Privacy Policy

1. Information We Collect

Personal Information

When you create an account or use Brewdemo, we collect information you provide directly, including:

• Name and email address
• Company name and role (optional, used for personalization)
• Account credentials and authentication information
• Payment information for paid plans (processed securely by Stripe — we never see your card number)
• Voice recordings or audio samples you upload for cloning (only when you opt in)
• Brand assets (logo, colors, fonts) you choose to upload

Recordings and Generated Content

To generate the videos you ask us to create, we collect and store:

• Demo descriptions you write
• URLs you ask the agent to record from
• Screenshots, screen recordings, and DOM snapshots captured during agent runs
• Generated narration scripts, audio tracks, and final composed videos
• Encrypted authentication state (cookies, session tokens) for sites you authorize the agent to access on your behalf — encrypted at rest with AES-256-GCM
• Per-domain knowledge accumulated to make future runs reliable (selectors, page structure observations)

Usage Data

We automatically collect information about your interactions with Brewdemo:

• Pages visited, time spent on the platform, and features used
• Number of recordings, render minutes, and API calls per period
• Watch analytics on shared videos (anonymized — IP-hashed viewer ids)
• Error reports and debugging information

Device Information

When you access Brewdemo, we collect:

• IP address and browser type
• Operating system and device type
• General location data based on IP address (country / region only)

Cookies and Tracking

We use cookies and similar tracking technologies to keep you signed in, remember your preferences, and analyze how you use Brewdemo. You can manage your cookie preferences from any page. See Section 6 for the full list of analytics services we use and how to opt out.

2. How We Use Your Information

We use the information we collect for the following purposes:

• Providing the service: Running the AI agent, generating videos, hosting your library, processing payments.
• Personalization features: When you upload a CSV of prospects to generate personalized videos, we use that data to render the videos and then keep it only as long as the resulting videos exist.
• AI processing: Sending demo descriptions, screenshots, and narration scripts to Anthropic Claude (for the agent) and OpenAI / ElevenLabs (for voice synthesis). These providers have their own privacy policies — see Section 7.
• Communication: Account notifications, billing receipts, security alerts, and product updates you opt into.
• Analytics: Understanding how the platform is used so we can improve it.
• Security: Detecting and preventing fraud, enforcing our terms, and rate-limiting abusive behaviour.
• Compliance: Fulfilling legal obligations and responding to lawful requests.

3. Information Sharing

We do not sell your personal information. We may share information in the following limited circumstances:

Service Providers

We share information with trusted vendors who help us operate Brewdemo (hosting, AI inference, payments, email, analytics). These providers are contractually required to safeguard your data. The full list is in Section 7.

Public Sharing You Control

When you share a video via a public link or embed it on a website, the video and its metadata become accessible to anyone with the link. You control which videos are public.

Aggregated and De-identified Data

We may share aggregated, de-identified statistics (e.g., "average video length is 73 seconds") for research, marketing, or product purposes. This data cannot be used to identify you.

Legal Requirements

We may disclose information if required by law, subpoena, court order, or to protect our rights or the safety of users.

Business Transactions

If Brewdemo is involved in a merger, acquisition, or asset sale, your information may be transferred. We will notify you before any transfer occurs and give you the opportunity to delete your account first.

4. Data Security

We use industry-standard measures to protect your data:

• HTTPS / TLS 1.3 encryption for all traffic
• Encryption at rest (AES-256-GCM) for sensitive items like saved authentication profiles
• scrypt key derivation for password-derived encryption keys
• Stripe handles all payment card data — we never see, store, or transmit raw card numbers
• Server access restricted via SSH key authentication only
• Daily and weekly backups of customer data and recordings

No system is perfectly secure. If a breach occurs that affects your data, we will notify you within 72 hours of confirming the incident.

5. Your Privacy Rights

You have the following rights regarding your data:

Access

Request a copy of the personal information we hold about you.

Correction

Update or correct inaccurate information from your account settings or by contacting us.

Deletion

Delete your account and all associated data from the danger-zone section of your account settings, or by contacting us. Deletion is permanent and immediate; backups are purged within 30 days.

Data Portability

Export your videos, narration scripts, and account data in machine-readable formats.

Opt-Out

Unsubscribe from marketing emails using the link in any email, or disable analytics cookies from the cookie banner.

6. Cookies, Analytics, and Advertising

Essential

Required for the platform to function — authentication, CSRF protection, session state. Cannot be disabled.

Analytics

We use first-party analytics to count page views and understand feature usage. No personally identifiable information is shared with third-party analytics providers.

Error and performance monitoring

We use a self-hosted error monitor to capture crashes and slow requests. IP addresses and browser fingerprints are not retained beyond 30 days.

Marketing

We do not run third-party advertising pixels (Meta Pixel, Google Ads tracking) on the marketing site by default. If we add them, we will update this section and the cookie banner.

7. Third-Party Services

Brewdemo uses the following third-party processors. Each has their own privacy policy.

Anthropic (Claude AI)

We send demo descriptions, screenshots, simplified DOM snapshots, and narration scripts to Anthropic to drive the agent and generate scripts. Anthropic does not train on data sent via API by default. Anthropic privacy policy.

OpenAI (Text-to-speech)

We send narration text to OpenAI's TTS API to generate audio. OpenAI does not retain content sent via their API for training. OpenAI privacy policy.

ElevenLabs (Voice cloning, optional)

If you opt into voice cloning, we send your voice samples and narration text to ElevenLabs. ElevenLabs privacy policy.

Stripe (Payments)

All payment processing is handled by Stripe. We never see your card number — Stripe gives us a token. Stripe privacy policy.

Clerk (Authentication)

We use Clerk to manage user accounts, sign-in flows, and session tokens. Clerk privacy policy.

Email Delivery (SMTP)

Transactional emails (sign-up confirmations, billing receipts, password resets) are sent through a third-party email provider.

External Links

Brewdemo may link to external sites. We are not responsible for the privacy practices of those sites.

7a. Data Retention

Account data: retained for the life of your account. Recordings and generated videos: retained until you delete them or your account. Logs and analytics: 90 days. Backups: 30 days. After account deletion, primary data is erased immediately and backup copies are purged within 30 days.

7b. Legal Basis for Processing (EU / UK Users)

For users in the EU and UK, our legal bases for processing personal data are:

• Contractual necessity: Processing required to provide the service you signed up for.
• Legitimate interest: Analytics, fraud prevention, product improvement.
• Consent: Marketing emails, optional cookies, voice cloning.
• Legal obligation: Tax records, lawful requests.

8. Children's Privacy

Brewdemo is not directed to children under 16. We do not knowingly collect data from children. If you believe a child has provided us with information, contact us and we will delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated by email and a notice on the platform at least 14 days before they take effect.

10. Contact Us

For questions about this Privacy Policy or to exercise your privacy rights:

Email: famousleads@gmail.com
Subject line: Privacy Inquiry