Privacy notice

Who we are

Brekio is operated by Mateo Orlandini, with domicile in Exaltación de la Cruz, Province of Buenos Aires, Argentina. In this document, "we", "us" and "Brekio" refer to the operator.

For any privacy-related inquiry, contact us at hello@brekio.com.ar.

What information we process

We process the following categories of information:

• Account information. Your email address, encrypted authentication data and the plan associated with your account. This is required to identify you and provide access to the service.
• Project information. The URLs of the websites you add as projects, and any names or labels you assign to them.
• Scan results. The reports generated when Brekio analyzes your projects, including findings, scores, timestamps and metadata related to each scan.
• Usage data. Counters that track your monthly scan usage and monitoring activity, used to enforce plan limits and prevent abuse.
• Technical information. Limited technical data such as IP addresses, browser type and timestamps, collected as part of normal service operation and security logging.

How we use your information

Your information is used to:

• Authenticate you and give you access to your account
• Run scans on the URLs you submit
• Save reports and enable regression tracking across scans
• Enforce plan limits and prevent abuse of the service
• Diagnose failures and improve service reliability
• Send transactional emails related to your account (such as password recovery)

Reports are private by default. We do not publish or share the content of your scans with third parties, except as required to operate the service.

Website scanning

When you submit a URL, Brekio requests that public website using automated tools. The website operator may observe these requests in their access logs.

You must only submit URLs you are authorized to test. Do not submit private URLs, URLs behind authentication, URLs containing credentials in query parameters, or any URL you do not have permission to analyze.

We are not responsible for scans initiated on URLs you were not authorized to submit.

Service providers

We rely on the following third-party service providers to operate Brekio:

• Vercel (application hosting and infrastructure)
• Supabase (database and authentication)
• Resend (transactional emails)
• Zoho Mail (business email)

These providers may process your information as necessary to provide their services. They act as data processors and are bound by their own privacy policies and security practices.

Data retention

We retain your data while your account is active. If you delete your account, we retain your data for up to 90 days to allow for account recovery, after which it is permanently deleted from our systems. Some backup data may persist longer for technical reasons and is deleted according to standard backup rotation.

Your rights

You have the right to access, correct or request deletion of your personal data. To exercise these rights, contact us at hello@brekio.com.ar.

Security

We use industry-standard security practices including encrypted connections (HTTPS), encrypted authentication credentials, and access controls at the database level. However, no online service can guarantee absolute security.

If you become aware of a security issue affecting Brekio, contact us at hello@brekio.com.ar.

Changes to this notice

We may update this notice from time to time. When we do, we will publish the new version at this URL and update the "Last updated" date at the top. Continued use of the service after changes indicates acceptance of the updated notice.

Contact

Any question about this privacy notice can be sent to hello@brekio.com.ar.