Privacy Policy
Bravy Inc.
Effective Date: 21 June 2026
Last Updated: 21 June 2026
1. Introduction
This Privacy Policy explains how Bravy Inc. ("Bravy," "we," "us," or "our") collects, uses, shares, and protects personal data. Bravy Inc. is a Delaware corporation and is the entity responsible for the personal data described in this Policy. VeraHelps (verahelps.com) is one of our products and websites, and this Policy applies to it and to our other websites, applications, and services that link to this Policy (collectively, the "Services").
We provide an AI-powered service that helps businesses create and distribute marketing and informational content. This Policy applies to personal data of our customers, prospective customers, website visitors, and other individuals who interact with us. It should be read together with our Terms and Conditions of Service.
Because we serve customers in both the United States and Europe, this Policy is designed to meet the requirements of the EU and UK General Data Protection Regulation ("GDPR") and U.S. state privacy laws including the California Consumer Privacy Act as amended ("CCPA/CPRA"). Where specific regional rights apply, they are described in Sections 11 and 12.
2. Who We Are and Our Role
For personal data about our customers, website visitors, and prospects (for example, account and billing data), Bravy acts as a "controller" (GDPR) / "business" (CCPA), meaning we decide why and how that data is processed.
When we process personal data contained in content you provide or that we publish on your behalf through the Services (for example, personal data within your interview responses, brand materials, or audience interactions on your Connected Accounts), we generally act as a "processor" / "service provider" acting on your instructions, and you are the controller. In that case, our Terms and any applicable Data Processing Addendum govern that processing.
Contact details for privacy questions are in Section 14.
3. Personal Data We Collect
We collect the following categories of personal data:
3.1 Information you provide to us
- Account and profile data: name, email address, phone number, business website, and business social media accounts/handles.
- Billing data: billing details and transaction records. Payment is processed by our payment processor, Stripe, which collects and processes your payment credentials directly; we do not store full card numbers on our systems.
- Customer Content: business information, interview responses (including audio or video recordings where you provide them), brand assets, and instructions you submit to the Services, which may contain personal data.
- Communications: messages, support requests, and feedback you send us.
3.2 Information we collect automatically
- Usage and device data: IP address, approximate (general) location derived from IP address, browser type, device identifiers, pages viewed, actions taken, and timestamps, collected through cookies and similar technologies (see Section 8).
- Analytics data collected via common analytics tools, including Google Analytics and Amplitude.
3.3 Information from third parties
- Connected Accounts: when you authorize us to access your social media or other platform accounts, we receive data from those platforms (e.g., profile information, content, and engagement metrics) as needed to provide the Services.
- Advertising and lead sources: if you reach us through an advertisement or sign-up form, we may receive limited data from advertising and social platforms on which we run campaigns, including Meta (Facebook and Instagram), Google, LinkedIn, TikTok, X, and YouTube.
4. How We Use Personal Data
We use personal data to:
- Provide, operate, and maintain the Services, including generating and publishing content on your behalf;
- Create and manage your account, process payments, and administer your subscription;
- Communicate with you about the Services, including service notices, support, and security alerts;
- Improve and develop our Services, including analytics and, on a de-identified and aggregated basis, our AI systems (consistent with our Terms);
- Send marketing communications about our products, where permitted (you can opt out at any time);
- Detect, prevent, and address fraud, abuse, security incidents, and technical issues; and
- Comply with legal obligations and enforce our agreements.
5. Legal Bases for Processing (EU/UK)
If you are in the EEA or UK, we rely on the following legal bases under the GDPR:
- Performance of a contract — to provide the Services you have requested and manage your account;
- Legitimate interests — to operate, secure, and improve our Services and for direct marketing to business contacts, balanced against your rights;
- Consent — for certain cookies, marketing where required, and any processing of special-category data you choose to provide; you may withdraw consent at any time; and
- Legal obligation — to comply with applicable laws, such as tax and accounting requirements.
