What braxby reads, and what it does with it.

Effective 25 August 2026 · Last updated 1 October 2026

braxby asks to read your calendar, and — if you choose to connect it — your inbox. That is a lot to ask on a first screen, so this page is written to be read rather than survived. The short version: we read a narrow slice, we keep the structured facts and not your messages, we never train models on you, and deleting your account deletes everything.

1Who we are

braxby is a personal events concierge operated by braxby LLC, a limited liability company organised in the Commonwealth of Massachusetts, United States. In this policy "braxby", "we" and "us" mean braxby LLC. "You" means the person using the service.

This policy covers the braxby service wherever you use it: the web app at app.braxby.com, and the mobile app published as braxby — Events Concierge on Google Play (package com.braxby.app) and, once released there, on the Apple App Store.

For data-protection purposes braxby LLC is the controller of the personal information described here. You can reach us at concierge@braxby.com.

2What we read from your calendar

Your calendar is the primary signal braxby learns from. It is where the concerts you actually went to, the restaurants you actually booked and the trips you actually took are recorded.

The permissions we ask for

• Google — calendar.events and calendar.calendarlist.readonly. We deliberately do not request the broader auth/calendar scope, which would grant read, write, share and delete across every calendar you can see. The narrower pair covers everything braxby actually does.
• Microsoft — Calendars.ReadWrite, the narrowest Microsoft Graph permission that supports both reading your agenda and adding an event you asked us to add.
• Apple — Sign in with Apple grants no access to your calendar or mail; Apple publishes no such permission. iCloud Calendar is a separate, manual connection you make yourself with an app-specific password, and only if you choose to.

What we actually read

• The list of calendars on your account, so you can choose which ones braxby may look at.
• Events in a window around today — the first import reads roughly the past thirty days, and day-to-day braxby reads the month ahead. It does not trawl your entire calendar history.
• For each event: title, start and end time, location, description and the number of attendees.

What we write

Write access is used in exactly one situation: when you ask braxby to add something to your calendar. It never creates, edits or deletes an event on its own initiative.

You may sign in and connect no calendar at all. braxby is designed to work in that state — it will simply know less about you.

3What we read from your mail

This is the question people care most about, so it gets the most precise answer on this page.

We never read your whole inbox

Where mail access exists — through Microsoft's Mail.Read, an iCloud mailbox you connected yourself, or a Gmail grant if you ever give one — braxby does not download or scan your mailbox. It runs a narrow search and reads only what comes back:

• Messages from a known list of ticketing, travel and booking senders; or
• Messages matching event keywords — ticket, booking, reservation, confirmation, invitation, event, concert, flight, itinerary, e-ticket;
• Within a recent time window, and capped at 200 messages per scan.

Personal correspondence, work threads, newsletters, financial mail and everything else in your mailbox falls outside that search and is never retrieved.

What we keep from a matching message

The structured facts we keep are: the event title, its start and end time, its location, the type of event, a booking reference where one exists, a confidence score, and the provider's message identifier so the same message is not processed twice.

If you re-scan your mail, the previous extractions are replaced.

4Google Limited Use

Where braxby uses Google API Services, the following applies in full:

In practice that means data obtained from Google APIs is used only to provide and improve the user-facing features described on this page, is not transferred to anyone except as required to run the service (see who else touches it), with your consent, or for legal reasons, is never sold, and is never used for advertising. Humans do not read it except where you explicitly ask us to for support, where it is necessary for security, or where the law requires it.

5Everything else we collect

When you report a problem

If you send a report from inside the app, it contains your account email address, your device and the app build you are on, the message you wrote, and — unless you switch it off before sending — the last exchange in your conversation with braxby, so we can see what you saw. The report is emailed to our support mailbox and stored with your account. The copy stored with your account is deleted when your account is deleted; the copy in our mailbox is kept only as long as we need it to deal with your report, and deleted when it is no longer needed. Nothing is sent until you press send.

