Privacy Policy
Brooks is a product of VANONI SAS, a company registered in Uruguay (“Brooks”, “we”, “us”). This policy explains what personal data we collect, where it comes from, what we do with it, who processes it for us, how long we keep it and what you can do about it. It covers the Brooks app and this website.
Questions? Write to privacy@usebrooks.com.
The short version
- We use what you give us (your listings, your face and your voice) and what is public about your business (your website and your reviews) to make videos and a content calendar for you.
- We post only what you approve, only to the accounts you connect.
- We ask each social network for the narrowest permissions that let us post. We don’t read your followers, messages, comments or analytics.
- We don’t sell personal data. We don’t use data from social networks for advertising.
- You can disconnect any account at any time, and you can ask us to delete everything we hold about you.
1. Who we are
VANONI SAS, the company that operates Brooks.
Address: Av Millan 4371, Montevideo - Uruguay
Phone: +598 95927670
Privacy contact: privacy@usebrooks.com
2. What we collect, and where it comes from
When you visit this website or request access
- The request form. Your name, email, phone (optional), brokerage, main market, how many listings you had in the last 12 months or how many agents are on your team, and your invite code, if you have one. We also record the page and button you used, the website that sent you, any campaign tags in the link, and your language. The request goes to our team’s workspace in Slack, where we review it.
- Your language choice, which is saved in your own browser and isn’t sent to us.
- Basic technical data. Like any website, our host (Cloudflare) processes your IP address and browser details to deliver pages and protect the site from abuse. Cloudflare also tells us which country a visit comes from, so we know whether to ask before using analytics cookies.
- Google Analytics. To see how people find and use this website (the pages they visit, the website or campaign that sent them, their device, browser, language and approximate location, and whether they open or send the request form), we use Google Analytics 4. It sets two first-party cookies,
_gaand_ga_T53249JTZK, which tell one visit from the next and last up to 2 years. Google says Google Analytics doesn’t log or store IP addresses. We keep Google signals and ad personalization off, so this data isn’t used for advertising.
Your choice. If you’re in the European Economic Area, the United Kingdom, Switzerland or Brazil, we ask first, and Google Analytics sets no cookies unless you accept. Everywhere else it runs when you visit. You can change your answer at any time with Cookie settings at the bottom of every page, or block Google Analytics on every site with Google’s opt-out add-on. Your answer is saved in your own browser.
This website doesn’t use advertising cookies.
When you use Brooks
- Signing in. You sign in with Google, which gives us your name, email address and profile picture. The app uses a cookie to keep you signed in.
- What you give us. Your listings (photos, descriptions, features and address), photos of your face to make your on-camera presenter, recordings of your voice to make your voice, your answers to our questions about your business, and your edits and approvals. We only make your presenter and your voice after you consent to it in Brooks. Your face and voice are covered in more detail in our Biometric Data Policy and Consent and Likeness pages.
- What we read from public sources. Your website (logo, colors, fonts, tagline, tone of voice, the areas you work in, contact details and links to your social profiles) and public reviews about you, such as Google reviews, so your videos match your brand and reflect what your clients value. We only use reviews that are already public. A video can quote a public review, with the reviewer’s name as it appears publicly, and only in a video you approve. If a reviewer asks us not to use their review, we stop using it in new videos.
- What we make for you. Scripts, videos, captions, a content calendar and a record of what was posted, where and when.
- Your connected social accounts. See section 3.
3. Social accounts you connect
You choose which accounts to connect, and you can disconnect them at any time. For each network, here is what you allow Brooks to do, what we read and keep, and what we do with it.
| Network | What you allow (permissions) | What we read and keep | What we do |
|---|---|---|---|
| Instagram (professional accounts, through Meta’s Instagram login) | instagram_basic, instagram_content_publish. Meta’s login also always includes instagram_manage_messages, which we never use. |
The Instagram accounts you choose (ID, username, name and profile picture), the ID of the connection Meta gives your business portfolio, and how long access lasts | Publish the Reels and Stories you approve, then read back the result and the post’s link |
| Facebook (Pages you manage) | pages_show_list, pages_read_engagement, pages_manage_posts |
The Pages you choose (ID, name and picture), the ID Facebook gives the person who connected them, and how long access lasts | Publish the Reels and Stories you approve on those Pages |
| TikTok | user.info.basic, user.info.profile, video.publish |
Account ID, username, display name and avatar; your posting settings, read each time you post (who can see your posts, and whether comments, Duets and Stitches are allowed) | Publish the videos you approve, with the visibility and settings you choose |
| YouTube (Shorts) | youtube.upload, youtube.readonly, openid, profile |
The channel you choose (ID, name, handle and picture), your Google account ID, and each video’s processing status | Upload the Shorts you approve and check that they finished processing |
| LinkedIn (your personal profile) | openid, profile, w_member_social |
Member ID, name and profile picture | Publish the video posts you approve on your profile |
What we don’t do. We don’t read your followers, messages, DMs, comments or analytics, or anyone else’s data, on any network. Meta’s Instagram login always includes permission to manage messages; Brooks never uses it. If we ever want to, we’ll update this policy first, and the network will ask for your permission.
