BraceCloud ("we", "our", or "us") is a personal cloud storage service operated by BraceCoder. This Privacy Policy describes how we collect, use, and protect information when you use our mobile application and website (cloud.bracecoder.in). By using BraceCloud, you agree to the practices described in this policy.
Information We Collect
1.1 Account Information
When you register for BraceCloud, we collect:
- Full name – used to personalise your experience
- Email address – used for authentication (OTP delivery) and service communications
- Username – auto-generated from your name; used to identify you within the platform
We do not collect or store passwords. Authentication is performed exclusively via One-Time Passwords (OTP) sent to your registered email address.
1.2 Files & Content You Upload
We store files, folders, and any other content you upload to BraceCloud. This includes documents, images, videos, audio files, and any other data you choose to store. We access this content only to provide the storage and retrieval service to you.
1.3 Usage & Technical Data
We automatically collect limited technical data to operate and improve the service:
- Storage usage (bytes used vs. allocated)
- Daily upload and download transfer volume
- File metadata (name, size, MIME type, upload timestamp)
- Device name provided when creating an API token (e.g., "Android App")
- IP address, used solely for rate-limiting and abuse prevention
1.4 Payment Information
If you subscribe to a paid storage plan, payment is processed by Razorpay. We store only the payment reference ID, plan details, and payment status. We do not store credit card numbers, CVVs, bank account numbers, or any other sensitive financial data — these are handled entirely by Razorpay.
1.5 Activity Logs
We maintain internal activity logs (uploads, downloads, file operations) to help you track changes to your account and to detect unauthorised access. These logs are accessible to you in the app's activity section.
How We Use Your Information
| Purpose | Data used | Basis |
|---|---|---|
| Provide the cloud storage service | Account info, files, usage data | Contract |
| Authenticate your identity via OTP | Email address, IP address | Contract |
| Process subscription payments | Email, payment reference | Contract |
| Enforce storage quotas & daily limits | Usage statistics | Contract |
| Prevent abuse & rate-limit requests | IP address | Legitimate interest |
| Send service notifications (OTPs, alerts) | Email address | Contract |
| Improve & debug the service | Aggregated usage data, error logs | Legitimate interest |
We do not use your data for advertising, profiling, or sell it to any third party.
How We Store Your Data
Your files are stored on secure servers. Account and metadata are stored in a MySQL database. API authentication tokens are stored as one-way SHA-256 hashes — the raw token is never retained after it is issued to you.
All data is stored on servers operated by BraceCoder. Data may be stored in India or in cloud infrastructure regions where our hosting provider operates.
Data Sharing & Third Parties
We do not sell, rent, or trade your personal information. We share data only in the following limited circumstances:
4.1 Payment Processor – Razorpay
When you make a payment, your email address and order details are shared with Razorpay to process the transaction. Razorpay's privacy policy governs their use of your data: razorpay.com/privacy.
4.2 Email Delivery
We use a transactional email service to deliver OTP and notification emails. Only your email address and the content of the email being sent are shared with this provider.
4.3 Legal Requirements
We may disclose your information if required to do so by law, court order, or governmental authority, or if we believe in good faith that such disclosure is necessary to protect our rights, protect your safety, or investigate fraud.
4.4 Business Transfers
If BraceCloud is acquired or merged with another company, your information may be transferred as part of that transaction. We will notify you before your information is transferred and becomes subject to a different privacy policy.
Data Retention
| Data type | Retention period |
|---|---|
| Account information | Until account deletion, plus 30 days for recovery |
| Uploaded files | Until you delete them (or 30 days after account deletion) |
| Trashed files | Until permanently deleted by you |
| API tokens | 90 days from issuance, or until logout |
| Activity logs | 90 days |
| Payment records | 7 years (regulatory compliance) |
| IP address (rate-limit logs) | 24 hours (stored in cache only) |
When you request account deletion, we will delete your account, all files, and associated personal data within 30 days. Payment records may be retained longer as required by applicable law.
Your Rights & Controls
You have the following rights regarding your personal data:
- Access – View the data we hold about you from your Profile page.
- Correction – Update your name or username from your Profile settings.
- Deletion – Request deletion of your account and all associated data. Use the link below or visit cloud.bracecoder.in/delete-account-request.
- Data Portability – Download any of your files at any time from the app.
- Withdraw Consent – You may stop using the service and request account deletion at any time.
To request deletion of your BraceCloud account and all associated data, visit: cloud.bracecoder.in/delete-account-request. You will be required to verify your identity via OTP before the request is submitted. Deletion is processed within 30 days.
To exercise any other right, please contact us at the email address in Section 10.
Security
We implement appropriate technical and organisational measures to protect your data:
- Authentication via OTP only — no passwords to leak or guess
- API tokens stored as one-way SHA-256 hashes
- Rate-limiting on all authentication and sensitive endpoints
- Anti-enumeration measures to prevent account discovery
- HTTPS enforced for all connections
- Storage quotas and daily transfer limits to contain abuse
No method of transmission over the internet is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.
If you discover a security vulnerability, please contact us responsibly at support@bracecoder.in.
Children's Privacy
BraceCloud is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us and we will take steps to delete that information.
Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. For significant changes, we may also send a notification to your registered email address.
Your continued use of BraceCloud after any changes constitutes your acceptance of the revised policy. We encourage you to review this page periodically.
Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:
📧 Email: support@bracecoder.in
🌐 Website: cloud.bracecoder.in
We aim to respond to all privacy-related requests within 5 business days.