If you report one of braxby's replies as offensive or untrue, that reply is hidden in your conversation (you can still show it), and braxby stops using it as context for later answers. The reply itself is deleted with the rest of your conversation, and a copy stays with your report so we can review it. A person reads every such report, and we use them to improve how braxby answers.

The last 12 months, in California's categories

In the past 12 months we collected identifiers; account and commercial information (subscription status); internet activity (product usage); coarse location; inferences (your taste profile); and sensitive personal information as described in section 14. We disclosed each only to the service providers in section 10, for the business purposes in section 6. We sold or shared none.

6Why we process it

• To provide the service you asked for — detecting trips, building your taste model, finding events worth telling you about, and writing to you first.
• To keep it working and safe — debugging, rate limiting, fraud and abuse prevention.
• To take payment, if you subscribe.
• To comply with the law, where we are required to.

If you are in the UK or EEA: our legal basis is performance of our contract with you for the core service, your consent for optional connections such as Spotify, mail access and push notifications, and our legitimate interests in keeping the service secure and functioning, understanding how the product is used so we can improve it, and crediting referrals fairly. You can withdraw consent at any time by disconnecting the source or turning the notification off, and you can object to processing based on legitimate interests (see section 14). Where we rely on our contract with you, the processing is needed to provide the service; if you would rather it did not happen, the remedy is to disconnect that source or delete your account.

braxby profiles your taste to choose what to show you. It makes no decisions with legal or similarly significant effects on you.

7We do not train models on you

The "learning" braxby does is a private profile of your taste, held in your account and used only to choose what to show you. It is not pooled with other users, and it does not improve anyone's model but your own experience.

8How long we keep it

9Deleting your account

You can delete your account yourself, from You → Settings in the app — nobody needs to approve it and there is no waiting period. If you can no longer sign in, you can request deletion by email instead: we send a confirmation link to the address on the account, and clicking it deletes everything immediately. See how to delete your account.

Deletion is immediate and it cascades. Every table that holds anything about you is keyed to your account with an on-delete cascade, so removing the account removes, in the same transaction: your profile, your provider tokens, your Spotify connection, your memory and taste model, events extracted from your mail, your detected trips, your conversation history, your discover feed, your armed watches, your calendar preferences and your onboarding records.

If you signed in with Apple, we call Apple's token-revocation endpoint before deleting, so the grant does not linger in your Apple Account with nothing behind it.

If you are on the waitlist rather than in the app, there is no account to delete — we hold only the email address and city you typed into the form. Use the removal link in any email we have sent you, or write to us, and the entry goes.

This is a hard delete, not a soft delete or a thirty-day grace period. We cannot undo it, and we cannot recover the account afterwards. Cancelling a subscription is a separate thing and does not delete anything — see the Terms.

10Who else touches it

braxby is a small operation built on other people's infrastructure. These are the companies that process data on our behalf. We update this list when it changes.

We may also disclose information if the law requires it, to enforce our Terms, or to protect the rights and safety of our users. If braxby is ever acquired or merged, your information may transfer as part of that — you will be told before it becomes subject to a different privacy policy.

11We do not sell your data

We do not sell your personal information, and we do not share it for cross-context behavioural advertising, as those terms are defined under California law. We run no advertising network, no tracking pixels for third-party advertisers, and no data brokerage. braxby is paid for by the people who subscribe to it, and by affiliate commission when you buy a ticket through a link we showed you — which is disclosed in the Terms and costs you nothing extra.

Because we neither sell nor share personal information, there is nothing to opt out of. If your browser sends a Global Privacy Control signal, we treat it as a valid opt-out request anyway.

12Email we send you

There are three kinds, and they are governed differently.

• Account email always sends. Confirming your address, resetting your password, the link that deletes your account, and the note telling you the deletion is done. Each one completes something you asked us to do, so there is no opting out of them — and none of them ever carries marketing.
• Suggestions are yours to switch off. When braxby finds something worth telling you about, it may reach you by email as well as by notification. You control this per category and per channel in You → Settings, and you can switch email off entirely there or with the one-click unsubscribe link in any such message. We send at most one of these a week, with one exception: a ticket going on sale for something you asked us to watch, because that expires.
• Waitlist and announcements go only to people who joined the waitlist or agreed to hear from us, and every one carries an unsubscribe link.

