Privacy Policy

Last updated: March 1, 2025

1. Information We Collect

We collect information you provide directly: your name, email address, workspace details, and content you upload (templates, brand assets, creatives). We also collect usage logs and device/browser information automatically to operate and improve the service.

2. Accounts & Authentication

When you create an account, we store your email and name to authenticate you and associate you with your workspace. You are responsible for your account credentials.

3. Invitations & Team Access

When a workspace admin invites a team member, we store and use their email address to send the invitation and provision access. Invitation links are single-use and time-sensitive.

4. Workspace Data Isolation

All workspace data is strictly isolated. Users can only access data belonging to their own workspace. We do not aggregate or share data between different workspaces.

5. Subscription & Billing Data

Payment processing is handled by a certified third-party billing provider. Brandify does not store your full card details. We retain billing history and subscription status to manage your account.

6. Transactional Emails

We send transactional emails using a third-party email delivery provider. These include account invitations, billing receipts, and service notifications. We do not send unsolicited marketing emails.

7. How We Use Your Data

We use your data to: provide and operate the Brandify service, authenticate users, enforce workspace access, send required service communications, process payments, and comply with legal obligations. We do not sell your data.

8. Third-Party Service Providers

Brandify relies on trusted third-party providers for hosting, database storage, file storage, authentication, email delivery, and payment processing. These providers are contractually bound to process your data only for the purposes we specify. Our infrastructure providers may hold certifications such as SOC 2 Type II. Brandify itself does not hold these certifications directly.

9. Data Retention

We retain your data for as long as your account is active. Upon cancellation, workspace data is retained for 30 days before deletion. You may request immediate deletion by contacting support.

10. Security

We implement industry-standard security practices, including encryption in transit and at rest, access controls, and secure credential management. No system is perfectly secure — please use a strong password and protect your account.

11. Your Rights (GDPR)

If you are located in the EU or EEA, you have rights under GDPR: to access, correct, or delete your personal data; to restrict or object to processing; to data portability; and to lodge a complaint with a supervisory authority. Contact us at privacy@brandify.io to exercise these rights.

12. Sub-Products

Some tools or features within Brandify may operate as sub-products with their own data handling practices. Where applicable, a separate privacy notice will be presented.

13. Cookies

We use essential cookies for authentication and session management. We may use analytics cookies to understand platform usage. You can control non-essential cookies through your browser settings.

14. Changes to This Policy

We may update this Privacy Policy. Material changes will be communicated via email at least 30 days in advance. The 'last updated' date reflects the most recent revision.

Privacy questions? Contact us or email privacy@brandify.io