Privacy Policy

1. Introduction

This Privacy Policy describes how GoBrise LLC, registered in Wyoming, United States (“GoBrise”, “we”, “us”), collects, uses, stores and protects information in connection with the GoBrise customer support platform and the gobrise.com website (together, the “Service”).

The Service lets businesses (“customers”) deploy an AI-supported chat widget on their own websites. In that context, our customers decide what data is collected from their visitors; this policy explains what we do with the data we handle on their behalf and for our own operations.

2. Information we collect

We collect and process the following categories of information:

• Account and company information — names, work email addresses, company details and billing information provided when a customer registers or manages an account.
• Team member information — profile and role details for agents and administrators a customer invites to its workspace.
• End-visitor conversation data — messages and related metadata exchanged through a customer's chat widget, processed on that customer's behalf.
• Knowledge base content — documents, pages and text that customers upload so the AI agent can answer from them.
• Usage and technical data — standard log and device information generated when the Service is used, such as IP addresses, browser type and timestamps.

3. How we use information

We use the information above to provide, operate and maintain the Service; to generate AI responses to visitor questions on a customer's behalf; to authenticate users and secure accounts; to communicate with customers about their account; and to meet legal obligations.

We may analyse usage in aggregate or anonymised form to understand and improve the Service. We do not use an individual customer's conversation data or knowledge base content to improve the product for other customers without that customer's consent.

We do not sell personal information.

4. Data storage and security

The Service runs on managed cloud infrastructure using a PostgreSQL database with tenant-level data isolation. Every conversation, message and knowledge base entry belongs to exactly one customer account, and access rules are enforced in the database itself — not only in the application layer — so a request that is not tied to a signed-in member of a company does not return that company's data.

These measures are described in more detail on our Security & Trust page, which also states plainly which formal certifications and enterprise controls are still on our roadmap rather than already in place.

5. Third-party AI processing

To generate AI responses, the content of a visitor message — together with relevant excerpts from the customer's own knowledge base — may be processed by third-party AI infrastructure providers. This processing happens solely to produce a response to that message and is subject to our AI providers' data processing terms.

Customer data is never shared between customer accounts, and the AI agent answers only from the knowledge base of the business whose widget received the question.

6. Data retention

We retain account and customer data for the duration of the account and for a reasonable period after cancellation, to allow for account recovery, export and the resolution of outstanding matters — or until a customer requests deletion, whichever comes first.

When a deletion request is completed, residual copies may persist in backups for a limited period before being overwritten.

7. Rights of EU and UK data subjects (GDPR)

If you are located in the European Economic Area or the United Kingdom, you have the right to request access to your personal data, correction of inaccurate data, deletion of your data, a portable copy of your data, and to object to or restrict certain processing.

Where we process data on behalf of a customer (for example, visitor conversations handled through that customer's widget), you should direct your request to that customer as the data controller; we will assist the customer in responding. For data we control directly, or for any privacy question, contact us through our Contact page and we will respond within a reasonable time.

8. United States privacy rights

Depending on your state of residence, you may have rights similar to those described above — including the right to know what personal information we hold about you, to request its deletion, and to not be discriminated against for exercising these rights. As an early-stage company we handle such requests individually; contact us through our Contact page to make one.

We do not sell or share personal information for cross-context behavioural advertising.

9. Cookies and analytics

We use standard website analytics on our marketing website to understand aggregate traffic and improve the site. The Service itself uses cookies and similar storage only where needed to operate — for example, to keep team members signed in and to maintain widget sessions.

We do not use advertising or cross-site tracking cookies. If our analytics practices change, this section will be updated.

10. Children's privacy

The Service is a business product and is not directed at children. We do not knowingly collect personal information from children under the age of 16 (or 13 where that lower threshold applies). If you believe a child has provided us personal information, contact us and we will delete it.

11. Changes to this policy

We may update this Privacy Policy as the Service evolves. The “last updated” date at the top of this page shows the current version, and material changes will be reflected here before they take effect.

12. Contact

Questions about this policy or about how your data is handled can be sent to us at any time through our Contact page. GoBrise LLC is governed by the laws of Wyoming, United States, for the purposes of this policy.