6. How We Share Personal Data
We do not sell personal data for money. We share personal data only as described below:
- Service providers / sub-processors: vendors who help us run the Services under contract — for example, cloud hosting, payment processing, AI model providers, email, and analytics.
- Third-Party Platforms: where you instruct us to publish content or connect accounts, we share data with those platforms (e.g., LinkedIn, Instagram, TikTok, YouTube, Facebook, X, Google) as needed to deliver the Services.
- Legal and safety: when required by law, legal process, or to protect the rights, safety, or property of Bravy, our users, or others.
- Business transfers: in connection with a merger, acquisition, financing, or sale of assets, subject to this Policy.
Our key service providers and sub-processors currently include: Stripe (payment processing); Google (Google Analytics) and Amplitude (product analytics); our cloud hosting and infrastructure providers; third-party AI model providers used to generate content; our email and customer-communication tools; and the advertising and social platforms on which we run campaigns (Meta, Google, LinkedIn, TikTok, X, and YouTube). A current list of our key sub-processors is available on request by emailing support@bravy.com.
7. AI Processing and Content
The Services use artificial intelligence, including models provided by third-party AI providers, to generate content from the information you provide. Personal data contained in your inputs may be processed by these providers solely to perform the Service. We do not use identifiable Customer Content to train third-party AI models without your authorization, consistent with our Terms. AI-generated output may be inaccurate; you are responsible for reviewing content as described in our Terms.
8. Cookies and Similar Technologies
We use cookies and similar technologies to operate the website, remember your preferences, measure usage, and, where applicable, support advertising. We use both strictly necessary cookies (required for the site to function) and optional analytics and advertising cookies. You can control cookies through your browser settings and, where we provide one, through our cookie banner or preferences tool. Where required by law, we obtain consent before placing non-essential cookies.
9. Data Retention
We retain personal data only for as long as necessary for the purposes described in this Policy, including to provide the Services, comply with legal obligations, resolve disputes, and enforce our agreements. Account data and Customer Content are generally retained for the duration of your subscription and deleted or de-identified within 90 days after termination of your account, except where we are required or permitted by law to retain certain records (such as billing and tax records) for longer.
10. Security
We use reasonable technical and organizational measures designed to protect personal data, such as encryption in transit, access controls, and use of reputable infrastructure providers. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential.
11. Your Rights (EU/UK — GDPR)
If you are in the EEA or UK, you have the right to:
- Access the personal data we hold about you and request a copy;
- Rectify inaccurate or incomplete data;
- Erase your data in certain circumstances;
- Restrict or object to certain processing, including direct marketing;
- Data portability — receive your data in a portable format; and
- Withdraw consent at any time, without affecting prior processing.
To exercise these rights, contact us using the details in Section 14. You also have the right to lodge a complaint with your local data-protection supervisory authority.
12. Your Rights (United States — California and Other States)
Depending on your U.S. state of residence (for example, California under the CCPA/CPRA), you may have the right to: know and access the categories and specific pieces of personal data we collect; delete personal data; correct inaccurate data; and opt out of the "sale" or "sharing" of personal data and of certain targeted advertising. We do not sell your personal data, and we do not share your personal data for cross-context behavioral advertising, as those terms are defined under applicable U.S. state privacy laws.
We will not discriminate against you for exercising these rights. To make a request, contact us using the details in Section 14. We will verify your request as required by law and respond within applicable timeframes. You may use an authorized agent where permitted.
13. International Data Transfers
We are based in the United States, and we and our service providers may process personal data in the United States and other countries that may have different data-protection laws than your own. Where we transfer personal data from the EEA or UK to a country without an adequacy decision, we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses (and the UK Addendum), to protect your data.
14. How to Contact Us
For privacy questions or to exercise your rights, contact us at support@bravy.com, or by mail at Bravy Inc., 200 Continental Drive, Suite 401, Newark, DE 19713, USA.
15. Changes to This Policy
We may update this Policy from time to time. If we make material changes, we will update the effective date above and, where appropriate, notify you by email or through the Services. Your continued use of the Services after the changes take effect constitutes acceptance of the updated Policy.