Privacy Policy

1. Information we collect

Account information

When you create or use a Bracket account, we may collect information such as:

• Your name
• Email address
• Authentication information
• Account and product preferences
• Subscription and billing information

We do not store your payment-card details directly where payment is processed by a third-party payment provider.

Project information

When you use Bracket, we may process information associated with projects you create, including:

• Project names
• Scope
• Deliverables
• Requirements
• Decisions
• Deadlines
• Timeline and project history
• Generated or edited client responses
• Other project information you provide

Connected-source information

Bracket allows you to connect supported third-party services. For example, when you connect Gmail, Bracket may access the conversations you select or authorize for use with a project. Bracket uses connected-source information to provide the functionality you request, including understanding project conversations, creating compressed project-relevant summaries, maintaining project memory, detecting meaningful changes, answering questions about project history, and preparing communications. Bracket does not intentionally use unrelated conversations or content to build your project memory.

2. Gmail and Google user data

When you connect Gmail, Bracket uses Google OAuth to request permissions required to provide Gmail-related features. Depending on the features you use and permissions you grant, Bracket may access Gmail information necessary to:

• Let you identify and connect project conversations
• Read connected project conversations
• Understand and summarize project-relevant communication
• Extract project information
• Maintain project memory and history
• Detect changes affecting scope, deliverables, requirements, decisions, or deadlines
• Generate suggested replies
• Send an email on your behalf when you explicitly choose to send it

Bracket does not automatically send emails on your behalf. A communication is sent only after an action initiated or approved by you. We request Google API permissions based on the functionality Bracket needs and aim to use the minimum access reasonably necessary to provide those features. Google itself requires applications to request the narrowest scopes necessary for their functionality.

Google API Services User Data Policy

Bracket's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Google requires applications accessing Google user data to disclose how that information is accessed, used, stored, and shared.

• We do not use Google user data for advertising.
• We do not sell Google user data.
• We do not use Google user data to create advertising profiles.
• Access to Google user data by humans is limited to circumstances where it is necessary to provide or secure the service, comply with applicable law, address a user-requested support issue with appropriate permission, or where otherwise permitted under applicable Google policies.

3. How Bracket uses your information

We use information processed through Bracket to:

• Provide and operate Bracket
• Build and maintain project memory
• Compress project conversations into relevant information
• Identify scope, deliverables, requirements, decisions and deadlines
• Detect meaningful project changes
• Maintain project history
• Answer questions about your project
• Generate suggested client responses
• Send communications you explicitly instruct Bracket to send
• Authenticate users
• Provide customer support
• Process subscriptions and payments
• Maintain security and prevent abuse
• Diagnose and improve product performance
• Comply with applicable legal obligations

We do not sell your project content or connected-source content.

4. AI processing

Bracket uses artificial-intelligence services to provide features such as extraction, summarization, project-memory updates, change detection, question answering, and reply generation. Relevant portions of project information may therefore be processed by AI service providers acting on our behalf. Bracket does not intentionally send an entire connected account to an AI provider when only selected project information is required.

5. How we share information

We may share information with service providers when reasonably necessary to operate Bracket, including providers of:

• Cloud hosting and infrastructure
• Databases and storage
• Authentication
• AI processing
• Payment processing
• Email/integration infrastructure
• Error monitoring and security
• Product analytics

These providers may process information only as necessary to provide their services to Bracket, subject to their applicable contractual and legal obligations. We may also disclose information when required by applicable law, legal process, or to protect the security, rights, or integrity of Bracket, our users, or others. We do not sell your personal data or project content.

6. Your client's information

Projects may contain information about your clients, coworkers, contractors, or other people. You are responsible for ensuring that you have the necessary authority, permission, or other lawful basis to connect, upload, or process information through Bracket. You should not connect conversations or other sources that you are not authorized to use.

7. Data storage and security

We use reasonable technical and organizational measures designed to protect information processed by Bracket. Depending on the implementation, these measures may include encryption in transit, access controls, authentication protections, and restricted access to production systems. However, no internet service or storage system can guarantee absolute security.

8. Connected accounts and disconnecting access

You may disconnect supported integrations from Bracket. You may also revoke Bracket's access through the relevant third-party provider, such as your Google Account settings. Disconnecting an integration stops future access through that authorization. Where Bracket has already derived project information from a connected conversation—for example a recorded decision or deadline—disconnecting the source does not necessarily remove that project-memory information unless you also delete the relevant project or request deletion.

9. Data retention and deletion

We retain account and project information for as long as reasonably necessary to provide Bracket, maintain the account, comply with legal obligations, resolve disputes, and protect the service. You may request deletion of your Bracket account and associated personal data by contacting support@use-bracket.com. Where applicable, deletion may be subject to limited retention required for security, fraud prevention, billing, legal compliance, backups, or dispute resolution.

10. Payments

If you purchase a Bracket subscription or project plan, payment information may be processed by a third-party payment provider. Bracket may receive transaction information such as payment status, plan, transaction identifier, billing country, and amount, but does not need to store full payment-card information itself when payments are handled by the provider.

11. Cookies and analytics

Bracket may use cookies or similar technologies necessary for:

• Authentication
• Maintaining sessions
• Security
• Remembering product preferences
• Understanding product usage and performance

If additional analytics or tracking technologies are introduced, this Policy may be updated accordingly.

12. International processing

Some service providers used by Bracket may process information outside your country. Where required by applicable law, we will take reasonable steps to ensure that such processing is handled with appropriate protections.

13. Your rights and choices

Depending on applicable law, you may have rights concerning your personal data, including rights to request access, correction, deletion, or information about its processing. You may also:

• Disconnect connected services
• Revoke third-party OAuth permissions
• Delete projects where supported
• Request account deletion
• Contact us regarding privacy concerns

Requests can be sent to support@use-bracket.com. India's Digital Personal Data Protection Act provides a framework for notices, consent and individual rights, with substantive provisions being commenced in stages.

14. Children

Bracket is intended for professional and business use and is not designed for children. If we learn that we have collected personal data from a child in circumstances where applicable law requires parental consent or prohibits such processing, we will take appropriate steps to delete or otherwise address that information.

15. Changes to this Policy

We may update this Privacy Policy as Bracket evolves. If we make material changes, we may provide notice through Bracket, by email, or through another appropriate method. The "Last updated" date at the top indicates when this Policy was most recently revised.

16. Contact

For privacy questions, requests, or complaints: Bracket, operated by Saksham Shukla, India — support@use-bracket.com.