Privacy Policy
This policy explains what personal data AIBrandPro (“we”, “us”) collects when you use the AIBrandPro website and app (the “Service”), why we use it, who we share it with, how long we keep it and how you can see, download or delete it.
1. Who we are
The Service is operated by [LEGAL BUSINESS OR OWNER NAME], [COUNTRY]. [REGISTERED COMPANY: name and number — or “a sole trader / individual”]. [BUSINESS ADDRESS — optional].
Contact for privacy questions and requests: sumaan.nabeel.khan@gmail.com.
2. What we collect
| Data | Examples | Why |
|---|---|---|
| Account | Your name, email address and password. We never store your password itself — only a salted hash of it. | To create your account and log you in. |
| Workspace content | Text you write or generate (posts, captions, emails, blog posts, campaigns), your content calendar (dates, platforms, notes, links to posts you mark as posted). | To provide the Service. |
| Brand Kit | Brand name, description, tone, colours, keywords, target country, people style for images, website, social media handle and your logo. | To make generated content match your brand. |
| Product photos | Photos and descriptions of your products that you upload. | To show your real products in generated images. |
| Your pictures | Brand images (up to 12 photos and screenshots in your Brand Kit) and pictures you attach to a single post. They are used as they are in your images, carousels and videos and are not sent to AI providers. | To show your real business, shop or website in your content. |
| Website import (only if you use it) | We read the one public web page you enter (for example your homepage) and its pictures, and suggest your brand name, description, colours, logo and pictures. Nothing is saved unless you choose it; the rest is discarded after at most 15 minutes. No AI is used for this. | To fill in your Brand Kit faster. |
| Generated media | AI images, carousel slides, short videos, voiceovers and covers made for you. | To provide and store your content. |
| Billing | Your plan, payment status and invoices. Payments are handled by our payment provider (Lemon Squeezy, acting as Merchant of Record). We never see or store your card details. | To charge for paid plans. |
| Technical data | IP address and basic request information in server logs, browser settings needed to run the app. | Security, preventing abuse, fixing errors. |
| Connected social accounts (coming soon) | When you connect Meta (Facebook, Instagram), TikTok or Google/YouTube: account name and access tokens. | Only to publish what you ask us to publish. |
We do not sell your personal data and we do not use it for advertising.
3. AI providers: what is sent to them
To generate content we send the relevant parts of your request to these AI providers:
- Google Gemini (text): your ideas and instructions, Brand Kit facts (such as brand name, tone, country, website), product names and descriptions, and planning details for the content calendar.
- Cloudflare Workers AI (images and voice): image descriptions (prompts), the reference photo of a product you choose, and the text of voiceovers.
Short videos are assembled in your own browser on your device; the finished video is then uploaded to our storage. The providers process this data to return the result to us under their own terms and privacy policies. Please do not put sensitive personal information (for example health data or other people's private details) into prompts.
4. Service providers we use
| Provider | What for |
|---|---|
| Render | Hosting the app (servers). |
| Neon | Database (PostgreSQL) holding your account and workspace data. |
| Supabase Storage | Storing files: your logo, product photos, brand images and attached pictures, and generated images, slides, videos and voice clips. |
| Google (Gemini) | AI text generation. |
| Cloudflare (Workers AI) | AI image and voice generation. |
| Lemon Squeezy | Payments and subscriptions (acting as Merchant of Record). |
| Google Fonts | Website fonts (your browser downloads them from Google, which sees your IP address). |
These providers may process data in countries other than yours (for example the United States or the European Union). [Describe the safeguards used for international transfers, e.g. standard contractual clauses — lawyer to confirm.]
Files are stored with long, unguessable web links. Anyone who has the exact link to a generated image, video or product photo can open it, so only share those links with people you trust.
5. Connected social accounts (Meta, TikTok, Google/YouTube)
Publishing directly to social networks is being added. When you connect an account:
- we only ask for the permissions needed to publish and to show basic results of your own posts;
- access tokens are stored encrypted and are never shown in your browser;
- we only publish content that you choose and schedule — we never post on your behalf otherwise;
- you can disconnect at any time in the app, and you can also remove AIBrandPro's access in your Facebook, Instagram, TikTok or Google account settings. Deleting your account deletes the stored tokens.
6. Cookies and local storage
We do not use advertising or analytics cookies. The app stores your login session (a sign-in token) and a few preferences (for example calendar view and reminder settings) in your browser's local storage. These are needed for the app to work; they are removed when you log out or clear your browser data. Browser notifications for calendar reminders are only used if you allow them.
7. How long we keep data
- Account and workspace data, files and generated content: as long as your account exists.
- Pictures attached to a single post (not your Brand images): the 40 newest per workspace are kept; older ones are deleted automatically, but only if no saved post, image, carousel or video uses them.
- When you delete your account: your data and files are deleted right away from the live systems. Copies may remain in backups for up to [30] days and are then overwritten.
- Billing records may be kept longer where the law requires it (for example for tax purposes).
- Server logs: up to [30] days.
8. Your rights
Depending on where you live, you may have the right to access, correct, download, delete or restrict the use of your personal data, and to object to some uses. In the app you can:
- Access and correct your data in Settings, Brand Kit, Products and Content;
- Download (export) your data: Settings → Account → Download my data (JSON);
- Delete your account and all its data: Settings → Account → Delete my account and all data (see Data deletion).
For anything else, email sumaan.nabeel.khan@gmail.com. You can also complain to your local data protection authority.
9. Security
We use HTTPS, hashed passwords, encrypted social-account tokens and access checks so that each workspace can only see its own data. No system is 100% secure; if a breach affects you, we will tell you as required by law.
10. Children
The Service is for businesses and is not meant for anyone under [16]. We do not knowingly collect data from children.
11. Changes
We will post any changes on this page and update the date at the top. If the changes are important, we will also tell you in the app or by email.