← Back to home

Privacy Policy

Last updated: October 21, 2026

1. Who we are

Brookiro is run by Oladapo Salami. You can reach us at support.brookiro@gmail.com. This policy explains what information we collect, why, and the choices you have.

2. What we collect

  • Account details: your username, email address and password. Passwords are stored securely hashed, never as plain text.
  • Your API key: stored so we can show it on your dashboard.
  • Usage records: for each request we record which key made it, the URL or file name, the file size, the number of tokens, and the time. We do not store the text of the pages or PDFs you submit. Results of background crawl jobs are held temporarily so you can collect them.
  • Billing information: payments are handled by Lemon Squeezy. We receive your email, a customer ID and your subscription status. We never see your card number.
  • Waitlist emails: if you email us to join the Pro waitlist, we keep your address and use it only to tell you when Pro launches.
  • Technical data: our hosting provider's logs include your IP address, browser type and the endpoints requested.
  • Cookies: we use essential cookies to keep you signed in and to protect forms from forgery. Your browser's local storage remembers your light or dark theme choice. We do not use advertising or tracking cookies.

3. How we use it

To run the Service, check API keys, apply limits and billing, prevent abuse, fix problems, answer support requests, and meet legal obligations. We do not sell personal data.

4. AI processing

When you use Structured JSON (AI), the text extracted from your page or PDF is sent to Google's Gemini API to produce the result. Google handles that data under its own terms and privacy policy. Please do not send documents to AI mode that you are not allowed to share with a service provider, and avoid highly sensitive personal data.

5. Service providers

We rely on these providers, who process data only to provide their services to us: Render (hosting), Supabase (database), Unkey (API key management and verification), Google (AI extraction) and Lemon Squeezy (payments). We may also disclose information when the law requires it.

6. Where data is processed

Our providers may process data in other countries. Where the law requires safeguards for this, we use providers that offer them.

7. How long we keep it

Account details and API keys: until you delete your account. Usage records: 12 months. Billing records: as long as the law or our payment provider requires. When you ask us to delete your data, we delete or anonymize it unless we must keep it.

8. Your rights

You can ask us for a copy of your data, to correct it, or to delete it, by emailing support.brookiro@gmail.com. Depending on where you live (for example under the GDPR or Nigeria's data protection law), you may have further rights, including objecting to some processing and complaining to your data protection authority.

9. Security

We use reasonable measures, including encrypted connections (HTTPS) and hashed passwords. No online service is perfectly secure, so please keep your password and API key private.

10. Children

The Service is not for anyone under 18, and we do not knowingly collect data from children.

11. Changes to this policy

If we change this policy we will update the date at the top and, for significant changes, tell you by email or on your dashboard.

12. Contact

Questions or requests about your data: support.brookiro@gmail.com. See also our Terms of Service.