Privacy Policy

B.R.A.D. Software (“B.R.A.D.,” “we,” “us,” or “our”) operates brad.software and the associated client portal (collectively, the “Services”), through which we sell self-hosted business software licenses, managed cloud hosting, domain registration, and BRAD Cloud communication services (BRAD Mail, BRAD Text, BRAD Stream, and BRAD Meet). This Privacy Policy explains what information we collect, how we use it, and the choices you have.

By using the Services, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Services.

1. Information We Collect

Account information. When you register, we collect your name, email address, company name, billing address, and phone number.

Payment information. Payments are processed by Stripe, Inc. We do not store full credit card numbers on our servers. Stripe may share limited payment metadata with us (e.g. card brand, last four digits, transaction status) so we can maintain your billing history.

Service data. If you purchase a self-hosted software license, the licensed software periodically contacts our license verification API to confirm the license is active. This check-in includes the license key, the domain/IP/directory the software reports, the software version, and an optional system fingerprint used only for audit and anomaly detection — never for enforcement beyond the domain/IP/directory lock you configured.

Hosting & domain data. If you purchase managed hosting or register a domain through us, we collect the information required to provision and operate that service (e.g. domain contact details required by the registry, server resource usage). Registry rules require certain domain registration data to be collected and, for some top-level domains, published in a public WHOIS/RDDS lookup. Where a privacy or proxy service is offered for your domain's top-level domain and you enable it, it limits what is published publicly; it does not change what we or the registry hold on file.

BRAD Cloud data. If you use BRAD Cloud services, we process the content you send through them and the information needed to deliver and bill it: email and SMS/MMS message content and the recipient email addresses and phone numbers you send to; the phone numbers you rent and messages received on them; business and brand registration details you submit for SMS compliance (such as legal business name, EIN, business type, industry, website, business address, and an authorized representative's name, title, email, and phone number, along with use-case and sample-message details); the live streams, recordings, and meeting media you create; and delivery, usage, and Cloud wallet records (including top-ups and charges).

Usage & log data. We automatically collect standard technical data such as IP address, browser type, pages visited, and timestamps, for security, fraud prevention, and diagnostics.

2. How We Use Information

• To provide, operate, and maintain the Services.
• To process orders, issue invoices, and collect payment via Stripe.
• To verify and support software licenses, hosting instances, and registered domains.
• To send transactional communications (billing notices, service alerts, support replies) and, where permitted, product updates.
• To detect, prevent, and investigate fraud, abuse, and security incidents.
• To comply with legal obligations.

3. Cookies & Session Data

We use an essential httpOnly session cookie to keep you signed in to the client portal. Your browser can be configured to refuse cookies, though doing so will prevent you from staying signed in.

We also use OpenReplay, a session replay and analytics tool, on our website and client portal. It records how you interact with our pages — such as pages visited, navigation, clicks, scrolling, and the text you enter into form fields (password fields are not recorded) — so we can diagnose problems, provide support, and improve the Services. When you are signed in, the recorded session is associated with your account, including your account ID, email address, and name. Our support staff may also view a session in real time to help you. OpenReplay stores a session identifier in your browser's storage to link the pages of a visit.

We do not use third-party advertising cookies.

4. How We Share Information

We share information only as necessary to run the Services:

• Stripe — payment processing.
• Domain registrars — to register, renew, or transfer domains on your behalf, subject to ICANN and registry policy requirements.
• Infrastructure & hosting providers — to provision and operate managed hosting instances.
• SendGrid (Twilio Inc.) — to deliver our transactional email and the email you send through BRAD Mail.
• Twilio Inc. — SMS/MMS delivery, phone numbers, and the 10DLC and toll-free registration of the business and campaign details you submit for BRAD Text.
• Cloudflare, Inc. — live streaming, recording storage, and real-time video for BRAD Stream and BRAD Meet.
• OpenReplay — session replay and analytics, as described in Section 3.
• Law enforcement or regulators, where legally required.

We do not sell your personal information.

5. Data Retention

We retain account, billing, and license check-in records for as long as your account is active and thereafter for as long as needed to satisfy accounting, tax, and legal obligations, resolve disputes, and enforce our agreements.

BRAD Cloud message, delivery, and usage logs, and the stream and meeting recordings you create, are retained as needed to provide the service, bill usage, and meet carrier and legal requirements.

6. Your Rights & Choices

Depending on your location, you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing. You can review and update most account details directly from your dashboard, or contact us using the details below to make a request.

7. Data Security

We use industry-standard safeguards — including encrypted transport (TLS), hashed passwords, and access controls — to protect your information. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

8. Children's Privacy

The Services are intended for businesses and individuals aged 18 or older. We do not knowingly collect personal information from children.

9. International Transfers

We and the service providers we use may process information in countries other than your own. Where required, we rely on appropriate safeguards for such transfers.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the “Last updated” date above. Continued use of the Services after an update constitutes acceptance of the revised policy.

11. Contact Us

Questions about this Privacy Policy or your data can be sent to support@brad.software or via our contact page.