Privacy policy
Braid View is designed for UK users with UK GDPR principles in mind. This page explains what we collect, why, and the choices you have.
What we collect
- Your name and email address, to sign you in with an email link.
- The business records you add or import: portfolios, businesses, sales, fees, refunds, expenses, time entries and goals.
- Metadata about connected sources, such as the provider account id and sync status. We aggregate business economics and do not keep buyer or customer personal data that a provider happens to return.
- Your plan and billing status. Card details are handled by Stripe and never reach our servers.
- A short activity log of security and account events (for example a source connected or an export downloaded). It never contains secrets.
Data minimisation and cookies
We only collect what the product needs. We use a single essential session cookie to keep you signed in. We do not use advertising or cross-site tracking cookies, so no cookie consent banner is shown.
How long we keep data
Your data is kept while your account is open. Sessions expire after seven days. When you delete your account, your portfolios, imported history, goals, time entries, activity log, subscription record and sessions are deleted immediately. Backups are overwritten on the normal backup rotation, and we keep only what the law requires, such as payment records held by Stripe.
Your rights
- Access and portability: download a complete JSON copy of your data from Settings.
- Erasure: delete your account from Settings. Disconnecting a source stops access to it and keeps the history already imported unless you delete your account.
- Rectification, restriction and objection: contact us and we will respond within one month.
- Complaints: you can complain to the Information Commissioner's Office (ico.org.uk).
Who processes your data
We use a hosting provider and database host, an email delivery provider for sign-in links, and Stripe for subscription payments and for the optional Stripe source connection you authorise. The current list of subprocessors is kept in our deployment documentation.