Terms of use

Version 2 of October 29, 2026

Last updated: October 29, 2026

1. Purpose and definitions

These terms form the contract between SKKIRB and the agency that accepts them. SKKIRB is a French société par actions simplifiée (simplified joint-stock company), 24 boulevard de la Reine, 78000 Versailles, France, registration number 944 173 657 (Versailles Trade and Companies Register, RCS). It publishes CreaBrikks.

These terms are for businesses: the agency accepts them for its professional activity.

Service: CreaBrikks, the online software that SKKIRB publishes and operates.
Agency: the business that accepts these terms. It is SKKIRB's customer.
Workspace: the part of the service reserved for the agency, at its own address.
Agency member: a person who works for the agency and to whom the agency opens its workspace.
Invited client: a client of the agency, or a person who works for that client, whom the agency invites into its workspace.
User: an agency member or an invited client.
Content: what users upload or produce in the workspace, including briefs, files, deliverables and annotations.
Deliverable: what the agency produces for a client and hands over through the service.
Brikks team: the SKKIRB staff who administer the service.

2. Acceptance and versions

The agency accepts these terms in writing, by email or by electronic signature. Each version carries a number and a date, and the agency accepts a specific version. This page presents version 2 of October 29, 2026.

SKKIRB announces each new version to the agency by email, 30 days before it takes effect. If the agency refuses it, the agency can terminate the contract before that date (article 10). If the agency does not terminate, the new version applies from that date.

3. Accounts and access

SKKIRB opens the agency's workspace and invites a first person into it with the Manager role. Users with the Manager role invite the other agency members, change their role and can remove them from the workspace. Any agency member can invite an invited client, attaching them to one of the agency's clients, and then remove them. An invited client sees only the projects of that client. The invitation link is valid for 7 days.

Each user has a personal account. Users sign in with a password, or with their Google or Microsoft account. They keep their credentials secret and do not lend their account.

The agency answers for its users' actions in the service and makes them comply with these terms. If the agency suspects unauthorized access, it notifies SKKIRB without delay at contact@brikks.co.

Users use the service for their professional activity and within the law. They upload no unlawful content. They do not try to enter a workspace that is not open to them, nor to disrupt the service.

4. Price

The service is free. SKKIRB charges the agency nothing without its written consent.

If SKKIRB ever offers a paid plan, it will announce it 30 days in advance, with new terms. The agency will be able to refuse them and terminate the contract at no cost.

5. AI

The service may offer artificial intelligence (AI) features. The AI produces first drafts. The agency reviews, edits and approves them before delivering them. The agency remains responsible for what it delivers to its clients.

A first draft may contain errors. SKKIRB guarantees neither its accuracy nor its originality.

SKKIRB trains no AI model on the agency's content. Any AI provider SKKIRB chooses must commit, by contract, not to train its models on its customers' data.

No AI provider processes any data today. Before using one, SKKIRB adds it to the list of processors, with the 30-day notice set out in the annex.

6. Ownership

The agency and its clients keep ownership of their content and their deliverables, including those produced with the AI, under the agreements between them. SKKIRB acquires no ownership right over them.

The agency grants SKKIRB the right to host, copy, transform and display its content, for the sole purpose of providing the service. This right lasts until the content is deleted (article 10).

SKKIRB keeps ownership of the service: its software, its name and its logo. The agency receives a personal, non-exclusive right to use the service for the duration of the contract.

7. Confidentiality

SKKIRB keeps workspace content confidential. It discloses it only to the users of the workspace, to the processors that the annex authorizes for the service, and to authorities that require it under the law.

The Brikks team can access workspace content, for operations and support, under a duty of confidentiality.

8. Availability

SKKIRB uses reasonable means to keep the service accessible, without guaranteeing continuous availability or a service level.

SKKIRB may interrupt the service to maintain or develop it. It announces planned maintenance in advance, when it can.

9. Liability

SKKIRB's obligations are obligations of means (best efforts). SKKIRB is liable only for direct damage that the agency proves and that results from SKKIRB's breach of these terms. It is not liable for indirect damage, such as loss of revenue, customers or reputation.

These limits do not apply to gross negligence or wilful misconduct by SKKIRB.

The agency answers for the content its users upload and for what it delivers to its clients.

10. Term, suspension and termination

The contract starts on the day the agency accepts these terms, for an indefinite period.

The agency can terminate the contract at any time, by email to contact@brikks.co. Termination takes effect on the date the agency states or, failing that, when SKKIRB receives its email. SKKIRB can terminate the contract by email, with 30 days' notice.

SKKIRB may suspend access for a user or a workspace, without notice, in the event of a serious breach of these terms or a threat to the security of the service. It informs the agency and restores access once the breach is remedied or the threat removed.

When the contract ends, SKKIRB closes access to the workspace. The agency has 30 days to request an export of its content at contact@brikks.co. SKKIRB then sends it a copy: the files as the service stores them, and the other data in a machine-readable format.

