Legal
Privacy Policy
Last updated: · Brazen BV · KvK 83241740
Manage cookie settings? Go to our cookie policy
1. Data Controller
Brazen BV - Iepenlaan 108, 2061 GN Bloemendaal, Netherlands · CoC: 42006676
Email: privacy@brazen.nl · Phone: +31 23 36 99 075
2. Personal data we process
2.1 Contact form
- First and last name
- Email address
- Phone number (optional)
- Company name (optional)
- Message content
2.2 Website usage (analytics consent required)
- Anonymised IP address
- Pages visited and click behaviour
- Device and browser type
- Session duration and page views
2.3 Marketing & retargeting (marketing consent required)
- Ad interactions (clicks, impressions)
- Conversion events
- LinkedIn profile data for matched audiences (pseudonymised)
3. Legal bases (GDPR art. 6)
| Processing | Legal basis |
|---|---|
| Contact form handling | Contract performance (art. 6(1)(b)) |
| Google Analytics 4 | Consent (art. 6(1)(a)) |
| Google Ads / LinkedIn Ads | Consent (art. 6(1)(a)) |
| HubSpot CRM | Legitimate interest (art. 6(1)(f)) |
| Functional cookies | Legitimate interest (art. 6(1)(f)) |
4. Retention periods
| Data | Retention |
|---|---|
| Contact form messages | 2 years after last contact |
| Google Analytics 4 | 14 months |
| HubSpot CRM | 3 years after last interaction |
| Consent records | 3 years (audit requirement) |
| Financial records | 7 years (statutory) |
5. Third parties and processors
| Party | Role | Country | Transfer basis |
|---|---|---|---|
| Google LLC (Analytics & Ads) | Processor | US | SCC + Data Privacy Framework |
| LinkedIn Ireland Unlimited | Processor | IE / US | SCC |
| HubSpot Inc. | Processor | US | SCC + Data Privacy Framework |
| Vercel Inc. | Processor (hosting) | US | SCC + Data Privacy Framework |
| Sanity.io | Processor (CMS) | US | SCC |
6. Your rights
Submit requests to privacy@brazen.nl. We respond within 30 days. Withdraw cookie consent at any time via our cookie policy.
- Access (art. 15) — request what data we hold
- Rectification (art. 16) — correct inaccurate data
- Erasure (art. 17) — request deletion of your data
- Restriction (art. 18) — temporarily halt processing
- Objection (art. 21) — object to legitimate interest processing
- Portability (art. 20) — receive data in machine-readable format
You may lodge a complaint with the Dutch Data Protection Authority.
7. Security
All connections are encrypted via HTTPS (TLS 1.3). Vercel Inc. is ISO 27001 certified and SOC 2 Type II audited.
8. Automated decision-making
We do not use fully automated decision-making as described in GDPR article 22.
9. Minors
Our website targets business users and is not directed at persons under 16 years of age.
10. Changes
We reserve the right to update this policy. The date at the top of this page indicates the most recent version.
11. Contact
Brazen BV - Iepenlaan 108, 2061 GN Bloemendaal · privacy@brazen.nl · +31 23 36 99 075
Browser Extension — Brazen Trace
Brazen Trace is a Chrome browser extension used internally by Brazen for GEO (Generative Engine Optimization) research. The extension analyzes how brands and products appear in AI-generated responses.
What data is collected
When the extension is active, the following data is captured:
- The AI platform used (e.g. ChatGPT, Gemini, Perplexity)
- The query (prompt) entered by the user
- The response generated by the AI platform
- Brand and product names detected in the response
- URLs cited in the response
The extension does not collect passwords, browsing history outside of AI platforms, personal identification data, cookies, or financial information.
Storage and security
Data is transmitted to Brazen's backend hosted on Supabase in the European Union (Frankfurt, Germany). Data is encrypted in transit (TLS) and at rest. Access is restricted to authorized Brazen personnel only.
How data is used
- Analysis of brand visibility in AI-generated responses
- GEO research and benchmarking
- Anonymized client reporting
- Data is never sold, shared with third parties for advertising purposes, or used for profiling
Data retention
Data is retained for as long as needed for active research and client engagements. Users may request deletion of their data at any time.
Your rights
Under the GDPR, you have the right to access, correct, or delete your personal data. You may withdraw consent at any time by uninstalling the extension. Contact: peter@brazen.nl.
Legal basis
Legitimate interest (Article 6(1)(f) GDPR) for internal research tooling. For any external participants: explicit consent.