Privacy Policy

Braxik (braxik.com) is operated by Braham, an individual based in Bengaluru, Karnataka, India. For the purposes of the EU/UK GDPR we are the data controller for the personal data described in this policy; under India's Digital Personal Data Protection Act, 2023 we are the Data Fiduciary.

You can reach us about anything in this document at support@braxik.com. We aim to respond within 7 business days, and we do not require you to create an account in order to exercise any right described in section 10.

We are deliberately built to need very little. Most visitors give us nothing beyond an anonymous page view.

• To run the service — serving pages, keeping you signed in, and storing work you asked us to save.
• To answer your AI questions — see section 06 for exactly what is sent and to whom.
• To prevent abuse — rate limiting the AI assistant so a small number of visitors cannot exhaust it for everyone.
• To understand which tools are used and which are not worth maintaining. Aggregate only.
• To take payment for a paid plan, if you buy one.
• To show advertising through Google AdSense, subject to your cookie choice.

Legal bases (EU/UK GDPR). Running the service and preventing abuse rest on our legitimate interests and, where you have an account, on performance of a contract. Analytics and advertising rest on your consent, which you give or withhold in the cookie banner and can change at any time. Under the DPDP Act, the equivalent basis for analytics and advertising is your consent, and for account and payment data it is the purpose for which you provided it.

We do not sell your personal data, and we do not share it with third parties for their own marketing.

Cookies that are not strictly necessary are denied by default. Nothing in the Analytics or Advertising rows below is set until you accept them in the banner. We record your choice using Google Consent Mode v2, so Google's own scripts also receive the signal.

The first-party entries are stored in your browser's localStorage, not as cookies — they never travel to our servers with a request. They exist purely so the site remembers your theme, your cookie choice and your last input.

Braxik is funded by advertising served by Google AdSense. Third-party vendors, including Google, use cookies to serve ads based on a user's prior visits to this website or other websites.

• Google's use of advertising cookies enables it and its partners to serve ads to you based on your visit to this and other sites. You can opt out of personalised advertising at Google Ad Settings.
• Details of how Google uses data when you use our site are at policies.google.com/technologies/partner-sites, and how Google uses cookies in advertising at policies.google.com/technologies/ads.
• You can opt out of third-party vendor cookies more broadly at optout.aboutads.info (DAA) or optout.networkadvertising.org (NAI).
• If you are in the EEA or the UK, no advertising cookie is set and no advertising identifier is used until you accept the Advertising category in our banner.

Tool pages have an optional Ask AI assistant, and the Spring Architecture Explorer can answer questions about a project you have opened. These are the only features that send the content you are working on off your device, and neither one runs until you ask it to.

What we keep. If you are signed in, your conversation is stored so you can return to it, and it is stored encrypted — our database holds ciphertext and cannot read the contents. Separately we log the fact that a request happened, which tool it came from and what it cost us to serve; that log deliberately stores no question and no answer. Anonymous use is metered against a hashed identifier, not an account.

Accuracy. AI answers can be wrong. Check anything that matters before relying on it. See the Disclaimer.

Google's handling of data submitted to Gemini is described at policies.google.com/privacy.

These providers process data on our behalf or receive it as part of delivering the site. Each is governed by its own privacy policy.

• Google Gemini (Google LLC)Generates AI assistant answers. Receives the page content you explicitly submit. See section 06.
• Google AdSense (Google LLC)Serves advertising. Receives advertising cookies and identifiers only after you accept them.
• Google Analytics (Google LLC)Aggregate usage statistics. Runs only after you accept analytics cookies. You can also opt out at tools.google.com/dlpage/gaoptout.
• Google Sign-In (Google LLC)Optional authentication. If you use it, Google shares your name, email address and profile picture with us.
• Razorpay Software Private LimitedPayment processing for paid plans. Card, UPI and bank details go directly to Razorpay and are never seen or stored by us.
• Formspree, Inc.Delivers messages sent through our contact form. Receives the name, email address and message you type into that form.
• Cloudflare, Inc.CDN, DNS, TLS and DDoS protection. Processes request metadata, including your IP address, in order to route and protect traffic.

• Account data — for as long as your account exists. Deleted within 30 days of you closing it.
• Saved work — until you delete it, or until your account is closed.
• AI conversations — stored encrypted while your account exists; deleted with the account.
• Usage and cost logs — retained in aggregate. They contain no question or answer text.
• Hashed IP records used for rate limiting — rolling window, then discarded.
• Payment records — retained as long as Indian tax and accounting law requires.
• Analytics — retained by Google according to the retention period configured in Google Analytics.

The site is served exclusively over HTTPS. Saved work and AI conversations are encrypted at rest. Passwords are stored only as salted hashes. Administrative access to production data is restricted to the operator.

Because most tools never transmit your input at all, the most effective security control on this site is architectural: data that is never sent cannot be breached. Where data is sent — the AI assistant and Save — section 06 describes it honestly rather than claiming otherwise.

No method of transmission or storage is completely secure. We take reasonable and appropriate measures, and we will notify affected users and the relevant authority without undue delay if a breach occurs that is likely to result in a risk to your rights.

Depending on where you live, you have some or all of the following rights. We apply them to everyone regardless of location, because maintaining two standards is how mistakes happen.

• Access — a copy of the personal data we hold about you.
• Correction — fix anything inaccurate or incomplete.
• Deletion — erase your account and everything attached to it.
• Portability — receive your data in a machine-readable format.
• Withdraw consent — for analytics and advertising, at any time, via cookie preferences.
• Object or restrict — to processing based on our legitimate interests.
• Nominate — under the DPDP Act, nominate someone to exercise your rights if you are unable to.
• Complain — to your local supervisory authority, or to the Data Protection Board of India.

To exercise any of these, email support@braxik.com. We will not charge you, and we will not ask you to create an account to make the request.

We are based in India. Several of the providers listed in section 07 — Google, Cloudflare and Formspree among them — operate globally, so your data may be processed outside your country, including in the United States.

Where data of EEA or UK users is transferred, it is done under the European Commission's Standard Contractual Clauses or another approved transfer mechanism operated by the provider concerned.

Braxik is a professional developer tool and is not directed at children. We do not knowingly collect personal data from anyone under 18, and account creation is not intended for them. If you believe a child has provided us personal data, contact support@braxik.com and we will delete it promptly.

We update this policy when the product changes — this version exists because the AI assistant made the previous one inaccurate. When we make a material change we update the "Last updated" date at the top, and where the change affects what we do with data you have already given us, we will ask for your consent again rather than assume it.