, and show you which account is connected. We access only the data these features need: your Google account email address, the list of Analytics accounts/properties, Tag Manager accounts/containers and Search Console properties you can manage, and the verification tokens Google issues for your sites.

    What we store: the connection token Google issues when you connect, your Google account email address, and the identifiers and names of the Analytics account, Tag Manager account and Search Console properties you chose, plus the property, container and verification token created for each website. We do not store Analytics report data. We never use Google user data for advertising, profiling, or training AI models. Google user data is not sold and is not shared with third parties except as required to provide these features.

    How we protect it: the connection token is encrypted at rest with AES-256-GCM before it is written to our database. The encryption key is held only in our server environment and is never sent to a browser, written to logs, or stored alongside the data it protects. The token is decrypted only inside server-side functions, for the moment a request to Google is made, and is never displayed to anyone, including you. All traffic between your browser, our servers and Google's APIs is encrypted in transit with TLS. Access to the systems that hold this data is limited to named administrators using multi-factor authentication, and our staff do not read Google user data except for support you ask for or as required by law. Our infrastructure providers hold SOC 2 Type II certification. Every access token we request from Google is short-lived and is not stored.

    Data retention

    We retain your account and business data for as long as your account is active, plus up to 2 years after closure for legal and audit purposes. Usage logs are retained for up to 12 months. You may request deletion at any time (see Your rights below).

    Cookies

    We use cookies and similar technologies. For full details, including the complete inventory of what this site sets, see our Cookie Policy at /legals/cookies.

    Your rights

    Under UK GDPR you have the right to:

    • Access a copy of your personal data.
    • Correct inaccurate data.
    • Request deletion (the “right to be forgotten”).
    • Object to or restrict processing.
    • Data portability.
    • Withdraw consent at any time, where processing is based on consent.

    Exercising your rights and complaints

    To exercise any of these rights, email support@brixels.tech. We will respond within 30 days.

    You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.

    Changes to this policy

    We may update this policy from time to time. We will notify you of material changes by email or an in-app notice. Continued use of Brixels after changes take effect constitutes acceptance.

    Contact

    If you have questions about this policy, email support@brixels.tech.

    Brixels is a trading name of Alaxu Limited (雲策科技有限公司), a company registered in Hong Kong under Business Registration Number 77907980.

    Alaxu Ltd
    Kowloon
    Wong Tai Sin District
    Room D07, 8/F, Kai Tak Factory Building
    99 King Fuk Street, San Po Kong
    Hong Kong

    Retention and deletion: the connection token is revoked with Google and erased the moment you disconnect Google from your team settings, which you can do at any time; you can also revoke access from your Google account's security settings. Everything else we hold about the connection is deleted when you delete your team or your account. If we become aware of a security incident affecting Google user data, we will notify affected users without undue delay.

    Brixels's use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.