Branqo

Privacy Policy

Last updated: July 2026

At Branqo, your privacy is not a feature — it is a foundational principle. We designed every part of our system to minimize the data we collect, process it transparently, and give you full control over it. This Privacy Policy explains what data we collect, how we use it, and your rights regarding that data.

Your Code Stays Yours

  • Your code is never stored, logged, or used for training. Branqo operates as a local desktop application. Your repositories live on your machine, and we never upload, copy, or retain your source code on our servers.
  • AI features only send code diffs for processing. When you use AI-powered features such as commit message generation, code review, or conflict resolution, only the relevant code diff is sent to our AI proxy server. The diff is forwarded to the underlying LLM provider, processed, and the result is returned to your client. We do not store the diff or the response.
  • Secret Scanner redacts sensitive data before AI transmission. Before any code context is sent to our AI proxy, our built-in Secret Scanner automatically detects and redacts API keys, tokens, passwords, and other sensitive data patterns. The redacted content is replaced with placeholder tokens so the AI can still understand the code structure without ever seeing your secrets.

Data We Collect

We collect only what is necessary to provide and improve the service:

Account Information

When you create a Branqo account (required only for Premium features), we collect your email address and display name. If you sign in via GitHub or Google OAuth, we receive your name, email, and profile picture from the OAuth provider. We do not request access to your repositories through OAuth.

Device Identifier

The Branqo desktop application generates a one-way cryptographic hash (SHA-256) of your operating system's machine identifier. This hash cannot be reversed to reveal the original identifier. We use this hash to link your devices to your account for device management, trial eligibility verification, and abuse prevention. The hash is stored on our servers alongside your account data.

Usage Metrics (Anonymized)

We collect anonymized, aggregated usage metrics to understand how Branqo is used. This includes which features are used and how often, but never the content of your repositories. These metrics cannot be linked back to individual users. You can opt out of anonymous telemetry in Branqo's settings.

Payment Information

Payment processing is handled entirely by Stripe. We never see, store, or process your credit card numbers. We receive only a subscription status and billing identifiers from Stripe to manage your Premium subscription.

AI Usage Logs

For Premium users, we log metadata about AI actions (e.g., action type, timestamp, token count, cost) to calculate billing and populate your usage dashboard. These logs never contain the content of your code or the AI responses.

Error & Performance Monitoring

We use Sentry, a third-party error-monitoring service, to detect, diagnose, and fix crashes and performance problems. When something goes wrong, Sentry receives technical diagnostic data such as error details, performance metrics, and technical metadata (for example, your browser type and IP address). This data is processed within the European Union (Sentry's Germany region) under our legitimate interest in keeping Branqo reliable and secure. It is never used for advertising, never used to track you across websites, and never includes the content of your repositories.

Fraud Prevention & Compliance

To prevent fraudulent or abusive subscriptions, we process your approximate location (from your IP address) and your device and browser settings (such as your language preference), under our legitimate interest in protecting the service. Where required, we also process your billing details to comply with our tax and other legal obligations.

Data We Do Not Collect

  • No third-party tracking. We do not use Google Analytics, Facebook Pixel, or any third-party tracking scripts. Our website and application are free of advertising trackers.
  • No cookie banners needed. We only use strictly necessary cookies (e.g., session authentication). We do not use tracking cookies, so no cookie consent banner is required.
  • No selling of data. We will never sell, rent, or share your personal data with third parties for advertising or marketing purposes.

Data Retention

  • Account data is retained for as long as your account is active. You can delete your account at any time from your dashboard settings. Deletion is immediate and permanent — all personal data (email, name, profile picture, passwords, OAuth connections, and two-factor secrets) is irreversibly removed.
  • After account deletion, we retain a one-way cryptographic hash of your email address and device identifier to prevent abuse of our trial system. These hashes cannot be reversed to identify you. Anonymized billing records may be retained as required by applicable tax law.
  • AI usage logs are automatically deleted after 90 days. You can request earlier deletion at any time.
  • Anonymized usage metrics are retained indefinitely because they cannot be linked to any individual user.

Your Rights (GDPR & CCPA)

Branqo is compliant with the EU General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA). Regardless of where you are located, you have the following rights:

  • Right to access: Request a copy of all personal data we hold about you. You can download your data at any time from your dashboard settings using the "Download My Data" button.
  • Right to rectification: Request correction of inaccurate personal data. You can update your display name directly from your dashboard settings.
  • Right to erasure: Delete your account and all associated personal data. You can do this directly from your dashboard settings — no need to contact us. Deletion is immediate and permanent.
  • Right to data portability: Download your data in a machine-readable JSON format. Available from your dashboard settings using the "Download My Data" button.
  • Right to object: Opt out of anonymized telemetry collection at any time.

Most rights can be exercised directly from your dashboard. For any additional requests, contact us at [email protected]. We will respond within 30 days.

Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you via email (if you have an account) and update the "Last updated" date at the top of this page. Your continued use of Branqo after changes constitutes acceptance of the updated policy.

Contact

If you have any questions about this Privacy Policy or how we handle your data, please contact us at [email protected].

This Privacy Policy is provided in multiple languages for convenience. In the event of any discrepancy between the English version and any translation, please refer to the English version for the authoritative text.