Your login tokens. When you connect an account, the network gives Brooks a token that lets us post for you. We encrypt every token before we store it. We never see or keep your password for any network.
Disconnecting. When you disconnect an account in Brooks, we delete its token right away. We also ask the network to remove our access on its side: on TikTok, YouTube and LinkedIn, on Facebook when you disconnect your last Page, and on Instagram when you disconnect the last account you shared in that login. To be sure, you can also remove Brooks on the network itself. Our data deletion page has the steps for every network.
If you remove Brooks on the network. Meta (Instagram and Facebook) and TikTok tell us directly, and Google tells us through its account security notices. Whenever a network stops accepting our access, we stop posting to that account, delete its token and ask you to reconnect if you want to keep posting.
Each network’s own terms and privacy policy also apply to your account on it.
Google and YouTube
Brooks uses YouTube API Services to upload the Shorts you approve. The YouTube data we access, keep and use is listed in the table above. We don’t share it with anyone except the providers that host Brooks for us (section 6). Google’s own handling of your data is described in the Google Privacy Policy. You can remove Brooks’ access to your Google account at any time in your Google account’s security settings.
Brooks’ use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Instagram and Facebook
We handle data we receive from Instagram and Facebook under Meta’s Platform Terms. To delete it, follow our data deletion instructions.
TikTok
We read only the TikTok data listed in the table above. We post only what you explicitly approve, with the visibility and interaction settings you choose each time.
4. How we use your data
- To make your videos, captions and content calendar.
- To post what you approve, when you schedule it, to the accounts you choose.
- To keep your accounts connected and tell you when something needs your attention.
- To answer your questions and give you support.
- To keep Brooks secure and prevent abuse.
- To review requests for access and contact you about them.
- To meet our legal obligations.
We don’t sell personal data. We don’t use data we receive from social networks for advertising. We don’t use your face, your voice, your listings or data from social networks to train AI models.
5. AI and your content
Your videos are made with AI from your own face, voice and listings. We turn on each network’s AI label by default, and nothing is posted until you approve it. The rules we follow are in The Brooks Standard.
6. Who processes data for us
We use these providers to run Brooks. Each one processes data only to provide its service to us.
| Provider | What for |
|---|---|
| Cloudflare | Hosting, file storage (videos and photos), background jobs, and reading your website to extract your brand |
| Neon | Database (United States, East) |
| OpenRouter, and the AI model makers behind it, such as Anthropic | Writing scripts, captions and plans; reading listing photos |
| fal.ai | Video and music generation, and speech-to-text |
| Cartesia | Your voice: text-to-speech and your voice clone |
| HeyGen | Your on-camera presenter (avatar video) |
| Sign-in, the YouTube API, and Google Analytics on this website | |
| SerpApi | Reading public Google reviews about your business |
| Meta, TikTok and LinkedIn | Their APIs, to publish what you approve |
| Slack | Receiving and reviewing requests for access from this website |
Some of these providers store or process data outside Uruguay, mainly in the United States.
7. How long we keep it
- Website analytics: Google Analytics keeps visit data for 14 months, then deletes it.
- Requests for access: while we review your request and stay in touch with you about Brooks. We delete them sooner if you ask.
- Your account: for as long as it’s open.
- Connected-account tokens: until you disconnect the account, then deleted. We keep the history of what was posted, without the token.
- Your videos and other content: we keep them so Brooks can reuse them in your future posts. We delete them when you delete them in Brooks, when you ask us to, or when you close your account.
- Your face and voice: see the Biometric Data Policy.
- When you ask us to delete your data: we delete everything we hold about you, including your face and voice data at the providers that process it, within 30 days. See Data deletion.
- Backups: deleted data can stay in encrypted backups for up to 30 days before it’s overwritten.
8. Your rights
You can ask us to show you the personal data we hold about you, correct it, delete it, or stop using it for a purpose, and you can withdraw any consent you gave us. Write to privacy@usebrooks.com. We’ll reply within 30 days.
These rights come from Uruguay’s personal data protection law (Ley 18.331) and, where they apply to you, from the privacy laws of the place you live. In Uruguay, you can also complain to the data protection authority, the Unidad Reguladora y de Control de Datos Personales (URCDP).
If you live in California or another US state with a consumer privacy law, you can use all of these rights. We don’t sell your personal information, and we don’t share it for cross-context behavioral advertising.
9. Children
Brooks is for real estate professionals. It isn’t meant for anyone under 18, and we don’t knowingly collect data from children.
10. Security
We protect your data with encryption, narrow permissions and strict checks on every message the networks send us. The details are on our security page.
11. Changes to this policy
When we change this policy, we update it here and change the date at the top. If a change affects how we use data you’ve already given us, we’ll email you before it takes effect.
12. Contact
VANONI SAS
Av Millan 4371, Montevideo - Uruguay
privacy@usebrooks.com