Brandixo logo Brandixo
Legal Document

Privacy & Data Stewardship

Our commitment to your data is structured like a technical specification: transparent, auditable, and free of dark patterns. We process data only where necessary, and we treat your app's user data with the same respect we expect for our own.

Executive Summary

  • Data is processed only for core app functionality and essential analytics.
  • Third-party SDKs are vetted and listed with their specific data usage.
  • You retain full control to request, download, or delete your data at any time.

Our Data Handling Philosophy

Brandixo's applications are built for game developers and interactive creators. Consequently, the data we handle is often directly tied to your creative process: crash reports, performance metrics, asset references, and user engagement patterns within your own apps. We view this not as "our data," but as your tooling artifacts in our custody.

Our infrastructure follows a principle of Data Minimization. We collect only what is required to diagnose technical issues, improve core stability, and deliver the specific feature you've activated. For example, the memory usage data required to debug a performance leak is stripped of any user identifiers before being stored on our servers.

"In app development, telemetry is either actionable or noise. We optimize for actionable signal while aggressively filtering user-centric identifiers at the source."

- Brandixo Infrastructure Lead

Data Flow & Purpose

Analytics Flow

Analytics Telemetry

Crash logs, frame rates, memory usage. Stripped of PII before transmission. Stored for 30 days.

User Account

User Account

Email, username. Used for authentication and subscription management. Encrypted at rest.

Cloud Sync

Cloud Sync

Project settings, license keys. End-to-end encrypted. Optional feature, user-controlled.

Storage

AWS (Frankfurt, EU). Encrypted at rest (AES-256) and in transit (TLS 1.3). No third-party cloud storage providers.

Retention

30 days for telemetry. 7 years for core account data (legal compliance). You can purge your data via account settings anytime.

Third Parties

Payment processing (Stripe), Email delivery (Postmark). No ad networks. No data brokers. View full SDK list.

Your Data Rights (No Fluff)

Access & Portability

Download your data as a structured JSON or CSV file.

Correction

Fix incorrect personal information.

Deletion

Erase your account and associated data.

Submit a Formal Request

For GDPR/CCPA requests or data inquiries, use this form. We will verify your identity via the email associated with your account.

Response time: 1-3 business days.

Transparency Log & Common Pitfalls

Policy Version History
Updated Third-Party SDK List

Added Postmark for email delivery. Removed deprecated analytics SDK (v1.4.2).

Clarified Retention Periods

Explicitly stated 7-year compliance retention for invoice data.

Initial Policy Release

Foundation established for Brandixo privacy framework.

Developer Note: Avoiding Anti-Patterns

We deliberately avoid "dark patterns" like pre-checked consent boxes or confusing jargon. Our consent request is a single, clear statement: "Send crash reports to improve stability?" with a "Yes/No" choice.

Risk: Third-Party Audit

We are not currently SOC 2 Type II certified. For enterprise contracts requiring this, we partner with a certified auditing firm. Contact legal@brandixo.space for the latest audit report.

Contact Our Data Protection Officer

For urgent concerns or formal legal requests, contact our DPO directly.

Address Via Roma 123
00100 Roma, Italy
Hours Mon-Fri: 9:00-18:00 CET