This Privacy Policy explains how Marcus Rothoff, operating as a *libero professionista* under Italian Partita IVA ("Brodo", "we", "us", or "our"), processes personal data when you use https://brodoapp.com, create a Brodo account, purchase Brodo, use the Brodo desktop application, or contact us.
1. Data Controller
Marcus Rothoff Libero professionista Partita IVA: 03143850349 Italy
For privacy requests, contact us through:
2. Personal Data We Process
Depending on how you use Brodo, we may process:
Account data
When you create an account, we process:
- Email address
- Hashed password
- Account/user ID
- Email verification status
- Optional display name
- License and subscription information
We do not store passwords in plain text.
Payment and subscription data
Payments are processed by Stripe.
Stripe receives information necessary to process your purchase, including your email address, an internal Brodo user identifier, and information about the product or plan purchased.
Payment card details are collected directly by Stripe. Brodo does not store your full card number, CVC, expiry date, or other raw payment credentials.
We store Stripe customer and subscription identifiers where necessary to manage your Brodo license.
Website analytics
We use PostHog to measure how visitors use our website and to improve it.
PostHog may process information such as page views, clicks, browser and device information, approximate location, analytics identifiers, and website events.
Analytics is disabled until you consent through our cookie controls.
For users who authenticate with Brodo, PostHog may associate analytics information with their Brodo user ID and may process their email address and optional display name.
Error reporting
We use Sentry to identify and resolve software errors and crashes.
Sentry may process technical information such as error reports, stack traces, software version, browser or operating-system information, and diagnostic information.
When using the Brodo desktop application, Sentry may also receive your Brodo user ID and email address.
We configure Sentry to minimize personal information and do not intentionally send passwords, authentication tokens, request bodies, or similar authentication data.
Contact requests
If you contact us through https://brodoapp.com/contact, we process the information you provide, which may include:
- Name
- Email address
- Subject
- Topic
- Message
- Bug-report information
- Optional screenshots
For requests submitted from the Brodo desktop application, we may also receive the application version, platform, operating system, and license type.
Contact requests are sent through Resend to our support email address and are not stored in the Brodo application database.
Data stored by the Brodo desktop application
Brodo stores writing-related information locally on your computer, including project information, word counts, writing sessions, session durations, goals, commitments, and reflections.
Brodo may temporarily read information from your active writing application to calculate word counts.
Your manuscript or document text is not intentionally uploaded to Brodo's servers.
3. How We Use Personal Data
We process personal data to:
- Provide and operate Brodo
- Create and manage accounts
- Authenticate users
- Provide paid features and manage licenses
- Process purchases and subscriptions
- Respond to support requests
- Maintain the security and reliability of Brodo
- Diagnose and fix errors
- Understand website usage and improve Brodo
- Comply with legal obligations
4. Legal Bases
Where the GDPR applies, we process personal data on the following legal bases:
Contract (Article 6(1)(b) GDPR): Account, authentication, license, subscription, and related data necessary to provide Brodo.
Legal obligation (Article 6(1)(c) GDPR): Information we are required to retain or process under applicable law.
Legitimate interests (Article 6(1)(f) GDPR): Security, fraud prevention, error reporting, and maintaining and improving the reliability of Brodo.
Consent (Article 6(1)(a) GDPR): Non-essential website analytics and associated tracking technologies where consent is required.
You may withdraw consent for analytics at any time through our cookie controls.
5. Service Providers
We use the following service providers to operate Brodo:
- Supabase: database hosting
- Vercel: website hosting
- Railway: backend hosting
- Cloudflare: download and update infrastructure
- Stripe: payment and subscription processing
- PostHog: website analytics
- Sentry: error and crash reporting
- Resend: email delivery
These providers process personal data only as necessary to provide their respective services or as otherwise permitted by applicable law.
6. International Transfers
Some service providers may process personal data outside the European Economic Area.
Where required by the GDPR, we use an appropriate legal mechanism for such transfers, such as an adequacy decision, Standard Contractual Clauses, or another lawful transfer mechanism.
7. Retention
We retain personal data only for as long as necessary for the purposes for which it was collected, unless a longer period is required by law.
When you delete your Brodo account, we delete the account and associated personal data held in our database.
Any active Stripe subscription is cancelled when the account is deleted. Stripe may retain customer and transaction information for its own legal, regulatory, accounting, and security obligations.
Analytics and error-reporting data may remain with PostHog or Sentry for the retention period configured for those services.
8. Your GDPR Rights
Where the GDPR applies, you may have the right to:
- Access your personal data
- Correct inaccurate personal data
- Request deletion of your personal data
- Request restriction of processing
- Object to certain processing
- Receive your personal data in a portable format where applicable
- Withdraw consent where processing is based on consent
You also have the right to lodge a complaint with a data protection supervisory authority.
To exercise your rights, contact us through:
We may need to verify your identity before fulfilling a request.
9. Cookies and Analytics
Brodo uses necessary technologies required for the operation of the website.
PostHog analytics uses cookies and similar technologies only after you have given consent through our cookie controls.
If you reject analytics, PostHog is not loaded and its analytics tracking is not used.
You may withdraw your analytics consent through the cookie controls.
10. Security
We use reasonable technical and organizational measures to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure.
However, no internet transmission or electronic storage system can be guaranteed to be completely secure.
11. Changes to This Policy
We may update this Privacy Policy when our processing activities or applicable legal requirements change.
The date at the top of this Privacy Policy indicates when it was last updated.
12. Contact
For questions or requests concerning privacy and personal data:
Marcus Rothoff Libero professionista Partita IVA: 03143850349 Italy
Privacy requests: https://brodoapp.com/contact