Privacy Policy
This policy explains how Brambly (“we”, “us”) collects and uses personal data when you use our website builder at brambly.app and the sites you publish with it. Brambly is the data controller and is based in the United Kingdom. If you have any questions, contact us at privacy@brambly.app.
Who this policy covers
It covers people who create a Brambly account (“users”) and people who contact a Brambly site through its contact form (“visitors”). Site owners are responsible for their own use of any personal data they collect from their visitors.
What we collect
- Account data: your email address, used to sign you in (via magic link) and to send you service messages.
- Site content: the text, settings, and images you add to your sites.
- Contact-form messages: when a visitor uses a site’s contact form, we relay their name, email and message to the site owner.
- Waitlist data: if you join our waitlist, your email and any referral information.
- Technical data: basic logs (e.g. IP address, timestamps) needed to operate the service securely and to rate-limit abuse. We use only essential cookies to keep you signed in — no advertising or tracking cookies.
Why we use it, and our legal basis
- To provide the service — sign you in, build and serve your sites, and relay contact messages (performance of a contract).
- To keep the platform secure and prevent abuse, and to improve the service (legitimate interests).
- To send you a waitlist confirmation you asked for (consent).
We do not sell your personal data.
Who we share it with
We use a small number of trusted providers (“processors”) to run Brambly, under data processing terms:
- Supabase — database, authentication and image storage.
- Vercel — hosting and content delivery.
- Resend — sending transactional emails (magic links, confirmations, contact-form relays).
Some of these providers may process data outside the UK/EEA; where they do, appropriate safeguards (such as Standard Contractual Clauses) are in place.
How long we keep it
We keep your account and site data for as long as your account is active. If you delete your account, we remove your data and take your sites offline. We may retain minimal logs for a short period for security and legal reasons.
Your rights
Under UK GDPR you have the right to access, correct, delete, restrict, or object to our use of your personal data, and to data portability. You can export your data or delete your account at any time from your account settings. To exercise any other right, email privacy@brambly.app. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk.
Changes
We may update this policy from time to time; we’ll change the “last updated” date above and, for significant changes, let you know by email.
← Back to Brambly