Privacy policy

Last updated: 7 September 2026

This policy describes how Bruchim (“we”, “us”) handles personal information when you:

• Visit bruchim.io
• Create or use a workspace on app.bruchim.io
• Use the Bruchim iPad kiosk app
• Check in as a visitor at a customer location

Who we are

• Operator: Bruchim, a sole proprietorship in Quebec, Canada, operating under the trade name Bruchim
• Mailing address: 10636 Chem. de la Côte-de-Liesse, Lachine, QC H8T 1A5, Canada
• Phone: +1 514 636-8800
• Governing law: Province of Quebec and the applicable federal laws of Canada
• Privacy contact: privacy@bruchim.io
• Data protection officer: We have not appointed a separate DPO. Use the privacy contact above.

Roles:

• Visitor check-in data: the company you visit (our customer) decides what to collect and how long to keep it. We process that data to provide the service they subscribe to.
• Marketing site, workspace accounts, and our billing records: we decide the purposes described below.

Information we collect

Marketing site (bruchim.io)

• This site describes the product
• Locale is chosen in the URL (/en, /fr, …)
• We may use cookies and similar technologies as described under Cookies
• If you email us, we receive whatever you write in that message (name, address, content)
• Server and CDN providers may process ordinary request logs (IP address, user agent, path, time). See the subprocessors list

Product (app.bruchim.io) and iPad kiosk app

Workspace customers and their visitors may provide:

• Visitor name, email or phone (configurable), host, visitor type, expected and actual sign-in / sign-out times
• Optional photo (camera or device capture on the kiosk or iPad app, when the customer enables it)
• Optional acceptance of customer terms or an NDA (consent version and timestamp)
• Badge print metadata and host-notification action history
• Account identity for workspace users (name, email, authentication factors), handled by our authentication provider
• Device and pairing details needed to run a paired kiosk or the iPad app (for example, a pairing code or managed configuration values such as base URL and locale)

Also:

• Customers configure what their kiosk asks for
• We process that data to provide the service they subscribe to
• We do not require visitors to grant access to unrelated device data to complete a check-in, including contacts, precise location, microphone, or tracking across other companies’ apps

Billing and support

When a workspace owner subscribes:

• Our payment processor handles payment details
• We receive owner contact and subscription metadata
• We do not put visitor records on invoices

Support messages you send us may include whatever you choose to include.

How we use information

• To operate and secure the marketing site, the product, and the iPad kiosk app
• To create and bill workspaces
• To send transactional email that a customer configures (for example, host notifications when a guest arrives)
• To investigate abuse, outages, and support requests
• To meet legal obligations when we have them
• To improve reliability and fix bugs (including limited error monitoring)

We do not:

• Sell personal information
• Use personal information from the kiosk, iPad app, or product for third-party advertising
• Track users across other companies’ apps or websites for advertising
• Sell marketing email lists
• Use our email pipeline to send promotional campaigns from Bruchim unless we first update this policy and obtain the consent those messages require

App Store and device permissions

• The Bruchim iPad kiosk app is meant for customer locations
• When a feature needs a device permission (for example, camera for an optional visitor photo), the app should ask only for what that feature needs
• You can refuse a permission and still use other check-in steps the customer has enabled, except where that permission is required for the optional feature itself
• If you create a Bruchim workspace account, you can delete that account and its workspace data in the admin panel, as described under Your rights and Retention
• Visitors do not create Bruchim accounts; they interact with the customer’s kiosk flow

Retention

• Visitor records: workspace customers choose how long visitor personal data is kept. The product default is to keep records until the customer changes that setting or deletes the workspace
• Retention limits: when a limit is set, the product anonymizes visit personal data after the visit ends (operational facts such as timestamps and location may remain for analytics)
• Hosting logs: request logs at hosting providers follow those providers’ retention
• Billing: billing records follow tax and accounting needs
• Support email: kept as long as needed to resolve the request and for a reasonable follow-up period

Sharing

We share information with:

• The processors listed on our subprocessors page
• The customer who invited a visitor or who owns the workspace
• Professional advisers or authorities when the law requires it, or to protect rights and safety

Also:

• We require subprocessors who handle personal information for us to protect it with contractual and technical measures appropriate to the service they provide
• Those providers apply their own privacy terms to the processing they perform for us
• We do not share personal information with third-party advertising networks

Email and messaging

• Product email is sent through our email delivery providers
• It is intended to be transactional: messages about a visit, host alert, account, or similar action the recipient is part of
• Current email providers are listed on our subprocessors page

Customers who configure notifications:

• Are responsible for the content of those messages
• Are responsible for collecting any consent their own laws require when they send messages to hosts or visitors
• May not use Bruchim or our email pipeline to send spam, purchased or harvested lists, or deceptive content

If we ever send non-transactional (commercial) email ourselves, each such message will:

1. Identify Bruchim
2. Include this privacy policy link
3. Include our mailing address above
4. Include a working unsubscribe method

We will only send that commercial email with affirmative consent where required (including Canada’s CASL and our email providers’ acceptable-use rules).

International transfers

• We and our service providers may process personal information in Canada, the United States, and other countries
• Information may leave the country where you or the customer are located
• We do not currently guarantee that personal information stays in a specific country or region

Your rights

Depending on where you live (including Quebec, Canada, and the EEA/UK), you may have rights to:

• Access personal information
• Correct personal information
• Delete personal information
• Export personal information
• Withdraw consent

How to exercise them:

• Visitors: start with the company you visited. They control the visitor record. We will help that customer with a verified request.

• Workspace owners and users: use the admin panel to access, correct, or delete account data, or to delete a workspace. Product tools for a data-subject request on a single visit also exist in the app. If those tools do not cover your request, contact privacy@bruchim.io.

• Account deletion:

  1. Delete your account and workspace in the admin panel
  2. Use privacy@bruchim.io only if self-serve deletion is unavailable or fails (email from the address on the account, or verify ownership another way we request)
  3. We will delete or anonymize account and workspace personal data that we control, except records we must keep for law, security, or billing disputes
  4. We aim to complete verified email deletion requests within 30 days, or sooner when a shorter period applies

You may also contact us by mail at the address above.

Cookies

We may use cookies and similar technologies on the marketing site, the product, and related services to:

• Run the product (for example, authentication and session)
• Measure performance and reliability
• Understand how people use Bruchim (our own analytics)
• Support our own marketing (for example, measuring campaigns or remembering preferences)

Also:

• The iPad app may store local pairing and preferences on the device
• Where the law requires consent for certain cookies, we will ask for it
• You can control cookies in your browser settings; blocking some cookies may limit how the site or product works
• Locale on this marketing site is chosen in the URL (/en, /fr, …)

Children

• Bruchim is a business visitor-management service
• It is not directed at children
• We do not knowingly collect personal information from children for our own marketing

Changes

• We will update the date above when this policy changes
• For material changes, we will email workspace owners

Contact

• privacy@bruchim.io
• Bruchim
• 10636 Chem. de la Côte-de-Liesse
• Lachine, QC H8T 1A5
• Canada
• +1 514 636-8800