Privacy Policy

1. Information we collect

Account and profile information

We collect information used to create and maintain your account, such as your name, email address, username, organization or workspace identifiers, subscription tier, and authentication provider identifiers. If you sign in with Google or Slack, we receive the profile information you authorize those providers to share.

Connected point-of-sale and business data

When you connect a supported point-of-sale provider, such as Skybox, Lysted, or TicketVault, we process the connection details and credentials needed to access your account. We may retrieve and process inventory, purchases, sales, listings, pricing, event, venue, profit, and related business data so Broker Copilot can provide answers, analysis, reports, and alerts.

Prompts, chats, files, reports, and automations

We collect the questions, instructions, files, feedback, chat history, report definitions, and automation settings you submit, together with the responses and other content the Service generates. If you configure a delivery channel, we also process the recipient or destination information needed to deliver the requested output.

Subscription and transaction information

We collect subscription status, plan, credit usage, billing identifiers, and transaction history. Payment card details are collected and processed by our payment processor; we do not store complete payment card numbers.

Chrome extension information

The extension checks whether the active browser tab is on a supported Skybox or Lysted domain so it can display the Broker Copilot interface. It uses a signed, expiring authentication token to connect to your Broker Copilot account. The extension does not collect your Broker Copilot password and does not read or transmit the contents of the Skybox or Lysted webpage. POS data is accessed through the connections you authorize in Broker Copilot, not by scraping page content.

Device, usage, and diagnostic information

We may automatically collect IP address, browser and device type, operating system, referring page, timestamps, pages or features used, cookie and session identifiers, error reports, and security or performance logs. We use this information to operate, secure, debug, and improve the Service.

Communications

We collect information you provide when you contact support, request a demo, respond to a survey, or otherwise communicate with us.

2. How we use information

We use information to:

• Provide, authenticate, maintain, and improve the Service.
• Connect to the POS accounts and other integrations you authorize.
• Generate answers, analysis, charts, reports, automations, and requested deliveries.
• Manage subscriptions, credits, billing, and customer support.
• Monitor performance, prevent fraud or abuse, and protect users and the Service.
• Communicate service, security, product, and administrative updates.
• Comply with law and enforce our agreements.

Where applicable, we process information to perform our contract with you, pursue legitimate interests such as securing and improving the Service, comply with legal obligations, and act with your consent when required.

3. AI processing

Broker Copilot sends relevant prompts, connected data, and conversation context to AI systems and service providers to generate requested outputs. Generated results may be inaccurate and should be reviewed before you rely on them. We do not use information received through the Chrome extension for personalized advertising or to determine creditworthiness, lending, insurance, employment, housing, or other high-impact eligibility decisions.

4. How we disclose information

We may disclose information:

• To service providers that host infrastructure, process payments, provide authentication, deliver communications, support integrations, monitor errors, or provide AI and data-processing services on our behalf.
• To connected services and destinations when you authorize an integration or ask us to deliver content through email, Slack, Discord, a webhook, or another channel.
• For legal and safety reasons when required by law or when reasonably necessary to protect rights, safety, security, and the integrity of the Service.
• In a business transaction involving a merger, financing, acquisition, reorganization, or sale of all or part of our business, subject to appropriate safeguards.
• At your direction or with your consent.

5. Chrome Web Store Limited Use

Our use and transfer of information received from Google APIs and the Broker Copilot Chrome extension complies with the Chrome Web Store User Data Policy, including its Limited Use requirements. We use extension data only to provide or improve the extension's user-facing features, for security, to comply with law, or as otherwise permitted by that policy. We do not use or transfer extension data for personalized advertising or sell it to third parties.

6. Data retention

We retain information for as long as reasonably necessary to provide the Service, maintain your account, fulfill the purposes described in this policy, resolve disputes, enforce agreements, and meet legal, accounting, and security obligations. Retention periods vary by data type and context. Deleting your account may not immediately remove information from backups or records we must retain by law, but we will limit further use of retained information.

7. Security

We use administrative, technical, and organizational safeguards designed to protect information, including encrypted network connections, access controls, and scoped authentication tokens. No system can guarantee absolute security, so you should protect your account credentials and notify us promptly if you believe your account has been compromised.

8. Your choices and privacy rights

You can disconnect integrations, sign out of the extension, manage certain account settings, and opt out of non-essential marketing communications. Depending on where you live, you may have rights to request access to, correction of, deletion of, or a copy of your personal information, or to object to or restrict certain processing. We may need to verify your identity before fulfilling a request, and some exceptions may apply.

To make a privacy request or request account deletion, email contact@brokercopilot.io.

9. International data transfers

We and our service providers may process information in the United States and other countries. Where required, we use appropriate safeguards for transferring personal information across borders.

10. Children's privacy

The Service is designed for business users and is not directed to children under 18. We do not knowingly collect personal information from children under 18. If you believe a child has provided us personal information, contact us so we can take appropriate action.

11. Changes to this policy

We may update this Privacy Policy as our practices or legal requirements change. We will post the updated policy here and revise the effective date. If changes are material, we may provide additional notice through the Service or by email.

12. Contact us

For questions or requests about this Privacy Policy, contact us at contact@brokercopilot.io.