Privacy Policy

browsercasa is a hosted-browser workspace: one persistent browser per account that your agent drives and you watch. This page describes what the service stores and what it does not.

What we store

• Account Your email address and a salted password hash — never the password itself.
• Billing Card details and payment data are collected and stored by Stripe; we store only your Stripe customer and subscription identifiers and current plan status.
• Browser profile Your browser's cookies, sessions and site data persist in your account's profile directory on our hosting volume — that persistence is the product. Profile contents are account-isolated and never shared across accounts.
• Files Artifacts your browser downloads or produces are stored in your account's files directory on the same volume.
• Audit Action metadata (timestamps, action names, sizes) for your account's activity. Audit logs do not contain page contents or typed values.

Website passwords

If you use the password vault, website credentials are encrypted at rest under keys that never leave the service, and plaintext is never written to logs, artifacts, or API responses.

Subprocessors

The service runs on Railway (hosting), is proxied by Cloudflare (TLS and traffic delivery), and bills through Stripe. Each receives the data its role requires — network traffic, or billing details respectively.

Retention and deletion

Account, profile, and file data persist until the account is deleted or the operator removes it. Suspended or canceled accounts' data is retained for a reasonable period before removal.

What we do not do

• No sale of data We do not sell or share your data with third parties beyond the subprocessors above.
• No content review We do not inspect profile contents or page data except where required to investigate abuse or comply with law.