The hero intake currently helps you prepare, copy, or download a request on your device; it is not a live submission channel. Google sign-in through Firebase Authentication and a minimal Breauti profile are active. In-site messages, Stripe payments, analytics, and advertising tools are not connected. The designated privacy and support inboxes must be activated and tested before the development notice is removed, and this policy will be revised before any materially new collection begins.
Controller and scope
Breauti LLC, a U.S.-based limited liability company registered in Mississippi, determines how and why personal information is handled through the Breauti Studio public website. This policy applies to Studio marketing pages, policy pages, the local project-request experience, and future Studio account, payment, and client-workspace features when they are activated.
Breauti currently offers optional Google sign-in for a shared Breauti account. It is not operating a live project-submission form, checkout, subscription portal, marketing-email list, or analytics program on this site. The site is not directed to children, and Breauti does not knowingly ask children to submit personal information here.
privacy@breauti.com is the designated privacy contact for launch. Until Breauti confirms that the inbox is active, do not treat an email as delivered or send identity documents, passwords, full payment-card numbers, government identifiers, medical records, or other sensitive material. A verified contact route and any legally required business address will be published before covered live processing begins.
Data, purposes, and legal bases
The following describes the present site and the limited categories Breauti reasonably expects to use when the planned service is activated. A GDPR legal basis is relevant only where the GDPR applies.
| Category | Purpose | Likely GDPR basis | Current status |
|---|---|---|---|
| Site delivery and security data | IP address, browser or device information, requested URL, timestamps, referrer, and diagnostic or security events may be processed by a hosting or security provider to deliver and protect the site. | Legitimate interests in reliable and secure site operation; legal obligation when applicable. | Expected with public hosting; no advertising use. |
| Theme preference | Your Auto, Light, or Dark selection is stored in your browser so the appearance remains consistent. | Functional necessity and legitimate interests. | Stored locally on your device. |
| Breauti account profile | When you use Google sign-in, Breauti receives your Google-provided user identifier, name, email address, and profile image. Firebase Authentication manages the sign-in session, and Cloud Firestore stores a minimal profile and the Breauti product where the account was used. | Steps requested by you before a contract and legitimate interests in secure account access and a consistent cross-product identity. | Active and required before starting or preparing a Studio project request. |
| Request draft and attachments | The current intake lets you type project details, choose a preferred contact method, select local files, and prepare a copy or download. | No Breauti server processing while the local-only flow remains in place. | Not transmitted by the current site. |
| Future project and support records | Name, organization, contact details, project description, preferences, messages, files, decisions, approvals, and support history may be used to respond, scope work, perform a contract, and keep necessary business records. | Steps requested before a contract, contract performance, legitimate interests, consent where required, and legal obligations. | Not active; notice will be updated first. |
| Future workspace and billing records | Project messages, decisions, access events, subscription or payment-plan status, invoices, payment status, limited payment-method details, cancellations, refunds, disputes, and tax or accounting records may support the client workspace and billing. | Contract performance, legal obligations, and legitimate interests in security, fraud prevention, support, and legal claims. | The workspace and Stripe are not connected. |
Breauti does not plan to receive full payment-card numbers or card security codes. When payments open, those details should be entered only in the payment provider's secure interface.
Local storage, cookies, and links
The current site uses browser storage to remember appearance preferences and to maintain the Firebase Authentication session when you choose Google sign-in. On a compatibility page, it may preserve an unfinished local draft. The main hero intake keeps its current draft in the open page and does not submit it to Breauti. You can sign out through the Breauti account control and remove local data through your browser's site-data controls.
Breauti does not intentionally run non-essential analytics, advertising pixels, cross-site profiling, or marketing cookies on the current site. Because those technologies are absent, there is no separate cookie-consent banner. If optional analytics, advertising, or similar technology is introduced, Breauti will update this notice and provide consent or opt-out controls where required before activation.
References or links that you type into the intake stay within the local draft unless you copy, download, or otherwise share it. External websites have their own privacy practices, which Breauti does not control.
Recipients and international transfers
When the site is publicly hosted, ordinary technical data may be available to hosting, network, and security providers acting for Breauti. Information may also be disclosed to professional advisers, insurers, courts, regulators, or authorities when reasonably necessary to comply with law, protect rights, prevent fraud, or resolve a dispute.
Breauti uses Cloudflare for public hosting and Google Firebase Authentication and Cloud Firestore for optional account access and minimal profiles. Firestore account data is stored in the United States in the Dallas region. Breauti plans to use Stripe later for hosted payment and billing experiences, but Stripe is not connected to this site. Before any further integration is activated, Breauti will document the exact products and settings, restrict access, configure retention, and update this policy with the actual data flows. Provider-specific privacy information is available from Cloudflare, Firebase, Google, and Stripe.
Breauti is based in the United States. If GDPR-restricted data is transferred outside the European Economic Area, Breauti will use an available legal mechanism, such as an adequacy decision, Standard Contractual Clauses, or another permitted safeguard, and will assess supplementary protections where required.
Breauti does not currently sell personal information, share it for cross-context behavioral advertising, use it for targeted advertising, or profile people for decisions that produce legal or similarly significant effects.
Your privacy rights
EEA and UK rights
Where the GDPR or UK GDPR applies, you may have rights to access, correct, erase, restrict, or receive eligible personal data; object to certain processing; withdraw consent without affecting earlier lawful processing; and challenge qualifying solely automated decisions. These rights are not absolute and can depend on the data, purpose, legal basis, and a lawful exemption.
You may complain to the supervisory authority where you live, work, or believe a violation occurred. The European Data Protection Board lists EEA supervisory authorities.
United States state rights
Where an applicable U.S. state privacy law covers Breauti and the processing, residents may have rights to know or access personal information, correct inaccuracies, delete eligible information, obtain a portable copy, opt out of qualifying sale, sharing, targeted advertising, or certain profiling, appeal a denied request, and exercise rights without unlawful discrimination. An authorized agent may act where the applicable law permits and the authorization can be verified.
Breauti will honor legally required browser preference signals if it begins a covered sale, sharing, or targeted-advertising practice. No such practice is active today. Breauti may request proportionate information to verify a rights request and may retain records needed to document the request, prevent fraud, comply with law, or establish or defend legal claims.
Retention, security, children, and changes
Breauti uses purpose-based retention. Browser-local preferences remain until you or the browser remove them. When communication, project, account, and billing systems are activated, records will be kept only as long as reasonably needed for the relationship, service delivery, security, taxes, accounting, disputes, legal claims, or another disclosed purpose. A documented production retention schedule will be completed before launch.
Breauti will use reasonable administrative and technical safeguards appropriate to the information it handles, limit production access by role, and require relevant service providers to protect data under their control. No online system is completely secure, and browser-local information is also subject to your device, browser, synchronization, and backup settings.
The public Studio site is intended for adults and organizations, not children. Education organizations may later use products built by Studio in contexts involving students or families; those customer systems require project-specific roles, notices, agreements, permissions, and safeguards. This Studio marketing policy does not replace those obligations.
Breauti will update this policy before live messaging, checkout, subscriptions, analytics, expanded account data, or other materially different processing begins. Material changes will receive a new effective date and, where appropriate, a prominent notice.