Privacy Policy
This Privacy Policy explains what data BriskFyr ("we", "us", "our") collects when you join our waitlist or use the BriskFyr application (the "Service"), and how we handle it.
1. Data we collect
- Email address — when you join the waitlist, or when you create an account.
- Account authentication data — handled by our authentication provider (Supabase Auth); we do not store your password ourselves.
- Your model data — the mechanisms, parameters, and simulation results you create, stored as JSON in our database (Supabase Postgres, hosted in India).
- Basic, cookieless analytics — aggregate page-view data collected without cookies or cross-site tracking (see §5).
We do not collect payment data at this stage — BriskFyr's Free tier requires no payment method, and no billing system is active yet.
2. Why we collect it and our legal basis
We act as a Data Fiduciary under India's Digital Personal Data Protection Act, 2023 (DPDP), and, for users in the European Union, as a data controller under the GDPR. We collect your email to notify you about launch, product updates, and occasional posts from our blog (with your consent, given when you submit the waitlist form) and to operate your account; we process your model data solely to provide the simulation service to you.
3. Where your data is stored
Application data (accounts, model JSON) is stored in India (Supabase, Mumbai region), and simulations run on BriskFyr's compute infrastructure, also located in India. For users in the European Union, your personal data is therefore processed outside the EEA; we apply appropriate safeguards for such international transfers.
4. Your rights and deletion
Under DPDP and GDPR you may request access to, correction of, or deletion of your personal data. At this stage, deletion is handled manually on request: email support@briskfyr.com and we will delete your account and associated data within 30 days. (A fully self-serve deletion flow is planned for a later release.)
5. Cookies and analytics
We use privacy-friendly, cookieless analytics (Cloudflare Web Analytics) to understand aggregate traffic to this site. We do not use advertising cookies, and because our analytics are cookieless, no cookie-consent banner is required or shown.
6. Who we share data with
We use a small number of purpose-built sub-processors to run the Service, each handling only the data needed for its job:
- Supabase — database (Postgres) and authentication.
- Cloudflare — DNS, content delivery, and cookieless web analytics.
- Kit (ConvertKit) — waitlist, product-update, and newsletter email list management.
- Resend — transactional email (sign-up confirmation, password reset).
We do not sell your personal data to anyone.
7. Data retention
Waitlist emails are kept until you unsubscribe or request deletion. Simulation results on the Free tier are retained for 90 days, after which older results may be automatically pruned (per your account's storage limits).
8. Changes to this policy
We may update this Privacy Policy as the Service evolves; material changes will be noted on this page.
9. Contact
Questions about this policy, or to exercise your data rights: support@briskfyr.com.