Privacy Policy

What Brillo is

Brillo is a communication and discovery platform for trading-card buyers, sellers, and collectors. We connect users so they can list, discover, message, and arrange exchanges of cards -- Brillo does not process payments between users, does not supervise in-person meetings, and does not verify the identity of who shows up to one.

Account data

When you create an account we store your email, username, full name, date of birth, and a securely hashed password (we never store or can recover your plaintext password). Date of birth is used only to determine age-appropriate access to features and is never shown publicly. Inventory, listings, portfolios, purchase inquiries, and messages you send are stored to operate the features you use them for.

Trust & Safety data

For in-person pickups arranged through Giveaways or Purchase Inquiries, Brillo records a limited set of information tied to specific actions -- not continuous tracking. This includes: the general pickup location you and the other party enter (never live GPS), timestamps for when a pickup was requested/accepted/completed, a snapshot of each participant's username and account age, and a message count for the linked conversation (not its content).

At specific trigger events (a request being made, an offer accepted, a recipient selected, a pickup marked complete), we also record the IP address and device type associated with that action. Raw IP addresses are encrypted at rest and shown to staff in masked form by default (e.g. "203.0.xx.xx") -- viewing an unmasked IP or the content of a linked conversation requires an open safety investigation, a logged reason, and the reviewing admin re-confirming their own password. Every such access is permanently logged and cannot be deleted.

This exists so that if a safety complaint, fraud report, or legal request comes in, we have something to review after the fact -- it is not used to monitor users in the ordinary course of using Brillo.

How long we keep it

Records are kept only as long as they have investigative or legal value, then automatically deleted or redacted by a scheduled cleanup job that runs on the same hourly cycle as the rest of Brillo's background sync:

• Completed exchange records: 2 years from completion
• Cancelled or expired exchange records: 1 year
• Raw IP/device data behind a trigger event: redacted after 180 days; the event record itself is removed after 2 years
• Closed safety investigation cases: 3 years from closure
• Legal/law-enforcement correspondence: 7 years

A record subject to an active legal hold is excluded from automatic deletion regardless of age. Records of a Super Admin revealing or exporting sensitive data are kept indefinitely as an accountability trail and are never deleted by this process.

Guardian and minor accounts

For account holders aged 13-17, we collect a parent or legal guardian's name, email, and relationship to obtain consent before the account can use messaging, giveaways, purchase inquiries, or pickups. This consent process confirms the guardian's email address and stated relationship -- it is not an identity verification service and does not independently confirm the guardian's real-world identity. A guardian may review the minor's account status and revoke consent at any time.

Who can see what

Regular staff (Admins) can see a masked summary of Trust & Safety activity -- reference numbers, statuses, general location, masked IPs, and message counts -- for review purposes. Unmasked IP addresses and message content are only accessible to Super Admins, only through an open investigation case, only with a logged reason and password re-confirmation, and every such access is recorded.

Third-party services

We use Stripe to process subscription payments (Brillo does not store your card details) and Resend to deliver transactional emails (order updates, ticket replies, account notices). These providers process the minimum data needed to perform that function.

Your choices

You can update your account details from your profile settings at any time. For questions about your data, a deletion request, or a safety concern, please contact support.

Changes to this policy

We'll update this page if our practices change, and update the date at the top when we do.