Privacy Policy

• Account: your name, email address and, if you sign in with Google, your Google profile name and email. Passwords are stored hashed.
• What you give the service: the product and website URLs you submit, the facts you confirm, your brand details, your instructions to Brew, and the pages, pictures and settings you create.
• Scanned pages: text and pictures from public pages you point us to, kept as sources (truncated) so each fact can be traced.
• Billing: your plan and subscription status. Card details go directly to Stripe; we do not see or store them.
• Usage and security: counts of drafts, publishes and Brew tasks, and technical logs (for example error and request logs) needed to run and protect the service.

• to provide the service you asked for: read pages, draft and edit articles, host what you publish (contract);
• to take payments, enforce plan limits and keep records (contract and legal obligation);
• to secure accounts, prevent abuse and fix problems (legitimate interests);
• to send service emails such as sign-in codes, receipts and important notices (contract and legitimate interests).

We do not sell personal data and we do not use your content to train our own models. Brew reuses what you save to write your next page.

We use a small number of providers to run the service. Each receives only what it needs:

• Anthropic (Claude): scanned page text, your confirmed facts and your instructions, to write and edit pages.
• Firecrawl: the page URLs you submit, to read their public content.
• Stripe: billing identity and subscription data, to take payments.
• Google: sign-in with Google, if you choose it. Image providers (such as Google or remove.bg) receive a picture only when you ask Brew to change its background.
• Resend: your email address and message content, to deliver sign-in codes and service emails.
• Our hosting, database and caching providers, which store data on our behalf.
• Cloudflare Turnstile, where enabled, to tell people from bots on sign-up.

Some of these providers are outside the European Economic Area, notably in the United States. Where that is the case we rely on the safeguards the law allows, such as the European Commission's standard contractual clauses.

A page you publish is public. Visitors to published pages are counted (views and clicks on buttons) using a daily-rotating hash; we do not store IP addresses or set advertising cookies. If you choose a Google Fonts typeface for a page, visitors' browsers load that font from Google.

We use a session cookie to keep you signed in and, where enabled, a security token from Turnstile. We do not use advertising or cross-site tracking cookies.

Account and content data are kept while your account is open. You can edit or delete any fact, page or brand in the dashboard, and delete your account and its data from Settings. Billing records are kept as long as tax and accounting law require. Backups and logs expire on a rolling schedule.

If the GDPR applies to you, you have the right to access, correct, delete, restrict or object to the use of your personal data, to receive it in a portable format, and to withdraw consent where we rely on it. You can also complain to your data protection authority; in Estonia that is the Andmekaitse Inspektsioon. To exercise a right, email legal@brewwwup.com.

We protect data with encrypted connections, hashed passwords, access controls scoped to your account, and signed payment webhooks. No system is perfectly secure; if a breach affects you we will tell you as the law requires.

Brewwwup is for businesses and is not directed at children under 16.

We may update this policy. A material change will be announced in the service or by email, and the "last updated" date above will change.

Discursive OÜ, Sepapaja tn 6, 15551 Tallinn, Estonia.
Privacy and legal: legal@brewwwup.com
General: hey@brewwwup.com