1. Who we are
Brex Inc. ("Brex", "we", "our", or "us") is the data controller responsible for personal information collected through our website at brex.com and our financial services platform. Brex LLC is a wholly owned subsidiary of Capital One, N.A.
Our registered address is: One Lagoon Drive, Suite 400, San Francisco, CA 94401, United States.
For privacy-related inquiries, contact our Privacy Team at [email protected].
2. Information we collect
Information you provide directly
When you open a Brex account, apply for products, or contact us, we collect: full name, email address, phone number, business name, Employer Identification Number (EIN), business bank account information, funding and revenue details, mailing address, and government-issued identification where required by law.
Information we collect automatically
When you use our website or platform, we automatically collect: IP address, browser type and version, operating system, pages visited and time spent, referring URL, device identifiers, and transaction data including amounts, merchants, and timestamps.
Information from third parties
We receive information from financial institutions, credit bureaus, identity verification providers, and business data services to verify your identity, assess creditworthiness, and prevent fraud.
3. How we use your information
We use personal information to: provide and operate the Brex platform; process transactions and manage your account; verify your identity and business legitimacy; assess credit limits and underwriting decisions; send account notifications and product updates; comply with applicable laws and regulations including Bank Secrecy Act (BSA) and Anti-Money Laundering (AML) requirements; detect and prevent fraud and unauthorised activity; and improve our products and services through analytics.
4. How we share your information
Brex does not sell your personal information. We share data only as follows:
- Banking partners: Emigrant Bank, Member FDIC, as our issuing bank partner to provide card and banking services.
- Service providers: Companies that process payments, provide identity verification, host our infrastructure, or deliver analytics — bound by data processing agreements.
- Card networks: Mastercard International, for transaction processing and fraud prevention.
- Parent company: Capital One, N.A., our parent company, subject to their privacy policy.
- Legal requirements: When required by law, court order, or regulatory authority.
5. Cookies and tracking
We use cookies and similar tracking technologies to operate the site, remember your preferences, and analyse usage. See our Cookie Policy for full details and opt-out options.
6. Your rights
Depending on where you live, you may have the following rights regarding your personal information:
- Access: Request a copy of the personal information we hold about you.
- Correction: Request correction of inaccurate or incomplete information.
- Deletion: Request deletion of your personal information, subject to legal retention requirements.
- Portability: Receive your data in a structured, machine-readable format.
- Opt-out of marketing: Unsubscribe from promotional communications at any time.
To exercise your rights, email [email protected] or submit a request via your Brex account settings.
7. Data retention
We retain personal information for as long as your account is active and for up to seven years thereafter to comply with financial recordkeeping requirements under applicable law. Anonymised analytics data may be retained indefinitely.
8. International transfers
Brex operates globally. Your information may be transferred to and processed in countries other than your country of residence, including the United States, where data protection laws may differ. We implement appropriate safeguards including Standard Contractual Clauses for transfers from the European Economic Area.
9. Children's privacy
Our platform is not directed at individuals under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us at [email protected].
10. Changes to this policy
We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the Brex platform at least 30 days before the change takes effect. Your continued use of Brex after that date constitutes acceptance of the updated policy.
11. Contact us
For privacy questions or to exercise your rights: [email protected]
Brex Inc., One Lagoon Drive Suite 400, San Francisco, CA 94401