1. Data Collection

We collect information you provide directly to us, information we obtain automatically when you interact with the Service, and information from third-party providers that you choose to connect. We only collect the data we need to operate, secure, and improve the Service.

Account & Profile Information: Name, email address, password (hashed via our authentication provider), company name, and website or similar profile fields you choose to provide.
Payment Information: Billing details, limited payment information, and Stripe customer identifiers processed by our payments provider (Stripe). We do not store full credit card numbers on our own systems.
Usage & Log Data: Technical data about how you and your applications interact with the Service, such as API calls, deployment identifiers, model performance metrics, IP address, browser type, error logs, timestamps, and similar diagnostics.
Contact & Communications: Information you submit through forms such as "Contact Us" (for example, your name, email address, company, phone number, and the contents of your message) and any other communications with us.

2. How We Use Information

We use the information we collect to provide, operate, maintain, and improve the Service, to communicate with you, to ensure security and prevent abuse, and to comply with legal obligations. For example, we may use your information to:

Service Delivery

Authenticate you, process transactions and subscriptions, provision and manage your workspace, and send transactional emails (for example, password reset, billing, and service notifications).

Improvement

Monitor and analyze anonymized or aggregated trends, usage, and performance to debug issues, protect against abuse, and improve reliability and features.

3. Data Sharing

We do not sell your personal data. We share information only as necessary to operate the Service, in the following circumstances:

Service Providers: With trusted vendors that perform services on our behalf, such as infrastructure providers, authentication (Supabase), and payments (Stripe). These providers are contractually required to use the data only as needed to provide their services to us.
Legal & Compliance: If we believe disclosure is reasonably necessary to comply with applicable law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of Brokyl, our users, or the public.
Business Transfers: In connection with a merger, acquisition, financing, or sale of all or a portion of our business, subject to appropriate confidentiality protections and where allowed by law.

4. Security

We take reasonable and appropriate technical and organizational measures to help protect information about you from loss, theft, misuse, and unauthorized access, disclosure, alteration, and destruction. This includes the use of modern encryption for data in transit and at rest, access controls, and logging. However, no security measures are perfect, and we cannot guarantee absolute security of your information.

5. Your Rights

Depending on your location, you may have certain rights under local data protection laws (for example, in the EU/EEA, UK, and some U.S. states). Subject to applicable law, these may include the right to request access to, correction of, or deletion of your personal data; to object to or restrict certain processing; and to obtain a copy of your data in a portable format.

You can usually update basic account and profile information directly in your account settings, and you may delete your account using the in-product controls where available or by contacting us. We may need to retain certain information for legitimate business or legal purposes, including security, fraud prevention, and record-keeping.

If you wish to exercise your rights or have questions about how we handle your data, you can contact us using the details below. We will respond to requests in accordance with applicable law and may ask you to verify your identity before acting on a request.