We keep a suppression list. If you unsubscribe, or your provider tells us an address bounced or that you marked a message as spam, we stop sending to it and that decision is permanent — we do not clear it if you sign up again later.

We do not put tracking pixels in account email, and we do not use read receipts to profile you. Our email provider (Resend, listed in section 10) reports whether a message was delivered or bounced, which is what the suppression list is built from.

If you have told us to stop and something still arrives, reply to it or write to concierge@braxby.com and we will fix it.

13How it is protected

• Access tokens for every connected account — Google, Microsoft, Apple and Spotify — and any iCloud app-specific password are encrypted at rest by our server, on top of the database's own disk encryption.
• All traffic runs over TLS.
• Every user-owned table carries row-level security as defence in depth, and every query is scoped to your account.
• OAuth handoffs are signed and time-bounded, so a redirect cannot be forged or replayed.
• Text arriving from your mail or calendar is treated as untrusted input and neutralised before it reaches a model prompt.

No system is perfectly secure, and we will not claim otherwise. If we discover a breach affecting your personal information we will notify you and the relevant authorities as required by Massachusetts law and any other law that applies to you.

More detail, and how to report a security problem to us, is on our security page.

14Your rights

Wherever you live, you can access what we hold, correct it, delete it, and take it with you. Deletion is built into the app and takes effect immediately; for anything else, write to concierge@braxby.com. We will not treat you differently for exercising any of these.

To protect your account, we verify a request by having you make it from the app while signed in, or by confirming it from the email address on the account. An authorised agent must give us your signed permission, and we may ask you to confirm it directly. We respond within 30 days. If we need longer, up to 45 more days under US state law or two more months under UK/EU law, we'll tell you why within the first 30.

If you are in California

Under the CCPA as amended by the CPRA you have the right to know what we collect and why, to delete it, to correct it, to obtain a portable copy, and to opt out of sale or sharing — which is moot here, because we do neither. You may use an authorised agent to make a request, as described above.

The sensitive personal information we process is limited to the contents of calendar events and matching emails you authorised, and your sign-in credentials. We use it only to provide the service, so there is no "limit the use" request to make.

If you are in another US state with a privacy law

Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana and others grant comparable rights of access, correction, deletion, portability and opt-out. We honour them for every user regardless of state, and you may appeal a refused request by replying to our response, and if we deny your appeal, you may contact your state Attorney General.

If you are in the UK or EEA

You additionally have the right to object to or restrict processing, and to lodge a complaint with your supervisory authority — the Information Commissioner's Office in the UK, or your national authority in the EEA. We would rather you told us first.

15Children

braxby is not directed to children. You must be 18 or over to use it, as set out in the Terms. We do not knowingly collect personal information from anyone under 18. If we learn that an account belongs to someone under 18, we will close it and delete what we hold. If you believe a child has given us information, write to us and we will delete it.

16Where the data lives

braxby is operated by a company in the United States. The application itself, and most of the services we use to run it — including the AI providers that power the concierge — run in the US. Your account data at rest is stored in the United States (Oregon) by our database provider, Supabase. If you use braxby from the UK or the EEA, your information is transferred to the US as a normal part of running the service. Where we transfer personal data out of the UK or EEA we rely on the European Commission's standard contractual clauses our providers offer (for UK data, together with the UK's International Data Transfer Addendum), or, where a provider is certified under it, the EU–US Data Privacy Framework and its UK extension. You can ask us for a copy of the relevant safeguards at concierge@braxby.com.

17Changes to this policy

If we change this policy we will update the date at the top of the page. If a change materially affects how we handle your information — a new category of data, a new purpose, a new sub-processor with real access — we will tell you in the app or by email before it takes effect, rather than quietly editing the page.

18Contact us

Questions, requests, or a paragraph on this page you think is wrong: concierge@braxby.com.

braxby LLC · Massachusetts, United States