Privacy Policy

1. Who we are

Breeze is a B2B SaaS tool that helps construction estimators and their teams read and query project specifications using AI. References to "Breeze," "we," "us," or "our" in this policy refer to the operator of breeze.expert.

Questions about this policy? Email us at privacy@breeze.expert.

2. What we collect

• Account data: company name, trade type, admin email address, and a bcrypt-hashed password. We never store passwords in plain text.
• Team member emails: email addresses of users your admin invites to your account.
• Project documents: PDFs, drawings, spec sheets, and other files you upload or email to Breeze for processing.
• Email content: the subject line and body text of emails sent to your Breeze inbound address, used to route and answer questions about your projects.
• AI-generated output:reports, Q&A answers, and document maps generated in response to your documents and questions.
• Usage data: token counts and project counts used internally for billing and cost management. We do not sell or share usage data.
• Billing data: managed entirely by Stripe. We store only a Stripe customer ID and subscription ID — no card numbers or bank details ever touch our servers.

3. How we use your data

• To process your project documents and answer your questions using AI.
• To send AI-generated reports and answers back to you by email.
• To manage your subscription and process billing through Stripe.
• To send transactional emails (invites, password resets, billing alerts) via Resend.
• To enforce per-company data isolation so no company can access another's data.

We do not use your documents or email content for advertising, resale, or any purpose other than delivering the Breeze service to you.

4. AI processing — Google Gemini

Your documents and questions are sent to Google Gemini via the paid Gemini API. Under Google's paid API terms, Google does not use your inputs or outputs to train its models. Documents are processed in Google's infrastructure and are subject to Google's Gemini API Terms of Service and Google's Privacy Policy.

Breeze uses Gemini's context caching feature, which temporarily stores processed document tokens in Google's infrastructure to reduce processing costs and improve response times. Cached content is subject to Google's standard data handling practices.

5. Third-party service providers

We use the following sub-processors to deliver the Breeze service:

6. Data isolation & security

• Every piece of data in Breeze is scoped to a company. No company can access another company's documents, projects, or reports.
• Passwords are hashed with bcrypt and are never stored in plain text.
• All data in transit is encrypted via TLS. All data at rest is encrypted by our infrastructure providers (Vercel, Neon).
• Access to the dashboard is protected by authenticated sessions. Admin-only routes are enforced server-side.

7. Data retention

We retain your data for as long as your account is active. If you cancel your subscription, your data remains accessible until the end of your billing period. After account termination, we retain your data for up to 30 days before deletion, unless you request immediate deletion (see §8).

8. Your rights & data deletion

As the admin of your Breeze account, you can request deletion of all your company's data — including all documents, projects, reports, and user accounts — from the Settings page in your dashboard. Deletion is permanent and irreversible.

You may also contact us at privacy@breeze.expert to request access to your data or to ask questions about what we hold.

9. Cookies

Breeze uses only strictly necessary cookies: a session cookie set by NextAuth to keep you signed in, and a device-recognition cookie used to spot sign-ins from new devices and alert you. Both are essential for the service to function securely, and neither tracks you across other websites. We do not use advertising cookies or third-party analytics cookies.

10. Changes to this policy

We may update this policy from time to time. We will notify account admins by email before any material changes take effect. The "Last updated" date at the top of this page reflects the most recent revision.

11. Contact

For privacy-related questions or requests, contact us at privacy@breeze.expert.