About this policy
This Privacy Policy applies to Browserherd, Inc. (“Browserherd,” “we,” “us,” or “our”) and our websites, dashboard, APIs, hosted browser infrastructure, documentation, and related services (the “Services”). It does not govern third-party websites that customers visit through cloud browser sessions or third-party products linked from our Services.
If your organization provides you access to Browserherd, that organization may control your account and Customer Data. Direct privacy questions about data your organization controls to that organization first.
Information we collect
Name, email, organization, role, authentication identifiers, account preferences, and communications.
Plan, invoices, billing address, tax information, payment status, and payment tokens. Payment processors handle complete card details.
IP address, device and browser details, login events, feature interactions, API requests, timestamps, usage, diagnostics, and security events.
Instructions, URLs, request metadata, cookies, storage, logs, outputs, screenshots, recordings, and other content processed as configured by Customer.
Messages, call notes, attachments, feedback, use-case information, and details needed to troubleshoot or evaluate a request.
Information used to verify identity, business purpose, authority, and compliance where risk-based review is required.
We collect information directly from you, automatically through the Services, from your organization, from integrations you connect, and from service providers such as identity, payment, analytics, and security vendors.
How session data works
Cloud browsers interact with third-party websites based on Customer instructions. Depending on configuration, sessions may process webpage content, identifiers, form entries, cookies, local storage, authentication tokens, files, network metadata, console logs, screenshots, and recordings. Customers decide what destinations to access, what data to submit, whether recording is enabled, and how to use session output.
Browserherd processes this data to provide the requested session, troubleshoot, secure the platform, apply configured retention, and meet legal obligations. We do not use Customer Data to advertise to individuals or sell it. Customers should avoid submitting unnecessary sensitive information and should use ephemeral sessions, scoped credentials, and retention controls where possible.
Purposes and legal bases
| Purpose | Examples | Legal basis where applicable |
|---|---|---|
| Provide the Services | Create accounts, run sessions, authenticate requests, meter usage, process payments, provide support | Contract; legitimate interests |
| Secure and prevent abuse | Detect fraud, investigate incidents, enforce policies, protect users and infrastructure | Legitimate interests; legal obligation |
| Maintain and improve | Debug errors, analyze performance, improve reliability and product usability | Legitimate interests; consent where required |
| Communicate | Service notices, security alerts, support, product updates, marketing preferences | Contract; legitimate interests; consent |
| Comply with law | Tax, accounting, sanctions, lawful requests, claims, and regulatory duties | Legal obligation; legitimate interests |
Where we rely on legitimate interests, we consider the impact on individuals and use safeguards. Where consent is the basis, you may withdraw it at any time without affecting earlier processing.
How long we keep information
We retain information only as long as reasonably necessary for the purposes described here, including providing the Services, meeting Customer-configured retention, maintaining security and audit records, complying with law, resolving disputes, and enforcing agreements. Retention depends on the data type, plan, configuration, sensitivity, legal obligations, and whether the data is needed for an active account.
Session artifacts are retained according to Customer settings and plan limits, then deleted or de-identified through our standard processes. Backups and security records may persist for a limited period before deletion. We may retain information longer when required by law, legal hold, fraud prevention, or an active dispute.
Security
We use administrative, technical, and physical safeguards designed to protect personal information, including access controls, encryption in transit, logical isolation, logging, vulnerability management, incident response, and personnel confidentiality obligations. No service can guarantee absolute security. You are responsible for securing API keys, configuring sessions appropriately, limiting sensitive data, and promptly reporting suspected compromise to [email protected].
International data transfers
Browserherd is based in the United States and our providers may process information in the United States and other countries. Where required for transfers from the European Economic Area, United Kingdom, or Switzerland, we use recognized transfer mechanisms such as adequacy decisions, the European Commission's Standard Contractual Clauses, and the UK Addendum, together with supplementary safeguards where appropriate.
Your privacy rights
Depending on where you live, you may have rights to access, correct, delete, port, or restrict processing of personal information; object to certain processing; withdraw consent; opt out of sale, sharing, targeted advertising, or certain profiling; and appeal a denied request. You may also complain to a data protection authority.
Submit a request through Your Privacy Choices or email [email protected]. We may verify your identity and authority, and legal exceptions may apply. Authorized agents may submit requests where permitted by law. We will not discriminate against you for exercising a privacy right.
United States privacy disclosures
In the preceding 12 months, we may have collected the categories described below for the business purposes in this policy and disclosed them to service providers, affiliates, professional advisers, and authorities as appropriate.
| Category | Examples | Retention approach |
|---|---|---|
| Identifiers | Name, email, account ID, IP address, device identifiers | Account life plus required legal/security period |
| Customer records | Organization, billing address, payment and transaction records | Contract, tax, and accounting requirements |
| Commercial information | Plan, purchases, credits, usage, invoices | Account and financial-record requirements |
| Internet activity | Login events, API activity, session metadata, diagnostics | Plan settings and security requirements |
| Professional information | Employer, role, business contact details | Relationship and communication needs |
| Inferences | Likely product interests or fraud-risk signals | Marketing preferences and security requirements |
Browserherd does not knowingly use or disclose sensitive personal information for purposes that require a right to limit under California law. See our California Privacy Notice for request instructions.
Children's privacy
The Services are designed for businesses and developers and are not directed to children under 13. We do not knowingly collect personal information directly from children under 13. If you believe a child has provided information to us, contact [email protected].
Changes and contact
We may update this policy to reflect changes in our Services, providers, or legal requirements. We will post the revised policy with a new effective date and provide additional notice for material changes where required.
Contact our privacy team
For questions, requests, or accessibility support, email Browserherd's privacy team.