Within the 30 days following this export period, SKKIRB deletes the workspace content, along with the accounts of users who belong to no other workspace. Deleted data leaves the backups as Heroku renews them.

11. Personal data

SKKIRB is the controller for user accounts. The privacy policy describes this processing, SKKIRB's processors and everyone's rights.

For workspace content, the agency is the controller and SKKIRB acts as its processor. The data processing agreement in the annex forms part of these terms.

12. Governing law and disputes

French law governs these terms. In the event of a dispute, the agency and SKKIRB seek an amicable settlement before taking any legal action. Failing agreement, the courts of Versailles, France, have exclusive jurisdiction.

13. Contact

SKKIRB, 24 boulevard de la Reine, 78000 Versailles, France. Email: contact@brikks.co.

For the notices these terms provide for, SKKIRB writes to the email address the agency gave when accepting them. The agency can change this address by writing to contact@brikks.co.

Annex: data processing agreement

This agreement forms part of the terms of use. It applies Article 28 of Regulation (EU) 2016/679, the GDPR, to workspace content. The agency is the controller and SKKIRB the processor.

1. Subject matter

SKKIRB processes, on the agency's behalf, the personal data contained in the content of its workspace. This agreement sets each party's obligations for that processing.

2. Duration

The agreement lasts as long as the contract, then until the data are deleted (point 10).

3. Nature and purpose of the processing

SKKIRB hosts, stores, copies, transforms and displays the data, and passes them to the users of the workspace. This processing has a single purpose: to provide the service to the agency, so that agency members can work with its clients on its briefs, its deliverables and their annotations.

4. Data and data subjects

Data: the names, contact details and job titles that appear in the content; the text of briefs, deliverables and annotations; the images, documents and other uploaded files, with the personal data they contain.
Data subjects: the agency's clients and the people who work for them, agency members, and anyone the content mentions or shows.

The agency uploads to the service neither sensitive data (Article 9 of the GDPR) nor data relating to criminal convictions (Article 10 of the GDPR).

5. The agency's instructions

SKKIRB processes the data only on the agency's documented instructions. The agency gives its instructions through these terms, through its users' use of the service and through its written requests. If an instruction seems to SKKIRB to infringe the GDPR, SKKIRB informs the agency without delay.

The agency authorizes the transfers outside the European Union that the privacy policy describes, with the safeguards it states. SKKIRB makes no other transfer, unless Union or Member State law requires it to. SKKIRB then informs the agency before the processing, unless that law prohibits it.

6. Confidentiality

Within SKKIRB, only the Brikks team accesses the data, for operations and support. SKKIRB binds each person on the team to a duty of confidentiality.

For support, a member of the Brikks team can sign in as a user. They then see what the user sees and act in the user's name. SKKIRB keeps a record of each session: the team member, the account, the start and the end.

7. Security

SKKIRB protects the data with measures appropriate to the risk (Article 32 of the GDPR), including:

HTTPS on every page;
passwords stored in hashed form;
a limited number of sign-in attempts per email address and per IP address;
private files: each reading link carries a signature and expires within two hours;
a log of each time the Brikks team signs in as a user;
access to each workspace limited to its users and the Brikks team.

8. Sub-processors

The agency authorizes SKKIRB to engage the sub-processors listed in the privacy policy.

Before adding or replacing one, SKKIRB informs the agency by email, 30 days in advance. The agency can object during that period, in writing and giving its reasons. If SKKIRB maintains its choice, the agency can terminate the contract before the new sub-processor starts.

SKKIRB binds each sub-processor by a contract that imposes data protection obligations equivalent to those of this agreement. SKKIRB remains liable to the agency for their performance.

9. Data subject rights and data breaches

SKKIRB helps the agency, through appropriate measures, to respond to people who exercise their rights. If a person writes to SKKIRB about the content of a workspace, SKKIRB passes the request on to the agency.

SKKIRB informs the agency of any personal data breach without undue delay after becoming aware of it. It gives the agency the information it has, so that the agency can notify the breach to the competent supervisory authority (the CNIL in France) and inform the people concerned.

SKKIRB helps the agency, with the information it has, with the security of the processing, impact assessments and prior consultation of that authority (Articles 32 to 36 of the GDPR).

10. End of the contract

When the contract ends, SKKIRB gives the agency a copy of its data if the agency requests it within 30 days. Within the following 30 days, SKKIRB deletes the data and their copies (article 10 of the terms). Deleted data leaves the backups as Heroku renews them. SKKIRB keeps data only where Union or Member State law requires it to.

11. Audit

SKKIRB makes available to the agency the information needed to show that it complies with this agreement. It allows audits, including inspections, by the agency or by an auditor the agency appoints. The agency announces an audit in writing 30 days in advance, and the auditor commits to confidentiality. Each party bears its own costs.