Privacy Policy

Anastasios-Nikolaos Kosulin (trading as Bravio)

Talstr. 16, 56472 Großseifen, Germany

Email: support@braviosocial.com

We have not appointed a data protection officer because the law does not require one.

Bravio is a business service. We process personal data of visitors to our website, of people who use a Bravio account, and data contained in the content customers create with Bravio. We do not sell personal data, do not use advertising trackers, and do not use your data or your content to train AI models.

For personal data inside customer content (for example people shown in uploaded photos or on a customer's website), the customer is the controller and Bravio processes the data on their behalf under the Data Processing Agreement.

When you open a page, our hosting provider processes technical data needed to deliver it and keep it secure: IP address, date and time, page requested, browser and device information. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a secure, working website). Logs are deleted after at most 30 days unless needed to investigate an attack.

Fonts are served from our own servers. The website does not load content from Google or social networks and uses no advertising tools. Website icons of brands in the dashboard are fetched by our server, so your browser does not contact Google for them.

Reach measurement: on the public pages we use our hosting provider's web analytics. It sets no cookies, stores nothing on your device and counts page views without identifying you; the request data used for counting is discarded within 24 hours. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in knowing which pages are used).

To create an account we process your name, email address, sign-in method and account identifiers. Sign-in is provided by Clerk, which may show a Cloudflare Turnstile check on sign-up to block bots. If you choose to sign in with Google, Microsoft or LinkedIn, that provider confirms your identity and passes us your name, email address and profile picture; it processes the sign-in as its own controller under its own privacy policy. Legal basis: Art. 6(1)(b) GDPR (contract). We keep account data while the account exists and delete it within 30 days after it ends, unless records must be kept by law.

Website analysis: when you enter a website address, Bravio reads public pages of that website (through a web reading service) and extracts information about the business, its products and images. These pages may contain personal data, such as names or photos of staff. Legal basis: Art. 6(1)(b) and (f) GDPR; for data of third parties on the website, our customer is responsible as controller.

Content creation: brand information, scripts and images are sent to AI providers for text, images, video and voice to create content. Background music comes from Bravio's own song library. Images and videos are stored privately with our storage provider and served only to your account.

Market research: to find ideas, Bravio searches public sources for the brand's market (public ads and public posts on social and community sites). Only search words about the business are sent, never data about you.

Uploads: if you upload screen recordings, product clips or other material, we process it only to create your content. Bravio does not accept photos of people as presenters; presenters are AI-generated people from Bravio's own library. Presenter photos uploaded before 21 October 2026 are no longer used and you can delete them. We do not create face templates or use face recognition. Uploaded files are deleted when you delete them or when the account ends; content already published stays where it was published.

Publishing: if you connect social accounts, our publishing provider posts on your instruction. The social networks (such as TikTok, Instagram, YouTube) process the posts as independent controllers under their own privacy policies.

Legal basis for all of this: Art. 6(1)(b) GDPR (contract).

Improving Bravio: from the records the service keeps anyway (when you signed up, scanned a website, saw the plans, opened checkout, paid, and errors or refusals you ran into), we build an overview of where customers get stuck. Nothing is read from your device for this. If you allowed analytics in the cookie settings, the overview also uses summary figures from PostHog about your visits (see section 9). A daily summary is written by an AI model from pseudonymous data, without names or email addresses. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a working, understandable service). These records are deleted after 12 months, or earlier with your account. You may object at any time by email.

Payments are processed by Stripe. Stripe receives your name, email, billing address, VAT ID and payment details; Bravio does not see full card numbers. Stripe also processes data as an independent controller to prevent fraud and meet its legal duties. Legal basis: Art. 6(1)(b) and (c) GDPR. Invoices and booking records are kept for 8 years (§ 147 AO, § 14b UStG).

If you email us, we process your message and contact details to answer. Emails to Bravio addresses are received by our email provider and kept in our mail inbox. Legal basis: Art. 6(1)(b) or (f) GDPR. We delete the correspondence when it is no longer needed, unless retention duties apply.

If you use the contact form on our website or in your dashboard, we receive the topic, your message, your name and email address (or your account ID when you are signed in) by email, and send you one confirmation email. To stop spam we count messages per network address and per email address for one hour; these counts are not stored with your message.

Service emails: we send emails that belong to the service, such as receipts, payment notices, notices that your content is ready, and account notices. You choose in Settings whether content emails come daily, weekly or not at all. Legal basis: Art. 6(1)(b) GDPR (contract).

Tips and offers: we send them if you ticked the box and confirmed it with the link in our confirmation email (Art. 6(1)(a) GDPR). As a customer, you may also get emails about similar Bravio services to the address you gave us when signing up (§ 7(3) German Unfair Competition Act, Art. 6(1)(f) GDPR). You can withdraw or object at any time, free, with one click in any email or in Settings. We store when and how you agreed, to be able to prove it.

Which emails we send depends on how you use Bravio, for example whether you looked at the plans or created a brand profile. Our emails contain no tracking pixels and we do not track opens or clicks. Emails are sent from servers in the EU.

Without your consent we only use storage that is strictly necessary to provide the service you request (§ 25(2) TDDDG). We use no advertising or marketing cookies.

Your choice: on your first visit we ask in the cookie settings at the bottom of the page. "Accept all" and "Reject all" are equally easy, and "Choose" lets you allow each optional category on its own. Today there is one optional category, analytics and screen recordings. You can change your choice at any time under "Cookie settings" in the footer, on this page or in your dashboard Settings. Your choice is saved in your browser only.

Screen recordings (only with your consent): if you allow "Analytics and screen recordings", PostHog (EU Cloud, servers in Frankfurt) records how you use our website and dashboard: clicks, scrolling, page changes, errors in the browser, device type and approximate session length. Everything you type in fields is hidden and never recorded, and your IP address is not stored. When you are signed in, the recording is linked to your account ID (not your email) so we can see where a problem happened. We use it only to find what is confusing or broken. Legal basis: § 25(1) TDDDG and Art. 6(1)(a) GDPR (consent). Recordings are deleted after at most 90 days. Without consent nothing of PostHog is loaded. You can withdraw at any time under "Cookie settings"; PostHog's storage is then removed from your browser.

We use the following types of processors. Some are in countries outside the EU/EEA. Customers find the full list with every provider's name in their dashboard under Settings, and anyone affected can ask us for it by email. Transfers rely on the EU-US Data Privacy Framework where the provider is certified, and otherwise on the EU Standard Contractual Clauses (Art. 46 GDPR).

One of our AI video providers does not publish its operator or server location and offers no data processing agreement, and the country it sends data to has no EU adequacy decision, so the protection of your data there is not equivalent to the EU. We therefore send it only scripts, product images and the AI-generated presenters from Bravio's own library, never photos of real people you upload. Screen recordings and product clips you upload are cut into your videos by Bravio itself. The provider states that it deletes uploads after 7 days and generated videos after 15 days.

You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and to withdraw consent at any time with effect for the future (Art. 7(3)).

Right to object (Art. 21 GDPR): where we process data based on legitimate interest, you may object at any time for reasons arising from your particular situation. You may object to direct marketing at any time without giving reasons.

To use your rights, email support@braviosocial.com. You also have the right to complain to a data protection authority, in particular the one responsible for us: Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz, Hintere Bleiche 34, 55116 Mainz.

You need to provide the data required to create an account and pay; without it we cannot provide the service. We do not make decisions with legal effect based solely on automated processing (Art. 22 GDPR). AI creates content, not decisions about you.

We update this policy when our services or the law change. Version of 2026-11-03.