Legal · Privacy

What we collect, and what we don't.

Last updated · July 22, 2026

We keep the data we collect to what the product actually needs, and we tell you plainly what that is. This policy explains what we collect, how we use it, and who processes it on our behalf.

01 Data we collect

Account information: your email address and a securely hashed password, handled by our authentication provider (Supabase). If you buy a paid plan, payment is processed by Stripe — we never see or store your card details.
Brand inputs: the details you enter in the Generator — brand name, a one-line description, a personality, an audience, and your category and subcategory.
Saved work: the brands, palettes, and Brand Kits you save to your account.
Early-access sign-ups: if you join the waitlist before launch, we store the email address you submit.
Usage analytics: which features you use and your plan tier (for example, "palette generated"). Analytics is opt-in — nothing is collected unless you switch it on in our cookie settings. When you're signed in, these events are linked to your account; otherwise they use a random ID stored in your browser. They never include your brand descriptions or strategy content.

02 How we use your data

To run the product: sign you in, save your work, and deliver your palettes, voice drafts, typography, and Brand Kit.
To generate AI-assisted drafts: your brand inputs are sent to Google Gemini to draft your brand voice and typography. They are used only to generate your response — not to train our own models — and are subject to Google's API data terms. Your color palettes are pre-computed from real brands and selected by your chosen subcategory; your name, description, personality, and audience never shape the colors.
To send transactional email: account confirmation, password resets, and a welcome message, delivered through Resend.
To understand and improve the product: opt-in usage analytics, as described above.

The plain version

Your strategy is yours. We do not sell your brand strategies, descriptions, or personal data to third parties.

03 Who processes your data

We rely on a small set of established providers, each handling only the data needed for its role: Supabase (database, authentication, file storage), Stripe (payments), Google Gemini (AI-assisted voice and typography drafts), Resend (transactional email), and Vercel (hosting). Our blog runs on Payload CMS within the same application.

04 Data security

We use industry-standard protection, including encryption in transit (TLS) and at rest. No method of transmission over the Internet is completely secure.

05Your choices & contact

You can request a copy of your data, or ask us to delete it, at any time. Email hello@brandcolors.ai.