Privacy Policy

Breezy ("we", "us") is operated by One Sigma SAS, a company incorporated in Colombia. Breezy turns forms into conversations: an AI agent asks questions in natural language and records the answers in structured form. For any privacy matter, contact us at jalzate@onesigma.com.co.

• Creators: people who sign in to Breezy to create and share forms.
• Respondents: people who open a shared link and answer a form through the conversational agent.

From Creators

• Google account data when you sign in with Google: your name and email address.
• Forms you import or upload (questions, options, logic) and the agent settings you configure.
• Billing information: purchase history, credit balance and subscription status. Card details are handled by our payment processors; we never store them.
• Technical data: IP address (used to detect your country and prevent abuse), device and browser type, and usage logs.

From Respondents

• The messages you send to the agent (text, or a voice recording sent to be transcribed and not kept) and the structured answers extracted from them.
• A session identifier (cookie or token) so you can resume a conversation within 24 hours.
• Technical data such as IP address, used for security and rate limiting.

If you connect your Google account, Breezy requests only these permissions:

• Sign-in (OpenID, email, profile): to identify you and show your name.
• Google Forms, read-only (forms.readonly, forms.responses.readonly): to read the structure of forms you choose to import and validate responses.
• Google Drive, read-only (drive.readonly): only to list your files so you can pick the form to import.

We use Google data only to provide these features. Breezy's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell Google user data, use it for advertising, or use it to train generalized AI models, and humans do not read it except with your consent, to investigate abuse, or to comply with law. You can revoke access at any time at https://myaccount.google.com/permissions.

• Provide, operate and secure the service, including running the conversational agent.
• Process payments, manage credits and subscriptions, and prevent fraud and abuse.
• Send service emails (verification, receipts, security and account notices, expiration reminders).
• Provide optional analysis features (sentiment and executive summary) to Creators on eligible plans.
• Improve reliability and performance, and comply with legal obligations.

Creators receive only the structured answers extracted from a conversation (for example "Age: 32"). Creators do not have access to the literal text of Respondents' messages. The conversation history is accessible only to our systems, for resuming sessions, optional analysis features, security and debugging.

To run the agent, conversation content and form definitions are sent to Anthropic, our AI provider, through its API. We use this provider solely to deliver the service. Under Anthropic's commercial terms, API inputs and outputs are not used to train its models. You should not share information in a conversation that you do not want processed this way.

We share data only with providers needed to operate Breezy, bound by confidentiality and data-protection obligations:

• Anthropic: AI processing.
• Google: sign-in and Forms/Drive APIs.
• Stripe and Wompi: payment processing.
• Amazon Web Services (AWS): hosting and storage.
• Mailgun: transactional email.

We may also disclose information if required by law or to protect rights, safety and security. We do not sell personal data.

• Conversation history and answers are kept until the Creator deletes the form, after which they are deleted from our systems, except where retention is required by law.
• Account data is kept while your account is active and deleted upon request, subject to legal and accounting obligations (for example billing records).
• Technical logs are kept for a limited period needed for security and operations.

Our providers may process data outside Colombia, including in the United States. We rely on contractual safeguards to protect your data in these transfers.

We use encryption in transit, encryption at rest for Google tokens, access controls, rate limiting and unpredictable share links. No system is perfectly secure, but we work to protect your information.

We use only essential cookies and similar technologies (authentication, session continuity, security). We do not use advertising cookies.

Under Colombian Law 1581 of 2012 and its regulations (habeas data), and, where applicable, the GDPR, you may access, update, rectify and request deletion of your data, request proof of authorization, object to or restrict processing, withdraw consent, request portability, and file complaints with the Superintendencia de Industria y Comercio (SIC) or your local data protection authority. To exercise these rights, write to jalzate@onesigma.com.co. We respond to queries within 10 business days and to claims within 15 business days.

Breezy is not intended for children under 13, and we do not knowingly collect their data. If you believe a child has provided data, contact us and we will delete it. Where local law sets a higher age of digital consent, that age applies.

We may update this policy. We will post the new version here with a new date and, for material changes, notify you by email or in the app.

One Sigma SAS — jalzate@onesigma.com.co — breezy-app.com