Privacy Policy

The data controller for brevio.pro is RMB ventures, based in Porto, Portugal (EU). Contact: [email protected].

When you use any tool on brevio.pro — PDF tools, image tools, calculators, converters, games, or any other tool — your files are processed exclusively by your browser's JavaScript engine. No file content, document data, image data, or metadata derived from your files is ever transmitted to our servers. Our server infrastructure has no endpoint designed or capable of receiving file content.

We do not collect: personal identifiers, names, email addresses, passwords, payment information, or any account data. The Service requires no registration and holds no user accounts.

Analytics (Google Analytics 4): your explicit consent, pursuant to GDPR Article 6(1)(a). You may withdraw consent at any time by clearing your browser's localStorage for brevio.pro (open your browser's developer tools → Application → Local Storage → delete the brevio-consent key) and reloading the page. Withdrawal does not affect the lawfulness of processing before withdrawal.

Advertising (Google AdSense): your explicit consent via the Funding Choices CMP, pursuant to GDPR Article 6(1)(a) and the IAB TCF 2.x framework.

Vercel access logs: legitimate interest in operating, securing, and maintaining the Service (GDPR Article 6(1)(f)), limited to the minimum retention period required for security monitoring.

Aggregated Google Analytics data is used solely to understand usage patterns (which tools are popular, which geographies use the Service) and to improve the Service. We do not use it for advertising, behavioural profiling, or any purpose beyond Service improvement.

We do not sell, rent, or trade your data to any third party. Ever.

We do not set any first-party cookies. With your consent, our advertising partner Google may set third-party cookies for ad personalisation and measurement. Our consent banner uses localStorage, not cookies. Google Analytics 4 may set first-party cookies (e.g. _ga) to distinguish users when you accept analytics. If you have accepted analytics and any future advertising partner requires additional cookies, we will obtain your explicit prior consent before setting them.

Ad consent for EEA visitors is managed by Google Funding Choices, an IAB TCF 2.x certified Consent Management Platform. You can review or withdraw your ad consent preferences at any time using the "Privacy settings" link in the footer.

Google Analytics 4 transfers analytics data to Google LLC in the United States. Google relies on Standard Contractual Clauses (SCCs) adopted by the European Commission for this transfer. Vercel operates a global edge network; requests may be served by nodes outside the EU/EEA. Since no personal file content is involved and standard access log data is minimal, the privacy impact of any such transfer is low. We rely on Vercel's Standard Contractual Clauses for any transfers.

Google Analytics data is retained according to Google's data retention settings (default 14 months), after which it is deleted automatically. Your localStorage consent preference remains on your device until you clear it. Vercel access logs are retained per Vercel's own retention policy (typically a short rolling window).

The Service is not directed at children under 16 years of age. We do not knowingly collect personal data from children under 16. If you believe that a child under 16 has provided personal data to us, please contact us at [email protected] and we will take steps to delete such data promptly.

Under the General Data Protection Regulation (GDPR), if we process personal data about you, you have the following rights:

• Right of access — to obtain confirmation of whether we process personal data about you and, if so, to receive a copy.
• Right to rectification — to have inaccurate personal data corrected.
• Right to erasure — to request deletion of your personal data where there is no lawful basis for continued processing.
• Right to restriction — to request that we restrict processing under certain conditions.
• Right to data portability — to receive personal data you have provided to us in a structured, commonly used, machine-readable format.
• Right to object — to object to processing based on legitimate interests.
• Right to withdraw consent — where processing is based on consent, to withdraw it at any time without affecting the lawfulness of prior processing.

Because we collect no personal data relating to files or user identity, and because analytics data is non-personal and aggregated, most of these rights have limited practical application for our Service. You may exercise any right by contacting us at [email protected].

You also have the right to lodge a complaint with the Portuguese Data Protection Authority (Comissão Nacional de Proteção de Dados, CNPD) at cnpd.pt if you believe we have infringed your rights under applicable data protection law.

We use Google AdSense (publisher ID: ca-pub-5928216994039002) to display advertisements on brevio.pro. Ad personalisation and consent management is handled by Google Funding Choices, which acts as our IAB TCF 2.x Consent Management Platform (CMP). When you first visit the site, Funding Choices presents you with a consent dialogue for ad personalisation. You may withdraw or change your ad consent choices at any time by clicking Privacy settings in the page footer.

If you decline personalised ads, Google will serve contextual ads only — based on the content of the page, not your browsing history or personal profile. No behavioural tracking cookies are set without your explicit consent via the Funding Choices CMP.

Google's use of advertising data is governed by the Google Privacy Policy.

The Service is served exclusively over HTTPS. Because no personal file data reaches our servers, the attack surface for a data breach involving your files is zero by design. Aggregate Google Analytics data is stored within Google's infrastructure and subject to Google's own security controls.

We may update this Privacy Policy from time to time to reflect changes in the Service, applicable law, or our data practices. Material changes will be reflected in an updated effective date at the top of this page. We encourage you to review this page periodically. Continued use of the Service after changes constitutes acceptance of the revised policy.

For privacy enquiries or to exercise your GDPR rights, contact us at [email protected].

For general enquiries about the Service, use the same address.