Privacy Policy
Your privacy is important to us. This Privacy Policy explains how we collect, use, protect, and share your personal information.
Last Updated: December 20251. INTRODUCTION
This Privacy Policy (“Policy”) describes how Brewongo.ai (“we,” “us,” or “our”) collects, uses, discloses, and protects your personal information when you use our AI-powered blog creation and publishing platform (the “Service”).
By using Brewongo.ai, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree, please do not use our Service.
2. INFORMATION WE COLLECT
2.1 Information You Provide Directly
Account Information:
- •Name and email address
- •Username and password (encrypted)
- •Profile information (optional)
- •Profile photo or avatar (optional)
Content Information:
- •Blog posts and articles you create
- •AI prompts and generation requests
- •Images and media you upload
- •Drafts and unpublished content
- •Messages sent through our contact forms
Payment Information:
- •Billing name and address
- •Payment method details (processed by Stripe)
- •Subscription and transaction history
Note: We do not store full credit card numbers. All payment processing is handled securely by Stripe.
2.2 Information Collected Automatically
Usage Information:
- •Pages viewed and features used
- •Time spent on the Service
- •AI tool usage patterns and frequency
- •Blog creation and publishing activity
- •Search queries and filters applied
- •Error logs and performance data
Technical Information:
- •IP address and geolocation (country/region)
- •Device type, operating system, and browser
- •Screen resolution and device identifiers
- •Referral source (how you found us)
- •Cookies and similar tracking technologies (see Section 7)
2.3 Information from Third Parties
We may receive information from:
- •Payment processors (Stripe) for transaction and fraud prevention
- •Analytics providers (Google Analytics) for usage insights
- •AI service providers (OpenAI) for content generation metrics
3. HOW WE USE YOUR INFORMATION
We use your personal information for the following purposes:
3.1 To Provide and Improve Our Service
- •Create and manage your account
- •Authenticate your identity and prevent unauthorized access
- •Enable AI-powered blog creation and content generation
- •Store and display your published blogs
- •Process your subscription and payments
- •Provide customer support and respond to inquiries
- •Improve features, functionality, and user experience
3.2 For Communication
- •Send account-related notifications (login alerts, password resets)
- •Provide subscription and billing updates
- •Notify you of Service changes, new features, and updates
- •Send promotional emails (with your consent; you can opt out)
- •Respond to support requests and feedback
3.3 For Analytics and Research
- •Analyze usage patterns and user behavior
- •Monitor Service performance and identify bugs
- •Conduct research to improve AI models (aggregated and anonymized)
- •Generate usage statistics and reports
3.4 For Security and Legal Compliance
- •Detect and prevent fraud, abuse, and security threats
- •Enforce our Terms of Service and policies
- •Comply with legal obligations and regulatory requirements
- •Respond to law enforcement requests and legal processes
- •Protect our rights, property, and safety, and that of our users
Important Note on AI Content:
We may use aggregated and anonymized data from AI interactions to improve our AI models and Service quality. We do not sell your individual content or prompts to third parties.
4. DATA STORAGE AND SECURITY
4.1 Where We Store Your Data
Your data is stored using the following services:
- •Supabase: User accounts, profiles, blog content, and application data
- •Stripe: Payment information and transaction records
- •Cloud Storage: Uploaded images and media files
- •Backups: Secure, encrypted backups of your data
Data servers are located in secure data centers with enterprise-grade security measures.
4.2 Security Measures
We implement industry-standard security practices:
- •Encryption: Data encrypted in transit (TLS/SSL) and at rest (AES-256)
- •Password Security: Passwords are hashed using industry-standard algorithms
- •Access Controls: Role-based access and authentication mechanisms
- •Regular Security Audits: Monitoring for vulnerabilities and threats
- •Rate Limiting: Protection against brute-force attacks
- •Secure Infrastructure: Hosted on secure, compliant cloud platforms
Important Disclaimer:
While we implement strong security measures, no system is 100% secure. We cannot guarantee absolute security of your data. You are responsible for maintaining the confidentiality of your account credentials.
4.3 Data Retention
We retain your personal information:
- •Active Accounts: As long as your account is active
- •Deleted Accounts: Up to 90 days after deletion (for recovery and legal compliance)
- •Billing Records: Up to 7 years for tax and accounting purposes
- •Analytics Data: Aggregated and anonymized data may be retained indefinitely
5. THIRD-PARTY SERVICES AND DATA SHARING
5.1 We Share Your Data With
Payment Processors
Stripe: Handles all payment processing, billing, and subscription management
Data Shared: Name, email, billing address, payment method
AI Service Providers
OpenAI: Powers our AI content generation features
Data Shared: Your prompts and generation requests (processed in accordance with OpenAI's privacy policy)
Analytics Providers
Google Analytics: Analyzes website usage and user behavior
Data Shared: IP address, device information, usage patterns (anonymized where possible)
Cloud Infrastructure
Supabase, Vercel: Host our application and databases
Data Shared: All application data necessary for Service operation
Email Service Providers
Email Services: Send transactional and promotional emails
Data Shared: Email address, name, communication preferences
5.2 We Do NOT Sell Your Personal Data
Commitment to Privacy:
We do not sell, rent, or trade your personal information to third parties for their marketing purposes. We only share data with service providers necessary to operate the Service, and they are contractually obligated to protect your data.
