GlobantGlobant← Back

Privacy Policy

Last updated: March 2026

1. Introduction

The BRD Generator ("Service") is operated by Globant ("we", "us", "our"). This Privacy Policy explains how we collect, use, and protect information when you use our Service.

2. Information We Collect

When you use the Service, we collect:

  • Authentication data: Your Google Workspace email address, provided via Google Identity-Aware Proxy (IAP) during sign-in.
  • BRD content: Business requirements documents and related data you create within the Service, stored in your tenant database.
  • Integration credentials: Confluence API tokens you provide, stored encrypted (AES-256-GCM) in your tenant database.
  • Usage logs: Request logs including timestamps and IP addresses, retained for operational monitoring.

3. How We Use Your Information

  • Service delivery: To authenticate you, store your BRD content, and provide AI-assisted generation features.
  • AI processing: BRD content is sent to Google Vertex AI (Gemini models) for AI generation features. Content is processed in accordance with Google Cloud's data processing terms and is not used to train models.
  • Export: When you export to Confluence, your content is sent to your configured Atlassian instance.

4. Data Storage and Security

  • All data is stored in Google Cloud Platform, region me-central1 (Doha, Qatar).
  • Each customer's data is isolated in a dedicated database within our shared infrastructure.
  • Sensitive credentials are encrypted at rest using AES-256-GCM.
  • All connections use TLS encryption in transit.
  • Access is controlled via Google IAP with Google Workspace authentication.

5. Data Retention

BRD content is retained for as long as your account is active. You may delete individual BRDs at any time. Upon account termination, all tenant data is deleted within 30 days.

6. Third-Party Services

  • Google Cloud Platform: Infrastructure, authentication (IAP), and AI processing (Vertex AI).
  • Atlassian Confluence: Optional export destination, only when configured by the user.
  • Cloudflare: DNS management.

7. Your Rights

You may request access to, correction of, or deletion of your personal data by contacting your organisation's administrator or emailing us at the address below.

8. Contact

For privacy-related inquiries, contact: matthew.bunce@globant.com