Privacy Policy
This policy explains what data Bragly collects, why we collect it, and how we use it. We've written it in plain English — no legal walls.
1. Data We Collect
Account information: When you sign up via Google, GitHub, or X (Twitter), we receive your name, email address, and profile picture from that provider. We store this to identify your account.
OAuth tokens: When you connect GitHub, X, or Stripe integrations, we store the access token for that connection. These tokens are used solely to fetch your data (stars, followers, revenue) on your behalf. You can revoke them at any time from your settings.
Usage data: We track events like card creations, exports, and blueprint selections. This helps us understand what's working and what to improve. No browsing history, no keystroke logging.
Card content: The cards you create — including the fields, numbers, and styles you set — are stored in our database so you can access them later. Published cards are also stored as images on Cloudflare R2.
Payment data: Payments are processed by DodoPayments. We do not store your card number or full payment details. We receive a confirmation of payment status and your subscription tier.
2. How We Use It
We use your data to:
- Operate your account and deliver the features you signed up for
- Sync data from connected platforms (GitHub, X, Stripe) on your behalf
- Process payments and manage your subscription
- Send transactional emails (e.g. payment receipts, account notifications) — no marketing emails unless you opt in
- Improve the product using aggregated, anonymized usage patterns
- Debug issues and maintain platform reliability
We do not sell your data. We do not use your content to train AI models.
3. Third-Party Services
Bragly uses the following third-party services to operate:
- DodoPayments — payment processing for subscriptions and one-time purchases. Their privacy policy governs how they handle payment data.
- Cloudflare R2 — object storage for published card images. Images you publish are stored here and served via a public CDN URL.
- OpenAI — used to generate AI-powered layout and design combinations. Only the relevant card parameters (not personal information) are sent to OpenAI's API.
- AWS SQS — used internally for background job queuing (e.g. scheduled syncs). No personal data is permanently stored in SQS.
- OAuth providers (Google, GitHub, X) — used for sign-in. We only receive the scopes you authorize.
4. Data Retention
We retain your account data and cards for as long as your account is active.
If you delete your account, we will delete your personal information and card data within 30 days. Published card images on Cloudflare R2 are archived for 30 days before permanent deletion.
Anonymized usage analytics may be retained indefinitely in aggregated form.
OAuth tokens for integrations are deleted immediately when you disconnect an integration or delete your account.
5. User Rights
Depending on where you live, you may have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Delete your account and associated data
- Export your card data
- Revoke integration access at any time from Settings → Integrations
To exercise any of these rights, email us at harshkanjiya001@gmail.com. We will respond within 14 days.
6. Cookies
Bragly uses session cookies to keep you signed in. We do not use third-party tracking cookies or advertising cookies. No cookie banner is shown because we don't run ad trackers.
7. Children
Bragly is not intended for users under 13 years of age. We do not knowingly collect data from children. If you believe a child has created an account, please contact us and we will delete it promptly.
8. Changes to This Policy
If we make material changes to this policy, we will update the “Last updated” date at the top and, where appropriate, notify you by email.
Continued use of Bragly after the effective date of any changes constitutes your acceptance of the updated policy.