Privacy Policy

AI Data House ("we," "us," or "our") operates Braidscope (braidscope.com and braidscope.cloud). This Privacy Policy explains what information we collect, how we use it, and the choices you have regarding your data.

1. Information We Collect

Information you provide directly

• Account data: name, email address, agency name, and password when you register.
• Billing data: payment information (processed by Paddle; we never store raw card numbers).
• Waitlist data: name, email, and agency name when you join the pre-launch waitlist.
• Support communications: messages you send to hello@braidscope.com or via in-app chat.

Information from third-party integrations

When you connect a data source (such as Meta Ads, Google Ads, Shopify, HubSpot, or Google Analytics), we receive access tokens and data from those platforms as authorized by you. This data is used solely to populate your dashboards and reports. We do not use your clients' advertising or transactional data for any purpose other than delivering the Braidscope service to you.

Usage and technical data

• Log data: IP address, browser type, pages visited, timestamps.
• Device data: operating system, screen resolution.
• Cookies: session cookies required for authentication; no advertising cookies.

2. How We Use Your Information

• To provide, operate, and improve the Braidscope platform.
• To process payments and manage your subscription via Paddle.
• To send transactional emails (account confirmation, invoices, product updates).
• To respond to support requests.
• To analyze usage patterns in aggregate to improve the product (no individual profiling).
• To comply with legal obligations.

We do not use your data for advertising, sell it to third parties, or share it with data brokers.

3. Data Sharing

We share your data only with the sub-processors necessary to operate Braidscope:

• Paddle.com Market Ltd — payment processing and billing (Merchant of Record).
• Supabase Inc. — database hosting and authentication. Data is stored on servers in AWS us-east-1.
• Google LLC — Google Fonts (loaded client-side; no personally identifiable information is sent).

All sub-processors are contractually bound to protect your data and may not use it for their own purposes.

4. Data Security

We use industry-standard security measures including:

• TLS encryption for all data in transit.
• AES-256 encryption for credentials stored at rest.
• Role-based access controls limiting who on our team can access data.
• Fully isolated workspaces ensuring one client's data cannot be accessed by another.

No system is 100% secure. If we become aware of a data breach that affects your data, we will notify you within 72 hours.

5. Data Retention

We retain your account data for as long as your account is active. If you cancel, your data is deleted within 90 days. Backup copies may be retained for up to 30 additional days before permanent deletion. Aggregate, de-identified usage data may be retained indefinitely.

6. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access a copy of the personal data we hold about you.
• Correct inaccurate data.
• Request deletion of your data ("right to be forgotten").
• Export your data in a portable format.
• Withdraw consent where processing is based on consent.

To exercise any of these rights, email us at hello@braidscope.com. We will respond within 30 days.

7. Cookies

Braidscope uses only essential cookies required for authentication and session management. We do not use tracking, analytics, or advertising cookies. You can disable cookies in your browser settings, but this may prevent the app from functioning correctly.

8. Children's Privacy

Braidscope is not directed at children under 18 and we do not knowingly collect personal data from minors. If you believe we have inadvertently collected such information, please contact us immediately.

9. International Data Transfers

Our servers are located in the United States (via Supabase/AWS). By using Braidscope from outside the US, you consent to your data being transferred to and processed in the US. For users in the EU/EEA, we rely on Standard Contractual Clauses (SCCs) as the legal basis for such transfers.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or an in-app notice at least 14 days before they take effect. The "Last updated" date at the top of this page reflects the most recent revision.

11. Contact

Privacy questions or requests: hello@braidscope.com. We respond within 2 business days.