Privacy Notice

Who is responsible for your information

Brandyn is responsible for your information on the Brandyn platform. Contact support@brandyn.agency.

Information we use

We use account and contact details, sign-in information, country and timezone, Audit and Strategy answers, comments, uploaded materials, approved decisions, generated documents, payment references and support or privacy requests. Security and service records may include device, browser, network and request information. If you choose Google sign-in, we receive the identity details needed to authenticate your account. Stripe processes card details; the platform stores purchase and payment references rather than your complete card number or security code.

Why we use it

We use the information you provide to carry out the Audit or Strategy you request, save your progress, research your market, prepare your documents, manage purchases and provide support. The legal basis is performing our contract with you or taking steps at your request before a contract. We also use necessary records for legal obligations, accounting, fraud prevention, security and resolving disputes. Security and service administration rely on our legitimate interests in operating a reliable service, balanced against your rights. Optional marketing preferences are separate from access to your purchased service.

AI-assisted processing and research

Relevant answers, approved decisions and uploaded content are processed by AI services to research, analyse and generate your requested work. Do not submit passwords, payment credentials or unnecessary sensitive personal information. You review consequential strategic choices. The platform does not make legal or similarly significant decisions about you solely by automated processing. Research may include public information about businesses and competitors, with sources used where relevant to your requested service.

Service providers and international processing

Current platform providers include Supabase for accounts, database and storage, Vercel for hosting, Trigger.dev for background processing, OpenAI for AI-assisted production, and Stripe for payment processing. Google is involved if you choose Google sign-in. Providers receive the information necessary for their role and may also act as independent controllers for their own security or legal obligations. Processing may take place outside the UK. You can request information about the provider locations and transfer arrangements relevant to your account by contacting support@brandyn.agency. We do not sell your personal data.

How long information is retained

Account information, saved answers and documents are retained to provide your workspace and purchased service. You can request account closure and erasure. Retention after closure depends on the need to complete that request, resolve an outstanding service issue or dispute, preserve security evidence, or meet accounting and other legal obligations. Information no longer needed for those purposes should be removed or anonymised. Provider backup retention may differ from the active workspace. A deletion request is verified and processed through the privacy workflow; pressing the request button does not immediately erase all records or legally required purchase evidence.

Cookies and saved progress

To limit automated misuse, we also keep a keyed hash of the network address with a count of recent Audit starts. This admission record does not store the raw address and is removed after its short protection window (up to approximately 25 hours, on subsequent start requests).

Necessary cookies keep you signed in and allow an Audit to resume. The Audit resume credential is held in a server-protected cookie lasting up to 30 days. You can remove cookies through your browser, but may lose the ability to resume an anonymous Audit. The marketing website may have separate cookie settings. This notice covers the platform.

Your rights and contact

Depending on the applicable law and circumstances, you may request access, correction, erasure, restriction or portability, or object to processing based on legitimate interests. You may withdraw consent where consent is the basis without affecting earlier lawful processing. Your account provides export and deletion-request controls. Contact support@brandyn.agency for help or to exercise a right. We may verify your identity before releasing or deleting information. You can also complain to the UK Information Commissioner at ico.org.uk.