Brysk Privacy Policy
Updated: 24th October 2025
What Information We Collect?
We collect the following categories of personal data:
a. User-Provided Information
Full Name
Email Address
Account login credentials (if you choose to create an account)
b. Automatically Collected Information
Location data based on device interaction or store entry/exit
Camera feeds collected inside the store to track movement and enable autonomous checkout
c. Sensitive Data
Credit card data collected to authenticate you at store entry and process payments
Note: We do not knowingly collect data from individuals under 18 years of age.
How We Use Your Information
We use the information for the following purposes:
Enable autonomous checkout functionality in retail stores
Authenticate users securely for entry and payment
Improve store layout and shopping experience through analytics
Provide account-based services (e.g., past visit logs, receipts)
Marketing and communication, where consent is provided
Legal compliance and fraud prevention
Legal Bases for Processing (As Required by Region)
We process your data under the following legal bases:
Consent: For account creation, marketing, or biometric data (as required)
Contractual necessity: To provide our services
Legitimate interest: For analytics, fraud prevention, service improvement
Legal obligations: To comply with regulatory or law enforcement requirements
How We Share Your Information
We may share your data with:
Retailers partnered with Brysk for transaction records and analytics
Cloud providers (e.g., Microsoft Azure, AWS) for data hosting and processing
Marketing service providers, only where legally permissible
Payment processors, for credit card authentication
Law enforcement or regulators, if legally required
We do not sell your personal data.
Data Retention
We retain your personal data only as long as necessary for:
Providing our services
Legal, tax, and contractual requirements
Security and fraud monitoring
Camera feeds and credit card data are stored securely and retained for the shortest necessary duration.
Your Rights
Depending on your jurisdiction, you have rights that may include:
United States (e.g., California CCPA/CPRA):
Right to know what personal data is collected
Right to request deletion
Right to opt out of the sale/sharing of personal data
Right to non-discrimination for exercising privacy rights
Canada (PIPEDA):
Right to access and correct personal information
Right to withdraw consent
Right to file a complaint with the Office of the Privacy Commissioner of Canada
Australia (APPs):
Right to know how your data is collected and used
Right to request access or correction
Right to complain to the OAIC if you believe your rights have been breached
Security Measures
We implement appropriate technical and organizational measures including:
Data encryption in transit and at rest
Role-based access controls
Secure authentication and logging
Regular security audits and risk assessments