Legal
Privacy Policy
Last updated: July 2026
1. Who we are
Brevibot ("we", "us") is an AI agency led by Sergiu Butnaru, operating from Romania and serving clients across the EU and beyond. This site is https://brevibot.com. For anything in this policy, contact us at contact@brevibot.com.
2. What we collect, and why
| Data | When | Why (legal basis) |
|---|---|---|
| Name, email, phone, and what you tell us about your business | When you book an audit or a call through the booking calendar | To prepare for and deliver the session you booked (contract) |
| Payment confirmation for paid sessions | When you pay during booking | To confirm and administer your booking (contract). Card details are handled by the payment provider, not stored by us. |
| Your message and phone number | When you contact us on WhatsApp or by email | To reply and follow up (legitimate interest) |
| How the site is used: pages opened, scrolling, clicks, time on page (anonymised) | During visits, via our own first-party measurement. It stores nothing on your device and is anonymised on arrival (daily-rotating hash instead of your IP), so it cannot recognise you from one day to the next. | To understand how the site is used and improve it (legitimate interest) |
| Return-visit ids for that same measurement, plus Google Analytics and Microsoft Clarity when active | Only if you allow Analytics in the cookie banner | Richer usage insight, including return visits (consent) |
| Your cookie choice (anonymised record) | When you respond to the cookie banner | To prove compliance with consent rules (legal obligation). Stored with a daily-rotating hash instead of your IP. |
3. Where your data is processed
- Scheduling and CRM: bookings run on LeadConnector / HighLevel (the calendar embedded on this site). Your booking details live there.
- Hosting: the site is served by Cloudflare.
- Consent records and visit measurement: anonymised consent decisions and our own first-party usage events are stored in a Supabase database in the EU (Ireland).
- Analytics: if enabled and consented to, Google Analytics and Microsoft Clarity process aggregate usage data.
- Fonts: the site loads the Inter typeface from Google Fonts, so your browser requests the font file from Google's servers.
Some of these providers process data outside the EU. Where that happens, transfers rely on the providers' standard contractual clauses or an adequacy decision.
4. How long we keep it
- Booking and client records: for the duration of our work together, then as long as tax and accounting law requires.
- Consent records: up to 3 years, as proof of compliance.
- Our own visit measurement: anonymised events, kept up to 2 years.
- Third-party analytics data (when active): aggregate only, per the retention settings of the tool (typically 2–14 months).
5. Your rights
Under the GDPR you can ask us for access to your data, correction, deletion, a portable copy, or to stop processing based on legitimate interest. Consent-based processing (analytics) you can withdraw at any time via Cookie settings. Email contact@brevibot.com and we will act on it within a month.
If you are unhappy with how we handled something, you can complain to the Romanian data protection authority (ANSPDCP, dataprotection.ro) or your local EU authority. For consumer matters in Romania, see ANPC (Romania).
6. Changes
If we change this policy in a way that matters, we will update the date at the top and, where appropriate, ask for your consent again.
7. Contact
Email contact@brevibot.com or use the contact page. See also our Cookie Policy and Terms.