Privacy Policy

Brode is published by MOBZAPP SAS, 126 route de la Falconnière, 69210 Sourcieux-les-Mines, France. Contact: support@mobzapp.com — SIRET (company registration no.): 818 336 646 00018.

Account: email address, name (optional), password (stored hashed, never in clear text), language preference. If you use Google or Facebook sign-in, we receive your email address and public name from those providers.

Files: the images you convert are stored for processing and automatically deleted within 24 hours. Result files are kept according to your plan (24 hours on the free plan, up to 30 days on Studio), then automatically deleted. Public simulator: embroidery files submitted to the free /tools/stitch-simulator tool are processed without an account and automatically deleted within 15 minutes at most.

Payments: payments and subscriptions are processed by Inflowpay, acting as our merchant of record (it collects and remits taxes, issues invoices and handles disputes); we never store card numbers. We keep your billing email address and references to your subscriptions.

Logs: IP address and timestamps for security purposes (rate limiting, abuse prevention).

Data is used exclusively to: provide the conversion service, manage your account, subscription plan and quotas, send transactional emails (account verification, password reset), prevent abuse and meet legal obligations.

No data is sold or used for advertising.

Uploaded files: 24 hours maximum (automatic deletion). Result files: from 24 hours (free plan) to 30 days (Studio plan) depending on your subscription, then automatic deletion.

Account data, conversion history and subscription references: until your account is deleted. Deleting the account erases all associated data.

Audience statistics: 12 months maximum.

Anti-abuse fingerprint of deleted accounts' email addresses (irreversible hash, never the plain address): 12 months maximum.

Technical logs: 12 months maximum.

The service is hosted by OVH; servers are located in France.

Inflowpay (payments, as merchant of record), Resend (transactional emails), Google and Facebook (authentication, if you choose these options). These providers may process data outside the European Union under appropriate safeguards (standard contractual clauses).

We only use strictly necessary cookies: authentication session, language preference and referral attribution (remembers, for 60 days, the code of the person who invited you, only if you arrive via a referral link; it is used solely when your account is created). No advertising or third-party tracking cookies.

We measure site traffic with Umami, a self-hosted analytics tool running on our own servers. This measurement relies solely on aggregated technical data (pages viewed, browser type, country): no cookies, no advertising identifiers, no personal data, no sharing with third parties.

As this measurement is strictly anonymous, no prior consent is required. Data is retained for 12 months and then deleted.

You have rights of access, rectification, erasure, restriction, objection and portability over your data. To exercise them: support@brode.io — or by deleting your account from the application.

You may lodge a complaint with your local data protection authority.

This policy may change; the last update date is shown at the top of the page. Material changes will be notified to you by email.