Legal
Last updated: April 12, 2026
Brevlo is operated by Haris (sole proprietor, Ontario, Canada). This Privacy Policy describes how we collect, use, store, and disclose personal information when you use the Brevlo platform at brevlo.app. We comply with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws.
For privacy questions, contact us at privacy@brevlo.app.
We collect the following categories of personal information:
Account Information
Name, email address, phone number, brokerage name, and billing details when you create a Brevlo account.
CRM and Lead Data
Lead contact information (name, email, phone), property interests, budget ranges, and conversation history imported from your CRM (e.g. Follow Up Boss) or uploaded manually. This data belongs to you and is processed on your behalf.
Communication Logs
Records of all emails and SMS messages sent through Brevlo, including delivery status, open events, and reply content.
Voice Profile Data
Sample emails or text provided by you to train Brevlo's AI on your communication style. This content is processed by Google Gemini.
Usage Analytics
Product usage events (feature interactions, session data) collected to improve the platform. No personally identifiable lead information is included in analytics events.
Technical Data
IP address, browser type, device identifiers, and error logs collected for security and reliability purposes.
We use your information to:
We do not use your data or your leads' data to train AI models for other customers. Voice profile training data is used solely to personalise your account's AI output.
We share personal information with the following processors who act under our instruction and are subject to data processing agreements:
| Processor | Purpose |
|---|---|
| Supabase | Database and authentication (servers in USA) |
| Resend | Transactional email delivery |
| Twilio | SMS delivery and 10DLC registration |
| Google / Gemini | AI message generation and voice profiling |
| Vercel | Application hosting (servers in USA) |
| Sentry | Error tracking and performance monitoring |
| LemonSqueezy | Subscription billing and payment processing |
| Upstash | Redis caching for subscription status |
Brevlo uses only essential cookies required for authentication and session management. We do not use tracking cookies, advertising cookies, or third-party analytics cookies. You can disable cookies in your browser settings, but this will prevent you from logging in to the platform.
We retain your account data and lead conversation history for the duration of your active subscription. Upon account deletion, data is retained for 90 days to allow recovery, then permanently deleted.
Opt-out and consent records (including tombstone records for Virginia SB 1339 compliance) are retained for 10 years as required by law, regardless of account deletion.
Billing records are retained for 7 years as required by Canadian tax law.
Under PIPEDA, you have the right to:
To exercise these rights, email privacy@brevlo.app. We will respond within 30 days.
We protect your data with industry-standard security measures including:
Despite these measures, no system is 100% secure. In the event of a data breach that creates a real risk of significant harm, we will notify affected individuals and the Office of the Privacy Commissioner of Canada as required by PIPEDA.
Your data is primarily stored in the United States (Supabase, Vercel) and processed by services in the USA (Google, Twilio, Resend). These transfers are made subject to appropriate safeguards. By using Brevlo, you consent to these transfers.
Brevlo is not directed to persons under 18 years of age. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, contact us immediately at privacy@brevlo.app.
We do not sell, rent, or trade your personal information or your leads' personal information to any third party for their marketing purposes. Ever.
We may update this Privacy Policy from time to time. Material changes will be communicated by email at least 30 days before they take effect. The updated policy will always be available at brevlo.app/privacy.