Privacy Policy

1. Information we collect

When you sign up for BrandBnk, we collect your name, email address, company name, and payment details. We use Stripe for payment processing. We never store card numbers on our servers.

We also collect usage data: which features you use, how often, and from which devices. This helps us improve the product. We collect this data via cookies and similar tracking technologies.

2. How we use your information

Your data is used to provide and improve BrandBnk, send you product updates and transactional emails, and respond to support requests.

We may use aggregated, anonymised data to publish research or product statistics. We will never sell your personal data to third parties or use it for advertising you did not opt into.

3. Data sharing

We share data with trusted sub-processors to operate the platform, including Stripe (payments), Resend (email), and Vercel (hosting). Each sub-processor is contractually bound to protect your data under GDPR-equivalent standards.

We will disclose your data if required by law, a court order, or to protect the rights and safety of BrandBnk users.

4. Data retention

We retain your account data for as long as your account is active. If you delete your account, we remove your personal data within 30 days, except where we are required by law to retain it longer (e.g. financial records, which we keep for 7 years).

5. Your rights

Under GDPR and UK data protection law, you have the right to access, correct, or delete your personal data at any time. You may also request a portable copy of your data or withdraw consent for processing where consent is the legal basis.

To exercise any of these rights, email us at legal@brandbnk.com. We will respond within 30 days.

6. Cookies

BrandBnk uses strictly necessary cookies to keep you logged in, and optional analytics cookies to understand product usage. You can manage cookie preferences at any time via our cookie settings panel. See our Cookie Policy for full details.

7. Security

We use industry-standard encryption (TLS in transit, AES-256 at rest), role-based access controls, and regular security audits. We will notify you within 72 hours of discovering any breach that affects your personal data.

8. Changes to this policy

We may update this Privacy Policy periodically. We will notify you by email and update the "last updated" date at the top of this page. Continued use of BrandBnk after changes constitutes acceptance of the revised policy.