How we handle your information

Who we are

Zephyr is the private client portal operated by Brookfield Solutions Group, LLC (“BSG,” “we,” “us”). This policy describes what information we collect through Zephyr, how we use it, and the choices you have. It applies only to the Zephyr application at zephyr.brookfieldsolutionsgroup.com.

Information we collect

We collect the minimum information needed to operate the portal:

• Account information — name, email address, and profile photo, provided directly or through a third-party sign-in provider you choose (e.g., Google).
• Authentication data — session tokens and sign-in events, managed by our authentication provider, Clerk.
• Content you upload — documents, messages, and other material you share with your BSG team through the portal.
• Usage and device data — IP address, browser type, pages viewed, and timestamps, collected automatically for security and reliability.

How we use your information

• To provide and secure the Zephyr portal and your account.
• To communicate with you about your engagements, invoices, and documents.
• To detect, investigate, and prevent abuse or unauthorized access.
• To comply with legal obligations.

We do not sell your information, and we do not use it for advertising.

Google user data

If you sign in with Google, we request only the basic profile scopes (openid, email, profile) in order to create and authenticate your Zephyr account. We do not access your Gmail, Drive, Calendar, or other Google services. Google profile data is used solely to identify your account and is never shared with third parties or used for advertising. You can revoke access at any time from your Google Account permissions page.

How we share information

We share information only with:

• Service providers who operate the portal on our behalf — Clerk (authentication), Vercel (hosting), and our database provider — bound by confidentiality and data-protection terms.
• Your BSG engagement team, who can see the information you share in the portal.
• Legal authorities, when required by law or to protect rights and safety.

Data retention

We retain your account and content while your engagement with BSG is active and for a reasonable period afterward to meet legal, accounting, and recordkeeping requirements. You may request deletion of your account at any time.

Security

We use industry-standard safeguards — encryption in transit, access controls, and audit logs — to protect your information. No online service is perfectly secure, but we work to keep Zephyr at a professional standard.

Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your information, and to object to certain processing. Contact us at the address below to exercise these rights.

Children

Zephyr is intended for business use by invited adults. It is not directed to children under 16, and we do not knowingly collect information from them.

Changes to this policy

We may update this policy from time to time. Material changes will be announced through the portal or by email. The “Effective” date above indicates the latest revision.

Contact

Questions about this policy? Email hello@brookfieldsolutionsgroup.com.