Privacy Policy

Bram is a service provided by Upcloud Lda., registered at Rua Quinta de Belmonte 184, 3030-460 Coimbra, Portugal, VAT PT514564016.

For the purposes of the General Data Protection Regulation (GDPR), Upcloud Lda. is the data controller for personal data collected through the Bram service.

Privacy contact: info@steezy.eu

We collect and process the following categories of data:

• Identity data: name, mobile number (WhatsApp), email address (if provided).
• Professional activity data: job descriptions, quotes, invoices, job photos, customer information entered into the service.
• Message data: the content of messages exchanged with the Bram assistant via WhatsApp.
• Calendar and email data: if you connect your Google account, we access selected calendar events and emails solely to provide the service.
• Payment data: processed by Stripe — we do not store full card numbers or bank details.
• Technical data: IP address, browser type, web portal access logs.

Data is used to:

• Provide the Bram service: process messages, generate quotes and invoices, send reminders.
• Authenticate access to the tradesperson portal (bram.chat/login).
• Process payments and manage subscriptions.
• Improve the service through performance and error analysis.
• Comply with legal and tax obligations.

We do not sell personal data to third parties. We do not use your data for unsolicited marketing.

• Contract performance — processing necessary to provide the contracted service.
• Legitimate interests — error analysis and service improvement.
• Legal obligation — retention of tax and accounting documents.
• Consent — when you choose to connect your Google account (calendar and email).

We use the following sub-processors to operate the service:

• Meta Platforms (WhatsApp): delivery and receipt of WhatsApp messages.
• Anthropic: natural language processing via the Claude AI API.
• Supabase / Postgres: data storage (EU servers).
• Vercel: web portal hosting.
• Stripe: payment processing (PCI-DSS certified).
• Google: calendar and email integration (when authorised by you).
• Hetzner: server infrastructure (Frankfurt, Germany — EU).

All sub-processors are subject to data processing agreements in compliance with GDPR.

Some sub-processors (Anthropic, Meta, Stripe) process data outside the European Economic Area. These transfers are carried out under Standard Contractual Clauses approved by the European Commission or another valid transfer mechanism.

We retain data for as long as necessary to provide the service and comply with legal obligations:

• Account and job data: while the account is active and for 5 years after closure (tax obligations).
• Message logs: 12 months after the interaction.
• Payment data: 10 years (Portuguese tax legislation).

As a data subject, you have the right to:

• Access — obtain confirmation that we process your data and receive a copy.
• Rectification — correct inaccurate or incomplete data.
• Erasure — request deletion of your data in cases provided for under GDPR.
• Restriction — restrict processing in certain circumstances.
• Portability — receive your data in a structured, machine-readable format.
• Objection — object to processing based on legitimate interests.
• Withdrawal of consent — at any time, without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at info@steezy.eu. We will respond within 30 days.

You also have the right to lodge a complaint with the ICO (Information Commissioner's Office — ico.org.uk) or the CNPD (Portugal — cnpd.pt).

bram.chat uses Umami, a privacy-respecting analytics tool: it uses no cookies, does not track users across sessions, and collects no personally identifiable data. No cookie consent is required for this tool.

We implement appropriate technical and organisational measures to protect data against unauthorised access, loss or disclosure, including encryption in transit (TLS), secure authentication, and restricted database access controls.

We may update this policy periodically. For significant changes, we will notify active users via WhatsApp or email at least 14 days in advance. The latest version will always be available at bram.chat/privacy.

Upcloud Lda.
Rua Quinta de Belmonte 184, 3030-460 Coimbra, Portugal
VAT: PT514564016
info@steezy.eu