Privacy Policy

Braid Sync (“Braid Sync”, “we”, “us”) is a browser extension operated by Braid Sync, based in South Africa. Braid Sync is the “responsible party” for your personal information under the Protection of Personal Information Act 4 of 2013 (POPIA), and the “controller” under the EU/UK GDPR where that applies to you.

Street address: Building 2, 1st Floor, Clearwater Office Park, Millennium Blvd, Strubens Valley, Roodepoort, 1735, South Africa. Our Information Officer can be reached at privacy@braidsync.com, which is also the address for any privacy question, request or complaint.

This policy covers the Braid Sync extension and the website at braidsync.com. It does not cover third-party websites you reach through your synced bookmarks or tabs.

Under POPIA section 11 and, where it applies, Article 6 of the GDPR, we rely on: performance of our agreement with you (to deliver the sync, verify your licence and take payment); our legitimate interests, balanced against your rights (keeping the service secure and reliable, and fixing faults); your consent (only for website analytics, which you can withdraw at any time in section 8); and compliance with law (tax and accounting records).

Providing sync content is voluntary, but without it the extension cannot sync. We do not make automated decisions that have a legal or similarly significant effect on you, and we do not use your information for direct marketing without your consent as required by POPIA section 69.

Braid Sync keeps your bookmarks and tab groups consistent across separate browser profiles and, on paid plans, across devices — something browsers don’t do on their own between different accounts. It acts only on the items you choose to sync, according to the filter you set in the extension’s settings.

Your plan determines how many browser profiles a licence covers (the lifetime licence covers up to five). To apply that limit we record which browser profiles are linked to your licence — nothing about what you do in them.

We collect the minimum needed to provide the sync, in line with our single stated purpose. Nothing is collected for advertising or profiling.

How signing in works. Braid Sync has no passwords. You enter your email address and we send you a single-use link; opening it connects that browser profile to your account. We use your email address only to sign you in, to reach you about your licence, and to answer support requests. We do not send marketing email and there is no mailing list to join.

We do not collect payment-card numbers — those are handled entirely by Paddle, our payment processor, who never shares them with us.

• Passwords, authentication cookies, or session tokens — Braid Sync does not read or sync cookies of any kind.
• The content of the web pages you visit, form entries, or keystrokes.
• Your full browsing history. If a history-sync feature is added later, it will be opt-in, separately disclosed, and this policy updated first.
• Any data from browser profiles or groups you have not chosen to sync.

Sync content is transmitted over encrypted connections (HTTPS/TLS) and stored on our servers solely to provide the sync. Access is restricted to the systems that run the service.

Sign-in links expire after 15 minutes and work only once. The access tokens held by your browser profiles are stored on our servers as one-way hashes, never as readable values, so a copy of our database would not let anyone sign in as you. Signing a profile out revokes its access immediately.

We keep your sync content only while your account is active. If you delete an item, close your account, or stop using the extension, the associated data is removed within 30 days.

We do not sell your data and we do not share it for advertising. We share only what is necessary with the service providers that run Braid Sync:

• Cloudflare, Inc. — hosts the service and stores your account and sync content. Primary storage is in Western Europe; Cloudflare’s network serves the request from wherever you are.
• Resend — delivers your sign-in emails. It receives your email address and nothing else.
• Paddle — our merchant of record. Paddle takes your payment, handles sales tax, and manages your licence.

These providers are bound to use the data only to deliver their service to us. Because they operate outside South Africa, using Braid Sync involves a transfer of your data abroad; each is bound by contractual terms requiring a comparable level of protection. We may also disclose data if required by law.

• Access or export the sync content and account details we hold for you.
• Delete individual items, sign any profile out to release its seat, or remove everything by closing your account.
• Withdraw from the service by uninstalling the extension.

To exercise any right, email privacy@braidsync.com. POPIA requests may be made on the prescribed forms (Form 2 to object, Form 3 to request correction or deletion) under the Promotion of Access to Information Act; we accept a plain email too, and reply within 30 days. We do not charge for a reasonable request.

If you are unhappy with how we handled your information, you can complain to the Information Regulator (South Africa), JD House, 27 Stiemens Street, Braamfontein, Johannesburg — complaints.IR@inforegulator.org.za. If you are in the EU or UK, you may complain to your local data protection authority instead.

braidsync.com counts page views and button clicks so we know which parts of the site are useful. This only runs if you allow it, it never runs inside the extension, and it is never used for advertising or profiling. You can change your choice here at any time.

Braid Sync is not directed at children. POPIA treats anyone under 18 as a child, and we do not knowingly process a child’s personal information without the consent of a competent person. If you believe a child has used Braid Sync, email privacy@braidsync.com and we will delete the data.

If we change what we collect or how we use it, we’ll update this page and, where the change is significant, notify you in the extension or by email before it takes effect. The “Effective” date at the top always reflects the current version.

Privacy questions or requests: privacy@braidsync.com. Plans, seats and business enquiries: sales@braidsync.com.

By post: Braid Sync, Building 2, 1st Floor, Clearwater Office Park, Millennium Blvd, Strubens Valley, Roodepoort, 1735, South Africa. This policy is governed by the law of South Africa, and the courts of Johannesburg have jurisdiction.