Privacy Policy

Information We Collect

We collect information you provide directly to us when you create an account, set up your profile, or contact us for support. This includes your name, email address, username, profile photo, and any social links or discount codes you add.

We also automatically collect certain information when you visit your Brio page, including your IP address, browser type, and referring URL.

Instagram Integration

If you connect your Instagram account to Brio, we collect and store the following data from Instagram via Meta's API:

• Your Instagram username and account ID, to identify your account and display it in your settings.
• An access token issued by Instagram, to send and receive messages on your behalf. This token is encrypted at rest using AES-256-GCM encryption.
• Incoming direct messages and comments that match your automation keywords, to trigger your configured auto-replies.
• Basic profile information (name, username) of people who interact with your automations, to help you identify your audience.

We only access the Instagram data necessary to power your automations. We do not read or store the full contents of your inbox. We do not use your Instagram data for advertising, profiling, or any purpose other than delivering the automation features you configure.

You can disconnect your Instagram account at any time from Settings → Automations. When you disconnect, we immediately revoke the access token and stop processing any Instagram data. You can also request deletion of all stored Instagram data by contacting us.

How We Use Your Information

We use the information we collect to provide, maintain, and improve Brio, including to create and manage your account, display your public profile, and send you important updates about the service.

Information Sharing

We do not sell your personal information. We may share your information only in the following cases: with your consent, to comply with legal obligations, to protect our rights, or with service providers who help us operate Brio.

Data Security

We take reasonable measures to protect your personal information from unauthorized access, alteration, or destruction. Sensitive credentials such as Instagram access tokens are encrypted at rest using AES-256-GCM encryption. However, no method of transmission over the Internet is completely secure.

Cookies and Local Storage

Brio uses essential cookies to keep you signed in and remember your preferences (such as language and theme). We do not use third-party tracking cookies or advertising cookies.

Our product analytics tool (PostHog) uses browser localStorage — not cookies — to maintain an anonymous session identifier. Our web analytics tool (Plausible) is fully cookieless and does not store any data on your device.

Analytics

We use Plausible for privacy-friendly web traffic analytics and PostHog for product analytics. Both services are hosted in the European Union (Frankfurt, Germany) and are designed to be GDPR-compliant. No cookie consent banner is required as neither service uses tracking cookies.

Plausible does not collect any personal data or use cookies. PostHog collects anonymous usage data to help us understand how people use Brio and improve the product. If you are signed in, we associate your anonymous session with your account to provide a better experience.

Your Rights

You have the right to access, update, or delete your personal information at any time through your account settings. You can also request a copy of your data or ask us to erase it by contacting us.

Contact Us

If you have questions about this Privacy Policy, please contact us at support@brio.me.