Privacy Policy

Effective date: October 25, 2026 · Last updated: October 25, 2026

1. Who we are

This website, bruhdigital.com, is operated by Bruh Digital ("Bruh Digital," "we," "us" or "our"), a digital agency based in Houston, TX. We design and build websites, search and AI visibility, CRMs, AI agents, automation and custom software for businesses.

This policy explains what personal information we collect through this website, our client portal and our services, how we use it, and the choices you have. It applies to visitors, prospective clients and clients. It doesn't apply to websites we build for our clients; those are covered by each client's own privacy policy.

2. Information we collect

Information you give us

• Contact and audit requests: your name, email address, company, phone number, website, what you need help with, budget range, timeline and your message.
• Client portal accounts: your name, email address, password (stored only in encrypted, hashed form), your role on your company's account, and the messages, requests, approvals, files and documents you send us through the portal.
• Communications: anything you send us by email, phone, video call or chat, and the details needed to schedule and hold meetings.
• Billing details: if you become a client, the business and billing information needed to quote, invoice and get paid. We don't store full payment card numbers on our systems.

Information collected automatically

• Technical and log data: when you visit, our web server automatically records information such as your IP address, browser type, device type, pages requested, the referring page and the date and time. We use this to keep the site running, secure and free of abuse.
• Cookies and analytics: with your consent, we use analytics tools to understand how visitors use the site (for example, which pages are viewed and how people found us). See Cookies and analytics.
• Spam and bot protection: our forms use Google reCAPTCHA, which collects information about your device and how you interact with the page to tell people from bots. Its use is subject to Google's Privacy Policy and Terms of Service.

Information from others

• Your colleagues: if someone at your company invites you to the client portal, they give us your name and email.
• Websites we build for clients: when we connect a client's website forms to our systems, submissions from that site (for example, a name, email, phone number and message) are stored on our systems so the client can see them in their portal. We handle that information only on our client's behalf and according to their instructions; the client's privacy policy explains how they use it.
• Public and business sources: business contact details you or your company have made publicly available, such as on your website or professional profiles.

We don't intentionally collect sensitive personal information (such as health information, government ID numbers or precise location) through this website. Please don't send it through our contact forms.

3. How we use information

• Respond to your inquiries, prepare audits and proposals, and schedule calls.
• Provide our services: plan, build and support projects, run the client portal, share files and approvals, and send project updates and reminders.
• Send service emails, such as portal invitations, password resets, document requests and notices about your account. We don't send marketing newsletters unless you ask for them.
• Operate, secure and improve the website: prevent spam and fraud, fix problems, and understand which content is useful (analytics only with your consent).
• Run our business: invoicing, accounting, record-keeping and protecting our legal rights.
• Comply with legal obligations and respond to lawful requests.

We don't use your personal information for automated decisions that have legal or similarly significant effects on you, and we don't sell it.

4. Legal bases (visitors in the EEA, UK and Switzerland)

If data protection laws such as the GDPR apply to you, we rely on these legal bases:

• Contract: to provide services you've asked for or that we've agreed to provide.
• Legitimate interests: to respond to business inquiries, keep the website secure, prevent spam and run our business, balanced against your rights.
• Consent: for analytics and other non-essential cookies. You can withdraw consent at any time.
• Legal obligation: where we need to keep records or respond to lawful requests.

5. Cookies and analytics

Cookies are small files stored by your browser. We keep them to a minimum:

Cookie	Type	Purpose	Duration
bd_consent	Strictly necessary	Remembers whether you accepted or declined cookies.	6 months
PHPSESSID	Strictly necessary	Keeps you signed in to the client portal or admin, and protects forms against forgery.	Until you close your browser
reCAPTCHA (Google)	Strictly necessary	Protects our forms from spam and abuse.	Set by Google
_ga, _ga_* (Google Analytics)	Analytics, only if you accept	Counts visits and shows how visitors use the site, in aggregate.	Up to 2 years

If we add other analytics or advertising tools in the future, they will also load only after you accept, and we'll update this table.

Your choices: analytics cookies are off until you click Accept. You can change your mind at any time using the "Cookie settings" link at the bottom of every page. Declining removes analytics cookies we set. You can also block or delete cookies in your browser settings; strictly necessary cookies may be needed for forms and sign-in to work.

Global Privacy Control: if your browser sends a Global Privacy Control (GPC) signal, we treat it as a decision to decline analytics and advertising cookies. Our site doesn't respond to the older "Do Not Track" signal, which has no common standard, but GPC achieves the same goal.

