Skip to main content
BrickNoteEarly access

Legal

Privacy policy

What BrickNote processes, where, and your rights.

1. Data controller

The data controller for the bricknote.ai website and for the exchanges you start with us (early access, contact, licence) is:

  • APITHINGS — SARL (société à responsabilité limitée), RCS Lyon 890 251 184
  • SIREN: 890 251 184 — SIRET: 890 251 184 00010
  • Registered office: 4 rue de la République, 69001 Lyon, France
  • Email: contact@bricknote.ai

For the content of your projects, the data controller is you, or the organisation you work for. BrickNote is an application installed on your Mac: APITHINGS hosts, receives and sees none of that content (section 2). APITHINGS has not appointed a data protection officer — the law does not require one given its activity and size; your requests reach the gérant directly, at the address above.

2. What BrickNote processes, and where

2.1 On your Mac

The BrickNote application for macOS works on a project folder as it exists on your Mac: renders, plans, brochures, descriptive notices, massing captures, logos, photos. It reads them in place. It keeps what it makes and what it needs — the facts read in your documents, storyboards, generated pictures, clips and voices, checks and decisions, the record of what each call cost — in the application’s data folder on that same Mac, and it writes your deliverables (films, subtitles, control notes) into a BrickNote folder inside the project folder. There is no BrickNote server: none of this content is transmitted to APITHINGS.

These files may contain personal data of third parties — the names and contact details printed on a brochure or in a plan’s title block, the people who appear in a picture, the name of the person who approves a film. They remain under your control and your responsibility, as they were before BrickNote.

2.2 The model providers you connect

BrickNote makes films with the artificial-intelligence models of the providers you connect in its settings, on your own accounts: OpenRouter (text, images and video), ElevenLabs (voices), Runware and BytePlus (images and video). For each step, the application sends the chosen provider what that step needs, and nothing else:

  • to read the facts: the text of your documents’ pages;
  • to plan a film: your brief, the list of your files and small copies of the pictures you chose;
  • to make a new look, a clip or a transition: the source picture (and, for a transition, the end picture) with the instruction;
  • to check a film in Faithful mode: the generated picture or frames with their source, and the lines with the facts they cite; for a competition film, each picture shown, to look for a readable name;
  • to voice a line: its text.

Each call goes straight from your Mac to the provider. That processing is governed by your contract with the provider and by its own privacy policy; APITHINGS is not a party to it and has no access to those exchanges. OpenRouter, Inc. is an American company that passes each request to a model provider it picks from those it lists; Runware, BytePlus (a ByteDance company) and ElevenLabs set their own places of processing. The place where your content is processed therefore depends on the provider you choose, and may be outside the European Union: read each provider’s terms before you send it a project. Your provider keys are encrypted with the macOS keychain and kept in the application’s data folder on your Mac.

2.3 Sending a film

The application’s Share menu is the one macOS provides (AirDrop, Mail, Messages…): what you send, and to whom, is handled by your Mac and the service you pick. “Scan to watch on your phone” serves the film from your Mac over your local network, for a limited time, until you close the window; nothing passes through a BrickNote server.

2.4 Nothing goes to APITHINGS

The application sends APITHINGS nothing: it has no account, no usage measurement and no error reporting. If you write to us for help, you choose what you send (section 7 of the terms).

2.5 The bricknote.ai website

The website is a presentation site. The early-access form stores nothing and sends nothing: it composes an email in your own mail app, addressed to contact@bricknote.ai. Only if you send that email do we receive what it contains — your name, your practice or company, your role, the films you want to make, your message and your email address. We use it to answer you and to arrange your early access, and for nothing else: no newsletter, no list sold or shared. Our host keeps technical logs (IP address, pages requested) for the security and operation of the service.

Audience measurement only happens with your consent. You are asked on your first visit, with two answers of equal weight; until you have answered, no measurement tool is loaded. If you accept, it relies on PostHog, hosted in the European Union, in cookieless mode: no cookie is set and nothing is kept on your device — with one exception we would rather write down: on load, PostHog’s library checks whether local storage works by writing a value it reads back and deletes at once; nothing of it remains and nothing in it identifies you. PostHog then computes, on its own servers, a hash of your connection’s technical headers with a salt renewed every day, so that nobody is recognised from one day to the next. Your IP address is not stored. What is measured: the pages viewed, which early-access button was clicked, the films played on the site, the use of the early-access form (that the email was composed, never its content), and the page’s loading performance. If you refuse, nothing is measured: no script is loaded and no data is sent. You can change your answer at any time through the “Audience measurement” link at the bottom of every page.

