Privacy Policy

Who we are

This website is operated by Braiventh, based in Belgium. We are the controller for the personal data described here. For any privacy question, or to exercise any of the rights set out below, contact [email protected] or call +32 470 57 89 22.

This policy covers braiventh.com. It does not cover our clients' own websites or systems, or the separate policy for our Household AI Planner app. Cookies and similar browser storage are explained in more detail in our cookie policy.

The short version

This is a small marketing website, and it is deliberately built to collect very little. There are no visitor accounts, no registration, no comments, no advertising, and no tracking across other websites. The contact form never sends anything to our servers, and the chat assistant runs on our own hardware instead of a third-party AI provider.

When you contact us

The contact form on this site does not submit your details to us over the internet. When you press send, your browser opens your own email program with the information already written into a message addressed to us. Nothing is stored on this website, and nothing is transmitted until you choose to send that email yourself, through your own email provider.

Once your message arrives, we receive what you chose to share: your name, email address, company name, an indication of budget if you selected one, and the content of your message. We use it to answer you and, if we start working together, to deliver the agreed work. We do not sell it, and we do not share it with third parties for marketing purposes.

When you use the chat assistant

The assistant in the corner of the site answers questions about our services. When you send a message, the text of that message, a randomly generated conversation identifier, and the address of the page you are reading are sent to this website's server and forwarded to our automation platform (n8n), which runs the language model. The page address is there so the assistant can tell what a short question is about; it is not used to identify you.

Both of those run on our own self-hosted infrastructure. Your conversation is not sent to OpenAI, Anthropic, Google, or any other external AI provider, and it is not used to train anyone's model. That is a deliberate design decision, and it is the same approach we offer clients who need AI without handing their data to a third party.

We keep a copy of the conversation. The last ten messages of each chat, yours and the assistant's, are stored on that same self-hosted platform next to the conversation identifier. That copy does two jobs: it lets the assistant follow the thread across your questions, and it lets us read back where it answered badly and improve it. That is the only thing those copies are used for. They are not sold, not shared with anyone else, and not used to train any external provider's model. We keep them for 90 days and then delete them automatically. Our lawful basis is our legitimate interest in running and improving our own assistant.

The conversation identifier is a random value with no meaning outside the chat. It is created only when you send your first message, is stored in your browser's session storage, and disappears when you close the tab. Please treat the assistant as a public channel: it is there for general questions, so do not send confidential business information, special category data, or anyone else's personal details through it. To share something sensitive, email us instead.

When you simply browse

This site is delivered through Cloudflare, which acts as a content delivery network and security layer in front of our server. To route and protect the connection, Cloudflare necessarily processes technical data such as your IP address, the page requested, your browser and device type, and the approximate region you connect from.

We use Cloudflare Web Analytics to see how many people visit and which pages are read. It is a deliberately privacy-preserving choice: it sets no cookies, stores nothing on your device, does not fingerprint your browser, and cannot follow you to other websites. The reports we see are aggregated counts of page views, referrers, countries, and device categories. We cannot identify you from them.

The website fonts are served from this domain rather than fetched from Google, so loading a page does not send a request to a font provider.

Rate limiting and abuse prevention

To stop the chat assistant and the private admin login from being abused, our server counts requests using the IP address that the request arrives with. Those counters live in the server's memory only, hold a count rather than any content, expire within minutes, and are cleared whenever the site restarts. They are used to throttle traffic and for nothing else: we do not build visitor profiles from them, and we do not treat them as a way to identify you.

Cookies and similar technologies

We use only cookies and browser storage that are strictly necessary to run the site, plus, if you agree to them, optional cookies for statistics. Strictly necessary items do not require your consent; anything else is loaded only after you choose it, and you can change or withdraw that choice at any time. No marketing or advertising cookies are used on this site. The full list, with names and lifetimes, is in our cookie policy.

Why we are allowed to do this

Under the GDPR we rely on the following legal bases:

• Steps taken at your request (Article 6(1)(b)) to answer an enquiry you send us and to prepare or perform an agreement with you.
• Legitimate interests (Article 6(1)(f)) to keep the website available and secure, to prevent abuse, and to understand in aggregate how the site is used through cookieless analytics. We consider this a low-impact use because no profiles are built and no one is tracked across sites.
• Your consent (Article 6(1)(a)) for any non-essential cookie or similar technology, which you can withdraw at any time without affecting what happened before you withdrew it.
• Legal obligation (Article 6(1)(c)) where Belgian accounting, tax, or other law requires us to keep records relating to a client engagement.

Who else is involved

We keep the number of parties involved deliberately small:

• Cloudflare delivers and protects the site and provides the cookieless analytics described above.
• Our own server infrastructure hosts this website, the chat proxy, the automation platform, and the language model behind the assistant. This infrastructure is operated by us and located in Belgium, which is why your chat messages never reach an external AI provider.
• Our email provider receives the messages you send us, in the same way it would receive any other email.

We may also share information with professional advisors or authorities where the law requires it. We do not sell personal data, and we do not share it for anyone else's marketing.

Transfers outside the EEA

Our own servers and the AI assistant behind them stay under our control. Cloudflare is a global provider whose parent company is based in the United States, so routing and security processing may take place outside the European Economic Area. Such transfers rely on the European Commission's Standard Contractual Clauses and the additional safeguards in the relevant provider agreement. If you would like details of the safeguards in place, ask us and we will share them.

How long we keep it

Enquiry emails are kept as long as needed to respond and, where a working relationship follows, for the duration of that relationship plus any period required by Belgian accounting or legal obligations. Rate-limiting counters expire within minutes. Chat conversations are kept on our own infrastructure for 90 days and then deleted automatically, and the conversation identifier is erased by your browser when you close the tab. Analytics data is aggregated and retained by Cloudflare on its own schedule; it does not identify you. Any consent choice you make is stored for 6 months or until you change it.

Keeping it secure

The site is served over HTTPS, the private admin area is protected by a signed, httpOnly session cookie and a login throttle, and access to the underlying infrastructure is limited to us. No system is perfectly secure, but we apply measures appropriate to the very limited data this site handles.

Automated decisions and children

The chat assistant generates text, but no decision producing legal or similarly significant effects about you is made automatically. This site is aimed at businesses and is not directed at children, and we do not knowingly collect their data.

Your rights

Under the GDPR you can ask to access, correct, or delete the personal data we hold about you, ask us to restrict how it is used, object to processing based on our legitimate interests, request a portable copy of data you provided, and withdraw any consent you gave. Send a request to [email protected] and we will respond within one month, as the GDPR requires.

If you are not satisfied with our answer, you can lodge a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données), Drukpersstraat 35, 1000 Brussels, [email protected]. You may also complain to the supervisory authority where you live or work.

Changes to this policy

We update this page when the site or the way it handles data changes. The date at the top shows when it was last revised.