Privacy policy
Bracecast Technology Inc. (“Bracecast”, “we”) makes Bracecast, a document generation product for Microsoft Dataverse. This policy explains what personal information we handle and why.
This website
bracecast.io uses Google Tag Manager and Google Analytics to count visits and see which pages are read. It sets first-party cookies and collects pages viewed, the referring site, browser and device type, and approximate location. Google does not receive your name or email address, and we use no advertising features or trackers. You can block it with your browser’s cookie or tracking settings, or with Google’s opt-out add-on. Google processes this data in the United States and keeps it for no more than 14 months. If you request early access or email us, we keep your name, email address, company and message so we can reply and tell you when Bracecast is available. You can ask us to delete them at any time.
Early-access requests are stored in Microsoft Azure in Canada, and a copy is emailed to our sales team. We keep them until you ask us to delete them.
The Bracecast product
Bracecast processes data from your Dataverse environment only to render the documents you ask for. We act as a processor on your behalf, and you remain the controller of that data.
- Document data is read inside your Dataverse environment and sent to our renderer for a single request. It is processed in memory and is never stored, logged or used to train models.
- Account data: your organisation name, environment IDs, admin contact details and subscription.
- Usage data: render counts, timings, sizes and IDs, used for billing, limits and reliability.
- AI composer: when you use it, your prompt, the template you’re editing, its data structure and synthetic sample data are sent to our AI provider in the United States to draft a template. Real record data is sent only if an admin allows it, and only for the roles they choose. The provider’s terms forbid training on your data.
Where data is processed
Bracecast runs on Microsoft Azure in Canada, with the United States as a second region. Our subprocessors are:
- Microsoft (Azure): hosting, rendering, storage of account and usage records (Canada, United States).
- Stripe: subscription billing (United States).
- Anthropic: ai composer requests, only when a customer uses it (United States).
How long we keep it
Document data: not retained. Usage records: as long as needed for billing and for the periods tax law requires. Account and early-access data: until you ask us to delete it or close your account.
Your rights
You can ask to see, correct, export or delete personal information we hold about you, and you can complain to the Office of the Privacy Commissioner of Canada or your local authority. We reply within 30 days.
Contact
Email info@bracecast.io. We will post changes to this policy on this page with a new effective date.