Privacy Policy

1. Introduction

brblly (developed by devlog) ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. By using brblly, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Information You Provide

We collect information that you voluntarily provide when using our Service:

• Account Information: Name, email address, password, and company details
• Profile Information: Business name, logo, contact information
• Product Data: Product names, descriptions, prices, images, and inventory information
• Shipping Information: Shipping options, delivery times, and pricing
• Payment Information: Payment card details (processed securely through third-party payment processors)
• Communication Data: Messages you send through our support channels

2.2 Information Automatically Collected

When you use our Service, we automatically collect certain information:

• Usage Data: Features used, pages visited, time spent, and interaction patterns
• Device Information: IP address, browser type, operating system, device identifiers
• Log Data: Access times, error logs, and API calls
• Cookies and Tracking: Session cookies, preferences, and analytics data

2.3 Information from Third-Party Platforms

When you connect third-party messaging platforms (Facebook, Viber, etc.):

• Platform Account Data: Page/account IDs, access tokens, basic profile information
• Conversation Data: Messages exchanged with your customers through connected platforms
• Customer Data: Customer names, profile pictures, and identifiers from messaging platforms
• Media Files: Images, videos, and other files shared in conversations

2.4 Customer Data

When your customers interact with your chatbot, we collect and process:

• Conversation messages and content
• Order information (products, quantities, shipping preferences)
• Customer contact information provided during conversations
• Interaction timestamps and conversation metadata

3. How We Use Your Information

3.1 Service Delivery

• Provide, maintain, and improve our Service
• Process and manage your chatbot interactions
• Capture and track orders from customer conversations
• Generate AI-powered responses using OpenAI's services
• Process image recognition for product identification
• Manage your account and subscriptions

3.2 Communication

• Send service-related notifications and updates
• Respond to your inquiries and support requests
• Send billing information and invoices
• Notify you about changes to our Service or policies

3.3 Analytics and Improvement

• Analyze usage patterns to improve our Service
• Develop new features and functionality
• Monitor and analyze trends and performance
• Conduct research and testing

3.4 Security and Compliance

• Detect and prevent fraud, abuse, and security incidents
• Comply with legal obligations and enforce our Terms
• Protect the rights and safety of our users

4. How We Share Your Information

4.1 Third-Party Service Providers

We share information with service providers who help us operate:

• OpenAI: For AI-powered conversation processing (subject to OpenAI's privacy policy)
• Cloud Infrastructure: For hosting and data storage
• Payment Processors: For billing and payment processing
• Email Services: For transactional and notification emails
• Analytics Providers: For service analytics and monitoring

4.2 Messaging Platform Providers

When you connect third-party platforms (Facebook, Viber), data is shared with those platforms according to their respective privacy policies and terms of service.

4.3 Legal Requirements

We may disclose your information if required to:

• Comply with legal obligations, court orders, or government requests
• Enforce our Terms of Service or other agreements
• Protect the rights, property, or safety of brblly (developed by devlog), our users, or others
• Investigate potential violations or fraud

4.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

4.5 With Your Consent

We may share your information for other purposes with your explicit consent.

5. Data Retention

We retain your information for as long as necessary to:

• Provide our Service and maintain your account
• Comply with legal, tax, or regulatory requirements
• Resolve disputes and enforce our agreements
• Maintain backups for business continuity

Conversation data and customer information are retained for the duration of your active subscription plus an additional retention period as required by applicable law. You may request deletion of specific data subject to legal retention requirements.

6. Data Security

We implement appropriate technical and organizational measures to protect your information:

• Encryption of data in transit using TLS/SSL
• Encryption of sensitive data at rest
• Access controls and authentication mechanisms
• Regular security assessments and updates
• Secure data centers with physical security controls
• Employee training on data protection practices

However, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

7. Your Rights and Choices

7.1 Access and Portability

You have the right to access your personal information and request a copy of your data in a structured, machine-readable format.

7.2 Correction and Updates

You can update your account information at any time through your account settings. You may also contact us to correct inaccurate information.

7.3 Deletion

You may request deletion of your account and associated data. Some information may be retained as required by law or for legitimate business purposes.

7.4 Opt-Out

• Marketing Communications: Unsubscribe from promotional emails using the link in the email
• Cookies: Manage cookie preferences through your browser settings
• Analytics: Opt out of certain analytics tracking where available

7.5 Data Processing Objection

You may object to certain types of data processing. However, this may limit your ability to use certain features of the Service.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place for such transfers in compliance with applicable data protection laws.

9. Children's Privacy

Our Service is not intended for children under 13 years of age (or 16 in certain jurisdictions). We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

10. Cookies and Tracking Technologies

10.1 Types of Cookies

• Essential Cookies: Required for basic Service functionality
• Preference Cookies: Remember your settings and preferences
• Analytics Cookies: Help us understand how you use the Service
• Session Cookies: Maintain your logged-in state

10.2 Managing Cookies

You can control cookies through your browser settings. Disabling certain cookies may affect Service functionality.

11. Third-Party Links and Services

Our Service may contain links to third-party websites or integrate with third-party services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies.

12. AI and Machine Learning

We use AI and machine learning technologies, including OpenAI's services, to:

• Generate automated responses to customer messages
• Identify products from images using vector similarity search
• Detect order intents and extract structured information
• Improve chatbot accuracy and performance

Conversation data processed by AI services is subject to both our privacy policy and the privacy policies of our AI service providers.

13. California Privacy Rights

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to opt-out of the sale of personal information
• Right to deletion of personal information
• Right to non-discrimination for exercising CCPA rights

Note: We do not sell personal information to third parties.

14. European Union and UK Rights

If you are located in the EU or UK, you have additional rights under GDPR:

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent
• Right to lodge a complaint with a supervisory authority

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through a prominent notice on our Service. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

16. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: nermin@brblly.com
• Phone: +387 60 305 2862
• Address: Mekiš 176, Tešanj, Bosnia and Herzegovina

17. Data Controller Information

For the purposes of data protection law, the data controller is:

brblly
devlog
Mekiš 176, Tešanj, Bosnia and Herzegovina
Contact: nermin@brblly.com