Effective 1 September 2026 · Last updated 1 September 2026
This policy explains what data Brassturn handles, why, and what we do and do not do with it. Brassturn is a system of record for the access-control trade, built and operated from Nassau, The Bahamas.
Brassturn is business software for distributors and their staff. It is not a consumer product and it is not advertising-supported.
Brassturn, Nassau, The Bahamas. For any question about this policy, or about data Brassturn holds, contact info@brassturn.com.
Where an account holder connects a Google account, and only with their explicit consent through Google's OAuth consent screen, Brassturn accesses:
Consent can be withdrawn at any time at myaccount.google.com/permissions. Withdrawing it stops all further access immediately.
Brassturn processes the material a distributor works with: quotations, purchase orders, invoices, shipping and customs documents, technical manuals, service records and site photographs. In the ordinary course of business correspondence these may contain names, email addresses, telephone numbers and job titles of people at client properties, suppliers and shipping agents.
The lawful basis is legitimate interest in operating the business, and, where applicable, performance of a contract with the client concerned.
Brassturn's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Specifically, we do not:
Brassturn runs on private servers we operate. Documents are filed into cloud storage belonging to the account holder, either Google Drive or Box. Indexes and records derived from those documents are held on our servers and are rebuildable from the source documents.
Brassturn uses language models to classify correspondence, extract details from technical documents and draft suggested replies. Some of this runs on our own hardware. Where a task is sent to a third-party model provider, that content leaves our infrastructure and is processed under that provider's terms; we limit what is sent to what the task requires.
Brassturn does not send a message, quotation, invoice or order to anyone without a person reviewing and approving that action first.
We do not sell data and we do not share it for marketing. Data is disclosed only to:
Business records are kept for as long as the job they relate to requires, and afterwards for the period required by tax, accounting and warranty obligations. Derived indexes can be deleted and regenerated at any time. On request, an account holder's data can be exported or deleted.
Server access is restricted to named administrators using key-based authentication. Credentials are held outside version control with restricted permissions. Traffic is encrypted in transit. No system is perfectly secure and we do not claim otherwise; if a breach affecting personal data occurs we will act promptly and notify those affected where the law requires it.
If your personal data appears in our records, whether as a client contact, supplier contact or otherwise, you may ask what we hold, ask for it to be corrected, or ask for it to be deleted where we are not required to keep it. Write to info@brassturn.com and we will respond within a reasonable period.
Brassturn is business software, is not directed to children, and we do not knowingly collect data from anyone under 18.
If this policy changes materially we will update the date at the top of this page and, where the change is significant, notify account holders directly.
Questions, requests and complaints: info@brassturn.com.