Who does what
When an agency uses BravaSpace with its own clients, the agency is the controller of the personal data it puts in (its clients, their contacts, messages, files and so on). BravaSpace is the processor: we handle that data only to provide the service, on the agency’s instructions.
This page summarizes the data processing terms that go with the terms of service. A signed, final DPA for customers who need one: to be prepared by counsel.
What we process, and for what
- Subject matter. Running the agency’s white-label client portals.
- People concerned. The agency’s team members and its clients and their contacts.
- Data. Names, email addresses, sign-in details, tasks, messages, files, galleries, invoices, contracts, notes, meeting details, and data pulled from tools the agency connects.
- Duration. For as long as the workspace exists, then deleted as described below.
Our commitments
- We process this data only to provide and secure BravaSpace, and as the agency instructs through its use of the product.
- Each workspace is separated from every other at the database level. Team members see only their workspace; a client sees only their own portal.
- Integration keys and tokens are kept on the server and cannot be read from a browser.
- Our platform owner can open a customer workspace as its owner for support. Each support session is recorded in an audit log, shown in the app with a “Support session” bar, and limited to active, trial or past-due workspaces.
- We tell you without undue delay if we learn of a personal data breach affecting your data.
- We help you answer requests from your clients about their data, and with assessments you must carry out, to the extent we are able.
Subprocessors
You agree that we use these providers. We use the ones marked “when connected” only if you connect them. We will tell customers before adding or replacing a subprocessor that handles your data, so you can object.
| Provider | What it does | When |
|---|---|---|
| Supabase | Database, sign-in, file storage and the server functions that run the product | Always |
| Anthropic | Generates Brava AI drafts, summaries and analyses (the Claude models) | When AI features are used |
| Stripe | Takes payment for BravaSpace plans; separately, processes invoice payments through the agency's own Stripe account | When you subscribe, or when an agency connects Stripe |
| Search Console, Analytics, Business Profile, Ads, Calendar and Meet data, only after an agency connects Google | When connected | |
| SE Ranking | Ranking and keyword data, only after an agency pastes its API key | When connected |
| Postmark | Sends the emails BravaSpace sends, such as sign-in links, password resets and account notices | Always |
| ActiveCampaign (BravaSpace's own CRM) | Sign-up and account status of the agencies that use BravaSpace | Always |
| Netlify | Hosts the BravaSpace app and serves this marketing website | Always |
| ActiveCampaign | Contact sync, only after an agency connects its account | When connected |
| Mailchimp, Klaviyo | Audience, list and campaign numbers; Klaviyo draft campaigns you approve | When connected |
| Webflow | A client's pages, SEO and CMS items, and the changes you approve | When connected |
| Zoom | Meeting links for calls booked in BravaSpace | When connected |
| Slack | Portal updates posted to a channel you choose | When connected |
| Calendly | Booking counts and times for a client's event type | When connected |
| Plausible, Fathom, Matomo | Website visitor numbers | When connected |
| Zapier, Make | Portal events sent to your own webhook address | When connected |
Data hosting: Supabase in the United States (AWS us-west-2, Oregon) for workspace data and files, and Netlify for the app and this site. Transfer mechanism (for example standard contractual clauses): to confirm.
Deleting and returning data
- A client. You can delete a client at any time. It is hidden and can be restored for 24 hours; after that its tasks, messages, files, galleries, invoices, notes and logins are permanently deleted.
- The whole workspace. The owner can delete it. Every record, stored file, team login and client login is erased, and the billing customer record is deleted. This cannot be undone and there is no export afterwards.
- Getting your data out. You can export client data from the Clients page before deleting. Backups roll off within 24 hours.
Your clients’ rights under GDPR
Your clients can ask you to see, correct, export or erase their personal data. You can do most of that yourself inside BravaSpace, including erasing a client and everything attached to them. If a client contacts us directly, we will point them to you. If you need help, get in touch.
Audits and contact
On reasonable request we will give you the information needed to show we meet these commitments. Audit arrangements: for counsel. Data protection contact: use the contact page. Named data protection contact to confirm
Questions about this page? Contact us. Related: Privacy policy, Terms of service and Cookie policy.