PRIVACY POLICY

Breevly
Sole Proprietorship
Registered Address: 31 rue des Perdrix, 67240 Kaltenhouse, France
Email: support@breevly.com

1. Introduction

This Privacy Policy explains how Breevly (“we”, “us”, or “our”) collects, uses, processes, and protects your personal information when you use our URL shortening and link management service.

We are committed to protecting your privacy and complying with applicable data protection laws, including the General Data Protection Regulation (GDPR).

Last updated: 15/10/2025

2. Data Controller

Breevly, registered at 31 rue des Perdrix, 67240 Kaltenhouse, France, is the data controller for the personal information collected through our service.

Contact: support@breevly.com

3. Information We Collect

3.1 Information You Provide Directly

Account Information:

• Name and email address
• Password (encrypted)
• Billing information (for paid plans)
• Profile information you choose to provide

Content Information:

• Original URLs you shorten
• Custom short link names
• Link descriptions and tags
• Workspace and folder organization

3.2 Information Collected Automatically

Usage Data:

• Click analytics (timestamps, referrer URLs, user agents)
• Geographic location data (country/city level from IP addresses)
• Device and browser information
• Service usage patterns and preferences
• Website analytics via Vercel Analytics

Technical Data:

• IP addresses
• Cookies and similar tracking technologies
• Log files and error reports
• Performance metrics

3.3 Information from Third Parties

Payment Processors:

• Transaction confirmations from Stripe
• Payment method information (last 4 digits of cards)

Social Media Integration (if applicable):

• Profile information from connected social accounts

4. How We Use Your Information

4.1 Service Provision

• Create and manage your account
• Process shortened links and provide analytics
• Enable link management features
• Provide customer support

4.2 Service Improvement

• Analyze usage patterns to improve our service
• Develop new features and functionality
• Monitor service performance and security
• Conduct research and analytics

4.3 Communication

• Send service-related notifications
• Respond to your inquiries
• Send billing and account information
• Share important service updates

4.4 Marketing (with consent)

• Send promotional materials about our services
• Inform you about new features or plans
• Conduct surveys and gather feedback

4.5 Legal and Security

• Prevent fraud and abuse
• Comply with legal obligations
• Protect our rights and interests
• Ensure service security

5. Legal Basis for Processing

We process your personal information based on:

• Contract Performance: To provide our services and fulfill our obligations
• Legitimate Interest: For service improvement, security, and business operations
• Consent: For marketing communications and optional features
• Legal Obligation: To comply with applicable laws and regulations

6. Data Sharing and Disclosure

6.1 We Do Not Sell Your Data

We do not sell, rent, or trade your personal information to third parties.

6.2 Service Providers

We may share information with trusted third parties who assist us in providing our service:

Infrastructure and Hosting:

• Vercel (hosting platform and analytics)

Database and Storage:

• Supabase (user data, links management, and authentication)
• Upstash (caching for link redirection)
• Tinybird (click analytics and statistics data)

Monitoring and Support:

• Sentry (error tracking and monitoring)

Payment Processing:

• Stripe (billing and subscription management)

These providers are contractually bound to protect your information and use it only for specified purposes.

6.3 Legal Requirements

We may disclose information when required by law or to:

• Comply with legal processes
• Respond to government requests
• Protect our rights and property
• Ensure user safety and security

6.4 Business Transfers

In case of merger, acquisition, or sale of assets, your information may be transferred as part of the business transaction.

7. Data Security and Backup

We implement appropriate technical and organizational measures to protect your information, including:

• Encryption of data in transit and at rest
• Access controls and authentication
• Regular security assessments
• Secure data centers and infrastructure
• [Backup policy and procedures - to be defined]

However, no method of transmission or storage is 100% secure. We cannot guarantee absolute security but continually work to protect your information.

8. Data Retention

We retain your personal information for as long as necessary to:

• Provide our services to you
• Comply with legal obligations
• Resolve disputes and enforce agreements
• Meet legitimate business needs

Specific Retention Periods:

• Account data: Until account deletion plus 30 days
• Click analytics: 2 years from collection (stored in Tinybird)
• Link data: Until account deletion or manual link deletion
• Cache data: 7 days (Upstash cache retention)
• Backup data: [Backup retention policy - to be defined]
• Error logs: 90 days (Sentry retention)
• Billing records: 7 years (legal requirement)

9. International Data Transfers

Your information may be processed in countries outside your residence, including countries that may not have the same data protection laws.

When transferring data internationally, we ensure appropriate safeguards through:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions by relevant authorities
• Other legally recognized transfer mechanisms

10. Your Rights and Choices

Under GDPR and other applicable laws, you have the following rights:

10.1 Access and Portability

• Request access to your personal information
• Receive a copy of your data in a portable format

10.2 Correction and Updates

• Correct inaccurate or incomplete information
• Update your account information directly

10.3 Deletion

• Request deletion of your personal information
• Delete your account through account settings

10.4 Restriction and Objection

• Restrict processing of your information
• Object to processing based on legitimate interest
• Opt out of marketing communications

10.5 Withdraw Consent

• Withdraw consent for processing based on consent
• Modify your preferences at any time

10.6 Complaint Rights

• File a complaint with your local data protection authority
• Contact us directly with privacy concerns

11. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Remember your preferences and settings
• Analyze service usage and performance
• Provide security features
• Enable certain functionality

Types of Cookies:

• Essential: Required for basic service functionality
• Analytics: Vercel Analytics for service usage understanding
• Functional: Remember your preferences
• Payment: Stripe cookies for secure payment processing

You can manage cookie preferences through your browser settings or our cookie preference center.

12. Children’s Privacy

Our service is not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16.

If we discover we have collected information from a child under 16, we will delete it promptly. If you believe we have collected such information, please contact us immediately.

13. Third-Party Links and Services

Our service may contain links to third-party websites or integrate with external services. This Privacy Policy does not apply to third-party practices.

We encourage you to review the privacy policies of any third-party services you use.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

• Changes in our practices
• Updates to applicable laws
• New features or services

We will notify you of significant changes by:

• Email notification
• Notice on our website
• In-app notifications

Continued use of our service after changes indicates acceptance of the updated policy.

15. Support and Contact

For technical support, service issues, or account-related questions: Support Email: support@breevly.com

For questions about this Privacy Policy or to exercise your rights: Privacy Email: support@breevly.com
Address: 31 rue des Perdrix, 67240 Kaltenhouse, France

For GDPR-related requests, please include:

• Your full name and email address
• Specific request or concern
• Any relevant account information

We will respond to your request within 30 days as required by applicable law.

This Privacy Policy is effective as of 15/10/2025 and was last updated on 15/10/2025.