Bruhsome 🤙

1. Introduction

Bruhsome ("we," "us," or "our") operates the bruhsome.com website and related services (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

2. Information We Collect

2.1 Account Information

When you sign in with Google, we receive your name, email address, and profile picture from Google. We do not store your Google password.

2.2 Content You Create

We store occasion details (titles, recipient names, event dates), wishes (text, photos, videos, voice notes), and any other content you submit through the Service. Contributors who add wishes provide their name and optionally their email address.

2.3 Payment Information

Payments are processed by Stripe. We do not store your credit card details. We receive transaction identifiers and payment status from Stripe to manage your account.

2.4 Usage Data

We collect analytics data including pages visited, features used, device type, and browser information through PostHog. This helps us improve the Service. We use Sentry for error tracking to identify and fix issues.

2.5 Cookies

We use essential cookies for authentication (session management) and optional analytics cookies. You can control cookie preferences through your browser settings.

3. How We Use Your Information

To provide and maintain the Service
To process transactions and send transaction-related emails
To send notifications about occasion activity (e.g., new wishes added)
To generate scrapbooks, exports (PDF, video), and print books
To improve the Service through analytics and error reporting
To prevent fraud and ensure security

4. Data Storage & Security

Your data is stored on Google Cloud Platform (Cloud SQL for database, Cloud Storage for media files). We use encryption in transit (TLS) and at rest. Access to production systems is restricted to authorized personnel only.

5. Data Sharing

We do not sell your personal data. We share data only with:

Service providers: Google Cloud (hosting), Stripe (payments), Resend (email), Vercel (deployment)
Other users: When you contribute a wish, the occasion organizer and eventually the recipient can see your contribution and contributor name
Legal requirements: When required by law or to protect our rights

6. Your Rights (GDPR & CCPA)

You have the right to:

Access: Request a copy of your personal data
Rectification: Correct inaccurate personal data
Deletion: Request deletion of your personal data ("Right to be Forgotten")
Portability: Receive your data in a machine-readable format
Objection: Object to processing of your personal data
Withdraw consent: Withdraw consent for analytics cookies at any time

To exercise these rights, contact us at privacy@bruhsome.com. We will respond within 30 days.

7. Data Retention

We retain your account data for as long as your account is active. Occasion data and wishes are retained until the organizer deletes the occasion or requests account deletion. We retain payment records for 7 years as required by tax regulations.

8. Children's Privacy

The Service is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us immediately.

9. International Transfers

Your data may be processed in the United States where our servers are located. By using the Service, you consent to this transfer. We ensure appropriate safeguards are in place for international data transfers.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date.

11. Contact Us

If you have questions about this Privacy Policy, contact us at:
Email: privacy@bruhsome.com