Privacy Policy
We respect your privacy and are committed to protecting your personal data. Learn how we collect, use, and safeguard your information.
Last updated: 17 September 2026Last updated: 30 September 2026
Welcome to Bragly.io. We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how Bragly ("Bragly", "we", "us", or "our") collects, uses, shares, and safeguards information when you use our website and services.
1. Who We Are
Bragly is operated by:
- Company: Digital Gimmick LLC
- Registered address: 30 N Gould St, Sheridan, WY 82801, United States
- Email: [email protected]
Digital Gimmick LLC is the controller of the personal data described in this policy. Where you use Bragly to import, store, and display reviews about your own business, you are the controller of that review content and we act as your processor.
2. The Data We Collect
| Category | Typical examples | Source |
|---|---|---|
| Account data | Name, email, password, company, role | You |
| Billing data | Payment method, billing address, applicable tax ID, transaction history | You / Payment provider |
| Imported review content | Reviews from connected platforms (e.g., Google, Facebook, G2, Trustpilot), reviewer name, rating, review text | Review platform APIs |
| Usage data | Log files, IP address, browser type, device identifiers, pages viewed, clicks, referring URLs | Your browser / cookies |
| Free tool inputs | Anything you type or paste into the calculators and generators on our site, which can include review text, reviewer names and business names | You |
| Marketing preferences | Newsletter choices, opt-in records | You |
If you use the Bragly browser extension, see "The Bragly Browser Extension" below for what that extension handles and why.
Bragly is a business tool and is not directed to children. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided us personal data, contact us and we will delete it.
3. The Bragly Browser Extension
This section applies specifically to the Bragly browser extension for Google Chrome and other Chromium-based browsers. It sits alongside the rest of this policy and contains the disclosures required by the Chrome Web Store User Data Policy.
What the extension does
The extension lets you capture reviews and testimonials from the pages you are already visiting and send them straight to your Bragly workspace, instead of copying them across by hand. It acts only when you ask it to.
What the extension handles
| Category | What this means | When we receive it |
|---|---|---|
| Authentication data | The token that links the extension to your Bragly account, so it knows which workspace to save to | When you sign in through the extension |
| Review content you capture | The review text, reviewer name, rating and source URL of a review you choose to save | Only when you actively capture a review |
| Extension activity | Which extension actions you used, plus error and diagnostic information | While you use the extension |
| Local settings | Preferences and cached workspace details held in browser storage on your own device | While you use the extension |
| Avatar images | The profile picture shown on a review you capture, fetched from the review site's own image hosting, for example pbs.twimg.com, *.yelpcdn.com or lh3.googleusercontent.com | With the review you capture, if it has one. Your browser fetches the image directly from that site rather than through us or any third party |
The extension does not read, collect or transmit the content of a page unless you actively trigger a capture on that page. It does not record your browsing history, and it does not run in the background on pages where you have not used it.
What the extension never collects
The extension does not collect health information, financial or payment information, credentials for other websites such as passwords or PINs, personal communications such as email or chat messages, your physical location, or your general web browsing activity.
Permissions
The extension requests the narrowest set of browser permissions that allows it to do the above, and uses each one only for the purpose described here, never to observe you across the web:
storage, to keep you signed in and remember your settingsactiveTabandscripting, to read a selection or a post only on the page where you invoke the extensioncontextMenus, for the right-click "Save to Bragly" actionssidePanel, to dock the capture panel beside the page- Host permissions limited to bragly.io and app.bragly.io, the review sites the extension supports, and those sites' own image hosting for the avatar fetch described above
Every permission is also shown to you at install time and listed on our Chrome Web Store listing.
How we use extension data
We use it only to sign you in, save the reviews you capture into your workspace, remember your settings, and diagnose faults and keep the extension secure. Data from the extension is handled by the same infrastructure and sub-processors described under "How We Share Your Data", and is kept for the periods set out under "Retention".
Limited Use commitment
Our use of information received through the extension complies with the Chrome Web Store User Data Policy, including its Limited Use requirements. In particular:
- We use the data only to provide and improve the features described above.
- We do not sell it, and we do not transfer it to third parties except to the service providers listed under "How We Share Your Data", where the law requires it, or as part of a merger or acquisition on the terms described in that same section.
- We do not use it for advertising, ad targeting, ad personalisation or creditworthiness and lending purposes.
- We do not allow humans to read it, except with your explicit permission (for example when you send us a support request), where it is necessary for security or to comply with the law, or where the data has been aggregated and anonymised.
Remote code
The extension does not download or run remote code. All logic it executes is contained in the package published on the Chrome Web Store.
Your control, and deleting extension data
Signing out of the extension removes the stored token from your device. Uninstalling the extension deletes its local storage. Reviews you have already saved stay in your Bragly workspace until you delete them there or close your account. To have data associated with the extension deleted, email [email protected]; the rights described under "Your Rights" apply to extension data in the same way as to the rest of your data.
4. Why We Use Your Data (Legal Bases)
| Purpose | Legal basis |
|---|---|
| Provide and maintain the Bragly platform | Performance of our contract with you |
| Import, display, and manage your reviews from connected platforms | Performance of our contract with you |
| Run the Bragly browser extension and save the reviews you capture with it | Performance of our contract with you |
| Improve features, troubleshoot, and analyse usage | Our legitimate interest in operating and improving the service |
| Send product updates and service notices | Performance of our contract; or our legitimate interest in informing existing customers |
| Send newsletters and promotional offers | Consent, and you can withdraw at any time |
| Create aggregated statistics and case studies | Our legitimate interest; data is anonymised where possible |
| Meet legal obligations (e.g., accounting, taxes) | Compliance with a legal obligation |
Where we rely on legitimate interests, we have assessed that our interests are not overridden by your rights and freedoms. Where we rely on consent, you may withdraw it at any time without affecting processing carried out beforehand.
