Privacy and your data
A plain summary of what Breno holds about you and your content, where it goes, how long it is kept, and where to find the full privacy, terms and cookie notices.
This page is a summary. The legal documents are the privacy notice, the terms of service and the cookie notice, and where this page and they differ, they win.
What Breno holds#
| Kind | Examples | Who controls it |
|---|---|---|
| Account data | Name, email address, a hashed password, sign-in events, sessions | The operator of the instance you use |
| Your content | Items you add or sync, their passages, embeddings, versions, the graph and memory built from them | Your workspace |
| Usage and audit records | Which answers were generated and what they used, and security-relevant events | The operator, and your workspace's administrators |
| Server logs | Request path, status, timing, the requesting address, a trace id | The operator |
| Messages you send us | What you type into the contact form | Breno, used only to reply |
Where it goes#
Everything stays on the instance's infrastructure except the text a model needs to answer a question or compute an embedding, which goes to the model provider the operator configured, and optional services such as email and payments. See Data flow.
Who can see it#
Only people who pass the read rule inside your workspace. Other workspaces never can, because the database enforces the separation. See How access works.
How long it is kept#
- Deleted items sit in trash for 30 days, then are purged with everything derived from them.
- Sync history is kept 30 days and finished sync jobs 90 days, by default.
- Audit records are kept for the period the operator sets, and cannot be edited.
- A legal hold pauses scheduled purges.
Your rights, and how to use them#
You can see, correct, erase, restrict, object to, and take a portable copy of your personal data, and withdraw consent where it is the basis. Two are self-service: export and deletion. For the rest, write to us. See Data subject requests.
Cookies#
This site sets four cookies, all strictly necessary: three that keep you signed in and one that remembers your cookie choice. There is no analytics or advertising cookie. These documentation pages write nothing to localStorage, sessionStorage or cookies. See the cookie notice.
Who to ask#
contact@breno.ng, or the contact form. If your organization runs the instance you use, start with your workspace administrator: they are the data controller for that workspace.
Complaints#
If you are not satisfied, you can complain to the Nigeria Data Protection Commission at ndpc.gov.ng.