3. Purposes and legal bases

For the processing APITHINGS is responsible for:

  • Answering your early-access request, your messages, and preparing a licence: pre-contractual measures taken at your request, then performance of the contract.
  • Operating and securing the website: legitimate interest.
  • Measuring the website’s audience: your consent, collected on your first visit and revocable at any time.

For the content of your projects, the purposes and legal bases are yours: BrickNote is the tool, not the controller.

4. Recipients and processors

We do not sell personal data. The providers that process data on behalf of APITHINGS are:

  • Vercel Inc.: hosting of the bricknote.ai website (technical logs).
  • PostHog: audience measurement of the website, with your consent. Hosted in the European Union; a processor within the meaning of article 28 GDPR, acting on our instructions alone.
  • Our email service: it hosts the contact@bricknote.ai mailbox, where your early-access email arrives.

The model providers are not our processors: you choose them and contract with them directly (section 2.2).

If the BrickNote business is transferred, the contact and contract-management data needed for its continuity may be passed on to the successor, on the basis of our legitimate interest in organising that continuity, after an assessment of the rights of the persons concerned. You will be informed of the successor’s identity, of the processing that continues and of how to exercise your rights. The files kept solely on your own computers are not transferred by APITHINGS.

5. Transfers outside the European Union

The site’s server-side processing is pinned to the Vercel region “fra1”, in Frankfurt, Germany; the pages themselves being static, they reach you from the nearest point of presence on the host’s global network, wherever that is. Vercel’s own platform operations — support, security — may also involve processing in the United States, covered by the European Commission’s standard contractual clauses. Your project content is transferred nowhere by APITHINGS. Where your model providers process it depends on your choice (section 2.2) and may be outside the European Union.

6. Retention periods

  • Your project content: on your Mac, for as long as you keep it — the application imposes no period. BrickNote never deletes the files of your project folder: a deleted film goes to the project’s own trash for 30 days, and the tidy-up of old export folders moves them to the macOS Trash, only when you confirm. What the application keeps in its data folder stays there until you remove it; any backup or copy outlives it until you delete it.
  • Early-access requests and the exchanges that follow: the duration of the relationship, then three years; a request that leads nowhere is deleted within a year of our last exchange, or as soon as you ask.
  • Website technical logs: kept by the host under its own security policy.
  • Website audience measurement: with our processor PostHog, for as long as our subscription lasts — PostHog keeps events for up to seven years and offers no shorter period. With no cookie or identifier on your device, these measurements are tied to no one we could find again; they therefore cannot be erased individually.

7. Your rights

Under the GDPR, you have the following rights:

  • Right of access: obtain a copy of your data
  • Right to rectification: correct your data
  • Right to erasure: delete your data
  • Right to portability: receive your data in a structured format
  • Right to object: object to certain processing
  • Right to restriction: limit the processing of your data

No decision producing a legal effect is taken automatically: the application proposes, its checks flag and never decide, and nothing is published without you (article 22 GDPR).

To exercise them with APITHINGS, write to: contact@bricknote.ai. For the content of a project, contact whoever holds it: it is on their computer, not with us.

8. Security

On your Mac, your provider keys are encrypted with the macOS keychain, and the application opens only the folders you give it. The website is served over HTTPS.

The application’s data folder is not encrypted by BrickNote (only the keys are): it is protected the way the rest of your Mac is. FileVault, an individual user session and a locked screen are what actually protect a project. Backing up your project folders remains your responsibility, as for any file on your Mac.

9. Cookies

The bricknote.ai website sets no cookie. It keeps a single record on your device: your answer to the audience-measurement question — strictly necessary, without it the question would come back on every page — removed as soon as it expires (six months). If you accept audience measurement, PostHog runs with no cookie and keeps nothing on your device, except the availability check described in section 2.5, written and deleted in the same breath. No advertising cookies, no third-party trackers. The application uses no cookies.

10. Minors

BrickNote is intended for professionals of architecture, property development and marketing. It is not designed for use by minors under 16.

11. Changes

We may change this policy. The date at the bottom of the page states the version in force; a substantial change is announced to the people who have early access.

12. Complaints

If you believe your rights are not respected, you may file a complaint with the CNIL (www.cnil.fr).

13. Contact

For any question about this privacy policy:

Last updated: November 2026