5. How We Share Your Data
We only share personal data when necessary. These are the service providers we use and what each one handles:
| Provider | What it does for us | What it can see |
|---|---|---|
| Vercel | Hosting and serverless functions | Anything sent to or from the site, including IP addresses and request contents |
| Stripe | Payments and subscriptions | Billing details and transaction history |
| Brevo | Transactional email and our mailing list | Your name, email address and message contents |
| OpenRouter | Routes requests from our free AI review tools to the AI model | Whatever you type into those tools, which can include review text and reviewer names |
| OpenPanel | Product analytics | Usage events, pages viewed, approximate location from IP |
| Tag Manager, the Places API behind our business lookup tools, and the Gemini model behind our free AI review tools | Usage events, the business names you search for, and whatever you type into the AI tools | |
| Airtable | Content for our integration and platform pages | No customer personal data |
We also share personal data with:
- Integrations you connect, such as review platform APIs used to fetch the reviews you authorise.
- Professional advisers including lawyers, accountants and auditors.
- Authorities where required by law or court order.
- An acquirer in connection with a merger, acquisition or asset sale. We will notify you before data is transferred.
If you are a business customer and need a Data Processing Agreement, or a current list of sub-processors in a form you can attach to one, email us and we will provide it.
We do not sell your personal data, and we do not share it for cross-context behavioural advertising.
6. International Transfers
Bragly is operated from the United States by a company registered in Wyoming. Our team works remotely across several countries, and the providers listed above operate in several countries too, so your personal data is processed outside the country you are in.
One flow is worth calling out specifically. The AI features in our free tools send the text you enter to OpenRouter, which passes it to Google's Gemini model to generate a response. If you paste a real customer review into one of those tools, that text goes to OpenRouter and Google. If you would rather it did not, do not paste personal data into them; the tools are not required in order to use Bragly.
If you are in the European Economic Area, the United Kingdom or Switzerland, transfers of your personal data out of your region are made under an appropriate safeguard, such as the European Commission's Standard Contractual Clauses together with any additional measures required. You can request a copy of the safeguard we rely on by emailing us.
7. Cookies & Similar Technologies
We use cookies and local storage to:
- keep you logged in
- remember preferences
- measure site performance
- support marketing campaigns
On your first visit you will see a cookie banner. You can adjust or withdraw consent at any time via the banner or your browser settings. For details, see our separate Cookie Notice.
8. Retention
We keep personal data only as long as needed:
| Data type | Standard retention |
|---|---|
| Account data | While your account is active plus 3 years |
| Billing records | As required by applicable law and our payment processor's policies; typically 3 to 7 years |
| Imported reviews | Until you disconnect the source or delete them |
| Marketing consent logs | Until you unsubscribe plus 2 years |
| Usage logs | 12 months (diagnostics), then aggregated or deleted |
Back-ups may persist for up to 30 days.
9. Your Rights
Depending on where you live, you may have some or all of the following rights over your personal data:
- Access: obtain a copy of the personal data we hold about you and information about how we process it.
- Correction: have inaccurate or incomplete data corrected.
- Deletion: have personal data erased where it is no longer necessary for the purpose it was collected for.
- Portability: receive your data in a portable format, or have it sent to another provider.
- Objection and restriction: object to processing based on legitimate interests, or ask us to restrict processing.
- Withdraw consent: withdraw consent at any time; this does not affect the lawfulness of processing carried out before withdrawal.
- Non-discrimination: we will not deny you service or charge you a different price for exercising any of these rights.
To exercise any right, email [email protected]. We will respond within the timelines set by the law that applies to you. You may also authorise an agent to make a request on your behalf.
If you are in the EEA or UK and believe we have not handled your data properly, you may lodge a complaint with your local supervisory authority. If you are a California resident, you may also contact the California Privacy Protection Agency.
10. Marketing Communications
We love to share tips, product news, and special offers. You will receive marketing emails only if you have opted in, either when creating an account or by separately subscribing.
You can withdraw consent and opt out at any time by clicking "unsubscribe" in any email or by adjusting your account preferences. Service-related messages (e.g., invoices, security alerts) are operational in nature and are not subject to marketing opt-out.
11. Security
We apply technical and organisational measures such as encryption in transit, role-based access controls, regular penetration tests, and staff training. No system is ever 100 percent secure, so we maintain incident response procedures and will notify you and the relevant supervisory authorities of any personal data breach when required by law.
12. Third-Party Links
Our site may link to external pages (for example, Google). We do not control their privacy practices, so please review their policies.
13. Changes to This Policy
We may update this Privacy Policy to reflect new features, legal requirements, or other changes. If modifications are material, we will give at least 30 days' notice by email or in-app. The latest version is always available at bragly.io/privacy-policy.
14. Contact Us
Questions, comments, or concerns?
Digital Gimmick LLC 30 N Gould St, Sheridan, WY 82801, United States Email [email protected]
By using Bragly you acknowledge that you have read and understood this Privacy Policy and agree to its terms.
