Privacy Notice
Last updated: 26 May 2026
This notice explains how Breezy: Affiliate Intelligence Copilot ("we", "us", "our") collects, uses, and protects your data when you use the Breezy web app at copilot.breezy.io and the Breezy Chrome extension. By using either, you agree to this notice. Questions? Email team@breezy.io.
1. About us
We are Partnered Limited, a company registered in England and Wales (registration number 11690208). Our registered office is 34B George Street, London, W1U 7DP. Breezy is our trading name.
2. Data we collect
Information you give us
- Account details — name and email address when you register.
- Payment details — billing address and payment method when you subscribe (processed by Stripe; we never see raw card numbers).
- Ideal Partner Profile (IPP) — your brand name, domains, product keywords, and competitors that you voluntarily enter to personalise extension highlights.
Information the extension collects automatically
- Current website — the address of the site you are viewing is used to look up affiliate data for it. Nothing is saved after you navigate away.
- Page title — the title of the page you are viewing, shown for context in the side panel. Not stored or shared.
- IPP page matching (Pro and Expert) — your IPP terms (brand name, product keywords, competitor names, and domains) compared to visible text and links on pages you visit, for matches only. Used for on-page highlights, share of voice, and panel metrics. Full page text is not stored or sent to us.
- Sign-in session — stored locally in your browser so you stay logged in between sessions. Never shared with anyone.
- Usage counter and preferences — how many data lookups you have used, and your chosen theme (light/dark), saved locally on your device.
Information we collect automatically from the web app
- Technical information — IP address, browser type and version, operating system, time zone.
- Usage information — pages visited, clicks, and actions taken within the app, used to improve the product.
3. How and why we use it
We only process your data where we have a lawful basis under the UK GDPR:
| Purpose | Legal basis |
|---|
| Provide the extension and app (affiliate data lookups, plan enforcement, IPP highlights) | Contract |
| Process payments and manage subscriptions | Contract |
| Authenticate and keep you signed in across sessions | Contract |
| Improve and maintain the service; prepare anonymous usage statistics | Legitimate interests |
| Send product updates and account notifications | Contract / Legitimate interests |
| Marketing emails (opt-in only) | Consent |
We do not use your browsing history, page titles, or current tab data for advertising, profiling, or any purpose other than fetching affiliate intelligence for the domain you are actively viewing.
4. Sharing your data
We share your personal data only with:
- Supabase — authentication and database hosting (EU region).
- Stripe — payment processing. Stripe is PCI-DSS certified and handles all card data directly.
- Breezy Partner API — our own first-party API that returns affiliate intelligence data for domains you look up. No personal data is included in these requests beyond your authenticated session.
We do not sell your data. We do not share it with advertising networks. We may disclose data where required by law, or in the event of a business transfer, in which case we will notify you.
5. How long we keep your data
We keep your account data for as long as you maintain an account with us. Auth tokens stored in the extension are deleted when you sign out. You can request deletion of all personal data at any time by emailing team@breezy.io.
6. Your rights
Under UK GDPR you have the right to:
- Access a copy of the personal data we hold about you.
- Correct inaccurate or incomplete data.
- Delete your data ("right to erasure").
- Restrict or object to processing.
- Port your data to another service.
- Withdraw consent for marketing at any time.
Exercise any of these rights by emailing team@breezy.io. We do not carry out automated decision-making or profiling that produces legal or similarly significant effects.
If you believe we have breached your rights, you may complain to the UK Information Commissioner's Office at ico.org.uk.
7. International transfers
Your data is processed within the UK and EU. Supabase stores data in the EU. Stripe may process payment data in the US under Standard Contractual Clauses. Where data is transferred outside the UK/EEA we ensure appropriate safeguards are in place.
8. Security
We use encryption in transit, short-lived sign-in credentials, and access controls on stored account data. Payment card details are handled entirely by Stripe. Extension sign-in data is kept in private storage on your device, available only to the extension.
You are responsible for keeping your account password confidential. Please do not share it with anyone.
9. Extension features and data
The extension accesses data only as needed for these features:
- Sign-in and preferences — your session, reveal usage, and theme. Stored on your device.
- Affiliate intelligence — the URL and title of the site in your active tab, to load data for that domain.
- Side panel — shows insights while you browse.
- Your Breezy account — your sign-in state and plan from copilot.breezy.io, so the extension can apply your subscription and IPP.
- Google Search overlay — URLs of organic results on Google Search, to show program size and partnership counts.
- IPP highlights (Pro and Expert) — your IPP terms and visible text and links on pages you visit (for matching only), for on-page highlights, share of voice, and panel metrics. Does not read form fields, passwords, or payment details.
10. Cookies
The web app uses cookies and local storage set by Supabase for session management ("strictly necessary"). We do not use advertising or tracking cookies. If you disable cookies the app may not function correctly.
11. Third-party links
The app and extension may link to or display data about third-party websites. This notice does not apply to those sites. We are not responsible for their privacy practices.
12. Changes to this notice
We may update this notice from time to time. Material changes will be communicated by email or via an in-app notification. The "last updated" date at the top of this page always reflects the current version.