Brex Privacy Policy

This document explains what personal information Brex collects about you, who it shares that information with, and how long it keeps it. Brex collects sensitive data like your Social Security number, government ID, and bank account details as required conditions of using its services, and may share your information with affiliated companies including Capital One N.A. or with a new owner if Brex is acquired. If you use Brex through your employer's account, your personal information is governed by Brex's agreement with that business, not by your own.

Brex's Privacy Policy establishes the scope and conditions under which Brex collects, uses, retains, and shares personal information across its financial services platform. Brex collects highly sensitive data—including government-issued identification documents, social security numbers, bank account credentials, and detailed transaction records—as a non-optional condition of service, driven in part by AML and KYC compliance obligations. Personal information may be shared with affiliates including Capital One N.A., transferred to third parties in the event of a corporate transaction, and disclosed to service providers under contractual use restrictions enforceable only by Brex. Brex retains personal information without a fixed time limit, for as long as any stated purpose or legal obligation applies, and reserves the right to update the Privacy Policy at any time. Authorized users operating through a business customer's Brex Account are governed by Brex's agreement with that business, not by a direct individual relationship with Brex.

For an individual user, this document means that a broad range of sensitive personal and financial information—including identity documents, bank account numbers and balances, and detailed transaction data—is collected automatically and cannot be avoided if you use Brex's services. Your information may be shared with Brex affiliates such as Capital One N.A. and could be transferred to an acquiring company in a merger or sale. Automated systems may flag or process your activity for fraud and security purposes without human review. If you use Brex through a company account, your personal information is subject to Brex's agreement with that employer rather than any rights you hold directly. Brex may update the Privacy Policy at any time, altering these terms going forward.