5.3 Legal Disclosure
We may disclose your information if required by law or to:
- •Comply with legal obligations, court orders, or government requests
- •Enforce our Terms of Service and protect our rights
- •Protect the safety and security of our users and the public
- •Investigate fraud, security breaches, or illegal activity
6. YOUR PRIVACY RIGHTS
6.1 General Rights
You have the right to:
- Access: Request a copy of your personal data
- Correct: Update or correct inaccurate information
- Delete: Request deletion of your account and data
- Export: Download your data in a portable format
- Object: Opt out of certain data processing activities
- Unsubscribe: Opt out of marketing communications
How to Exercise Your Rights:
To access, correct, or delete your data, log into your account settings or contact us at brewongoai@gmail.com with the subject line “Privacy Request”.
6.2 GDPR Rights (European Users)
If you are located in the European Economic Area (EEA), you have additional rights under GDPR:
- •Right to Withdraw Consent: Withdraw consent for data processing at any time
- •Right to Data Portability: Receive your data in a machine-readable format
- •Right to Restriction: Request limited processing of your data
- •Right to Lodge a Complaint: File a complaint with your local data protection authority
Legal Basis for Processing (GDPR):
- • Contractual Necessity: To provide the Service you subscribed to
- • Legitimate Interest: To improve and secure our Service
- • Consent: For marketing communications and non-essential cookies
- • Legal Obligation: To comply with laws and regulations
6.3 CCPA Rights (California Users)
If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA):
- •Know what personal information is collected
- •Know if your personal information is sold or disclosed (we do not sell)
- •Opt out of the sale of personal information (not applicable as we don't sell)
- •Request deletion of your personal information
- •Non-discrimination for exercising your rights
To exercise CCPA rights, email us at brewongoai@gmail.com with “CCPA Request” in the subject line.
6.4 Response Time
We will respond to privacy requests within 30 days (45 days for complex requests). We may require verification of your identity before processing requests.
8. INTERNATIONAL DATA TRANSFERS
Our Service is operated globally, and your data may be transferred to and processed in countries other than your country of residence, including the United States.
Data Protection Safeguards:
- • We use Standard Contractual Clauses (SCCs) for data transfers
- • Third-party service providers are selected based on their data protection standards
- • Data is encrypted during transfer and storage
- • We comply with applicable international data protection laws
9. CHILDREN'S PRIVACY
Age Requirement:
Our Service is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If you believe a child under 18 has provided us with personal information, please contact us immediately at brewongoai@gmail.com, and we will delete it.
10. AI CONTENT GENERATION AND PRIVACY
10.1 How We Use AI Data
When you use our AI tools:
- •Your prompts are sent to OpenAI for content generation
- •AI-generated content is stored in your account
- •We may analyze aggregated usage data to improve AI features
- •Your individual prompts and content are NOT used to train third-party AI models (per OpenAI API terms)
10.2 Published Blog Privacy
Important:
Content you publish on Brewongo.ai is publicly accessible. Do not include sensitive, confidential, or private information in your published blogs. Only unpublished drafts remain private to your account.
11. DATA BREACH NOTIFICATION
In the event of a data breach that affects your personal information, we will:
- •Notify affected users via email within 72 hours of discovery (where required by law)
- •Describe the nature of the breach and data affected
- •Provide steps you can take to protect yourself
- •Report to relevant regulatory authorities as required
12. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.
Notification of Changes:
- • Material changes will be posted on this page with an updated “Last Updated” date
- • We may notify you via email for significant changes
- • Continued use of the Service after changes constitutes acceptance
- • We encourage you to review this Policy periodically
13. CONTACT US
If you have questions, concerns, or requests regarding this Privacy Policy or your personal data:
Email: brewongoai@gmail.com
For Privacy Requests: Include “Privacy Request” in the subject line
For GDPR Requests: Include “GDPR Request” in the subject line
For CCPA Requests: Include “CCPA Request” in the subject line
For Data Deletion: Include “Delete My Data” in the subject line
We will respond to all legitimate requests within 30 days.
ACKNOWLEDGMENT
BY USING BREWONGO.AI, YOU ACKNOWLEDGE THAT YOU HAVE READ, UNDERSTOOD, AND AGREE TO THIS PRIVACY POLICY.
Your continued use of our Service constitutes acceptance of this Privacy Policy and any updates.
Questions about your privacy? Contact us at brewongoai@gmail.com