Change cookie settings

6. How we share information

We share personal information only as needed to run our business and provide our services:

• Service providers who work on our behalf under contracts that limit how they can use the information, such as our website hosting provider, email delivery, analytics (Google Analytics), spam protection (Google reCAPTCHA), video-call, scheduling, file-storage and accounting tools.
• Your company's team: in the client portal, people from your company with access to the account can see the projects, files, requests and messages shared there.
• Legal and safety: when required by law or legal process, or to protect our rights, our clients, or others from fraud or harm.
• Business transfers: if we're involved in a merger, acquisition or sale of assets, information may transfer as part of that transaction, subject to this policy.
• With your permission: for example, if you agree to be featured in a case study or testimonial.

We do not sell your personal information, and we do not share it for cross-context behavioral (targeted) advertising. We have not done so in the past 12 months.

7. Client portal and client data

Information you share with us in the client portal (project details, files, documents, messages and approvals) is used only to deliver your project. Access is limited to people at your company with an account and to our team members working on your project. Files are stored privately and can only be opened by signed-in, authorized users.

Where we process personal information on a client's behalf, for example leads from a client's website, we act as that client's service provider (also called a "processor") and follow their instructions. If you're a customer of one of our clients and want to exercise your privacy rights, please contact that business directly; we'll help them respond.

8. AI and software tools

We use reputable software tools, including AI-powered tools, to help us research, draft and build. When we use these tools with project information, we share only what's needed for the task, choose providers with appropriate data-protection commitments, and, where the option exists, configure them so business data isn't used to train their models. A person on our team reviews AI-assisted work before it's delivered.

9. How long we keep information

We keep personal information only as long as we need it for the purposes in this policy:

• Inquiries that don't become projects: generally up to 3 years after our last contact, so we have context if you reach out again.
• Client and project records: for the length of our relationship and then as long as needed for legal, tax, accounting and warranty purposes, typically up to 7 years.
• Portal files and messages: while your project and account are active; you can ask us to delete or export them when the work is complete.
• Server logs and analytics: for limited periods, after which they are deleted or aggregated.

10. Security

We use reasonable administrative, technical and physical safeguards to protect personal information, including encrypted (HTTPS) connections, hashed passwords, login attempt limits, access controls, private file storage and regular backups. No method of transmission or storage is completely secure, so we can't guarantee absolute security. If we learn of a security incident affecting your personal information, we'll notify you as required by law.

11. Your rights and choices

Wherever you live, you can ask us to:

• Access the personal information we hold about you, and get a copy in a portable format.
• Correct information that's inaccurate.
• Delete your personal information, subject to legal exceptions (for example, records we must keep for tax purposes).
• Opt out of the sale of personal information, targeted advertising and profiling. We don't do any of these, but you're welcome to confirm your choice.
• Withdraw consent to analytics cookies at any time through Cookie settings.

U.S. state privacy rights

Residents of Texas, California and other states with consumer privacy laws have the rights listed above under those laws. California residents may also request details about the categories of personal information we've collected in the past 12 months (identifiers, commercial information, internet activity and professional information, as described in section 2), the sources, the business purposes, and the categories of service providers we share it with (section 6). We won't discriminate against you for exercising any of these rights.

Rights in the EEA, UK and Switzerland

You also have the right to object to or restrict certain processing, and to lodge a complaint with your local data protection authority.

How to make a request

Email info@bruhdigital.com with your request and the email address you've used with us. We may need to verify your identity before responding, and an authorized agent may make a request for you with your signed permission. We'll respond within 45 days (or sooner where the law requires), and we'll tell you if we need more time.

Appeals: if we decline your request, you can appeal by replying to our decision with "Appeal" in the subject line. We'll respond to appeals within 60 days. If you're a Texas resident and we deny your appeal, you can contact the Office of the Texas Attorney General at texasattorneygeneral.gov.

12. Children's privacy

Our website and services are intended for businesses and are not directed to children under 13 (or under 16 where local law sets a higher age). We don't knowingly collect personal information from children. If you believe a child has given us personal information, contact us and we'll delete it.

13. International visitors

We're based in the United States, and our website and systems are hosted in the United States. If you visit from another country, your information will be transferred to and processed in the U.S., where data protection laws may differ from those in your country. Where required, we use appropriate safeguards for these transfers.

14. Other websites

Our site links to other websites, including client websites and third-party tools. We're not responsible for their privacy practices, so please review their policies.

15. Changes to this policy

We may update this policy as our services or the law change. We'll post the new version on this page and update the "Last updated" date above. If we make material changes, we'll take reasonable steps to let you know, such as a notice on the website or an email to clients.

16. Contact us

Questions or requests about privacy? Contact Bruh Digital:

• Email: info@bruhdigital.com
• Location: Houston, TX