Who is responsible
Kurzwelly Objectives & Management AB, Swedish reg. no. 559071-8606, is the data controller for brepo.
Contact: hey@brepo.ai
What data we process and why
The waitlist
When you sign up for early access we store your name, company, domain and email address. We use them to contact you about brepo and prepare your start. The legal basis is our legitimate interest in responding to your sign-up.
The brand checker
Text you paste into the brand checker on brepo.ai is analyzed in your browser. It is not sent to us and not stored.
Your account in the app
To give you access we process your work email and password. When you sign in we store a session with your IP address and browser so that you stay signed in. We send the emails your account needs, such as sign-in links and confirmations. The legal basis is the agreement with you or your company.
Your brand
What you add to brepo, such as cards, assets and earlier versions, is stored so that we can deliver the service. The change history shows who changed what. The content may include personal data, for example about people at your company. You decide what goes in.
When a brand is built
When we build a brand, an AI model reads the brand's public website and press mentions. The model receives the content of those pages and the brand's name and domain, no account details. Public pages may contain names of people. The pages are cached only during the analysis and deleted when it is done. The legal basis is the agreement with you.
Connections and usage
When an AI tool is connected to your brand we store which tool, who connected it and when. For every request we store who used the brand, which AI tool, which function and which settings, the brand version and which cards were returned. This is shown to your team under Usage and helps us protect the service. Drafts and texts the AI tool writes are not stored.
Technical data
IP address and similar technical data are processed when you visit brepo.ai and the app, to deliver the pages and protect them against abuse.
Cookies
brepo only uses cookies the service needs to work:
- Sign-in: a session cookie that keeps you signed in to the app.
- Language:
brepo_lang, which remembers Swedish or English for one year. - Connecting AI tools: a temporary cookie while you approve a connection.
No cookies for tracking or advertising, and no analytics tools. brepo.ai loads nothing from other websites.
What your AI tools receive
When you connect an AI tool, such as Claude, ChatGPT, Cursor or VS Code, the tool can read the brand content it asks for. How the provider of that tool handles the content is governed by your agreement with that provider. The connection is read only and cannot change anything in brepo. You can disconnect a tool at any time.
Subprocessors
We never sell personal data. We use two subprocessors that process data on our behalf:
- Cloudflare
- Hosting, database, files and sign-in emails. The database (accounts, brands, history and usage log) and the files are stored in the EU. Connections to AI tools, runtime logs and the traffic itself are handled in Cloudflare's global network.
- Anthropic
- The AI model that reads public web pages when a brand is built. Processing takes place in the USA.
Transfers outside the EU/EEA
Anthropic processes web content in the USA. Cloudflare is a US company, and parts of the traffic, connection details and runtime logs may be processed outside the EU. When data is transferred outside the EU/EEA, the transfer is protected by the mechanisms the GDPR requires, as set out in each provider's agreement, for example the EU standard contractual clauses or the EU-US Data Privacy Framework.
How long we keep data
- The waitlist: until you have been given access or ask us to remove you.
- Account details: for as long as the account exists. They are deleted on request.
- Usage log and change history: belong to the brand and are kept for as long as the brand exists at brepo.
- Sign-in sessions: 30 days.
- Sign-in links: 10 minutes.
- Connections to AI tools: expire after 90 days without use.
- Web pages being analyzed: deleted when the analysis is done.
Your rights
You have the right to know what data we hold about you and to have it corrected, deleted or restricted. You can object to processing based on legitimate interest and receive data you have provided in a machine readable format. Email hey@brepo.ai.
If you are unhappy with how we handle data, you can complain to the Swedish Authority for Privacy Protection (imy.se).
Changes
We update this policy when the service changes. The date at the top shows when it was last changed.