Privacy Policy

1. Introduction

BrewDock ("we", "us", "our") operates the BrewDock service. This policy explains how we collect, use, and protect your personal data when you use our phone-based email assistant.

2. Information We Collect

• -- Phone number, for authentication and calling
• -- Email account access via OAuth (Gmail or Outlook)
• -- Voice recordings, processed in real-time and not stored
• -- Usage data such as call duration and email counts
• -- Cookies and tracking data from PostHog, Google Analytics, TikTok, and Reddit pixels

3. How We Use Your Information

• -- To read your emails aloud during calls
• -- To draft and send replies on your behalf
• -- To improve our AI's understanding of your preferences
• -- To communicate service updates

We process your data on the following legal bases: reading your inbox, processing your voice, and using your phone number are necessary to provide the service (contractual necessity). Usage and analytics data are processed under our legitimate interest to improve the product. Cookies from third-party analytics and advertising providers require your consent, which you can manage via our cookie banner.

4. Email Data

We access your emails in real-time during your call. All email content is encrypted in transit and at rest. We do not store email content after your call ends. We do not sell or share email content with third parties.

5. Voice Data

Voice is processed in real-time for speech-to-text conversion. We do not store voice recordings. Transcriptions are used only to execute your commands and are discarded after the call.

6. Data Security

All data transmitted between your device and our servers is encrypted using TLS 1.3. OAuth tokens are stored encrypted at rest. We conduct regular security audits to ensure the integrity of our systems.

7. Third-Party Services

We use the following third-party service providers to operate BrewDock:

• -- Supabase -- database and account storage
• -- Unipile -- email account connectivity and OAuth token management
• -- OpenRouter -- AI language model provider for email processing
• -- Deepgram -- speech-to-text voice processing
• -- Twilio -- telephony and call handling
• -- PostHog, Google Analytics, TikTok, Reddit -- analytics and advertising

These providers are bound by their own privacy policies and data processing agreements.

8. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• -- Right to access -- request a copy of the personal data we hold about you
• -- Right to rectification -- request correction of inaccurate data
• -- Right to deletion -- request deletion of your account and all associated data
• -- Right to restrict processing -- request that we limit how we use your data
• -- Right to data portability -- request your data in a machine-readable format
• -- Right to object -- object to processing based on legitimate interest
• -- You can disconnect your email account at any time
• -- You may lodge a complaint with your local data protection authority

Contact us at privacy@brewdock.ai for any data requests. We will respond within 30 days.

9. Data Retention

• -- Account data (phone number, email connection, preferences) is retained while your account is active and deleted within 30 days of account deletion
• -- OAuth tokens are deleted immediately when you disconnect your email account
• -- Email content and voice data are processed in real-time and not stored after your call ends
• -- Usage and analytics data is anonymized after 12 months

10. Cookies and Tracking

We use cookies and similar tracking technologies on our website:

• -- PostHog -- product analytics to understand how users interact with our service
• -- Google Analytics -- website traffic and usage analysis
• -- TikTok Pixel -- advertising measurement and optimization
• -- Reddit Pixel -- advertising measurement and optimization

You can manage your cookie preferences through our cookie banner or your browser settings. Essential cookies required for the service to function cannot be disabled.

11. AI Usage

BrewDock uses AI to process your emails and voice commands in real-time. We do not use your data to train AI models. Your email content and voice data are sent to our AI providers solely for real-time processing and are not retained by them for model training purposes.

12. Children's Privacy

BrewDock is designed for professionals and is not intended for use by anyone under the age of 16. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child, we will delete it promptly.

13. Data Breach Notification

In the event of a data breach that affects your personal data, we will notify you via email without undue delay and no later than 72 hours after becoming aware of the breach. We will also notify the relevant data protection authorities as required by law.

14. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any material changes via email or through the service.

15. Contact

For privacy-related questions or concerns, contact us at privacy@brewdock.ai.