Privacy Policy
What we collect
- Account data: name, work email, hashed password, organization name, role, sign-in times, and the document revisions and time acknowledged at signup.
- Customer content: brand guidelines, fonts, logos and templates you upload; content you submit for a build or check; and the full input of requests saved while capacity or plan limits prevent a build.
- Usage and audit data: compiles, publishes, builds, checks, certifications and connector sign-ins, with counts and identifiers rather than content.
- Billing data: plan, seats and processor references. Card details are held by our payment processor, not by us.
How we use it
To provide and secure the service, to bill, to support you, and to send transactional email (verification, password resets, invitations, billing notices). We do not sell personal data and we do not use Customer content to train models.
Processors
Service providers may include cloud hosting and object storage, a payment processor, a transactional email provider, and the configured model API for explicitly approved AI reading of guide pages. When you connect ChatGPT or Claude, approved rules and assets supplied to that host are also subject to its policies. Font-file distribution requires an owner's separate approval of distribution rights. Processor agreements and deployment-specific disclosures remain subject to review before launch.
Optional website analytics
If you allow analytics, we use Google Analytics to understand visits to our public website and clicks to start signup. Analytics cookies distinguish visits. We do not send brand uploads, assistant prompts, account details or private workspace pages through this tracking. Our tag removes URL query strings and fragments and limits referrers to their origin. Advertising personalization and Google signals are disabled. Choose “No thanks” to decline, or change your choice using “Analytics preferences” in the footer. Declining stops this tag and removes its first-party analytics cookies; it does not erase data Google already received.
Retention
Account, brand-source and audit records are retained while the account or workspace remains active, subject to deletion controls and any required recordkeeping. Built files and thumbnails expire after 30 days by default and are removed by retention housekeeping. A saved request may retain its full input for up to 30 days from its first refusal; that input is cleared when the request is resumed, discarded or expired. Expiry is processed when the request is accessed or housekeeping runs.
Workspace deletion revokes access and deletes its database records; stored-object cleanup is attempted immediately and retried if interrupted. A minimal deletion audit entry remains. Payment providers retain their own billing records; hosting backups follow the provider's retention schedule. Deleting a Brandwarden workspace does not delete copies already downloaded to another device or host.
Your rights
You can delete your account in Settings. It takes effect at once and can't be undone: your sign-in, memberships, sessions and keys are removed, and workspace history shows “Former member” in place of your name and email. You can also access, correct, export or delete your personal data by contacting privacy@brand-warden.com. Users in the EU/UK have the rights set out in the GDPR; we act as processor for Customer content and as controller for account data.
Security
See our security page for how content, fonts and credentials are protected.