Privacy Policy

Brandkura operates the branding service at brandkura.com. This policy describes how we handle personal information when you visit the website, create an account, or use its branding tools. For privacy questions or requests, email [email protected].

• Account information: account identifiers, name, email address, and profile information supplied through our authentication provider, Clerk. When you choose Google sign-in, Google and Clerk process the information needed to authenticate you, such as your basic profile and email address.
• Project information: business descriptions, creative briefs, proposed names, uploaded reference images, logos, generated content, and other information you submit or save.
• Technical information: hosting, security, and authentication providers may process IP addresses, browser and device information, request logs, and session information to deliver and protect the service.
• Communications: information you include when you contact us.

We use information to create and manage accounts, authenticate users, save projects, generate branding materials, provide exports and sharing, respond to requests, and maintain service reliability and security.

Where applicable law requires a legal basis, we rely on providing the service you request, legitimate interests in operating and securing it, compliance with legal obligations, or consent where required.

When you request AI features, relevant project content, prompts, reference images, and related context are sent to the AI services and API intermediaries configured for Brandkura. Those services process that content to generate responses. Do not submit passwords, sensitive personal information, or confidential material you are not authorized to share.

We also use providers for authentication (Clerk and, when selected, Google sign-in), hosting, database storage, and network delivery. Providers may process information under their own terms and privacy policies. AI provider retention and model-training practices depend on the provider and configuration; this policy does not promise that every provider offers zero retention or excludes training.

For information about the providers relevant to your use, contact us. See also Clerk’s Privacy Policy and Google’s Privacy Policy.

When you enable a project’s public share link, anyone with that link may view the shared brand content and access available exports. Treat shared content as public. Disabling sharing prevents future access through that link but cannot remove copies others have already saved.

We may disclose information to providers as described above, when required by law, to protect rights and security, or in connection with a business transfer subject to applicable privacy requirements.

Authentication and security features use cookies and similar technologies to maintain sessions and protect accounts. The website may also store interface preferences locally. Blocking necessary cookies can prevent sign-in or other features from working. You can manage cookies and site storage through your browser settings.

We retain account and project information as needed to provide the service and meet applicable operational, legal, and security requirements. You can delete projects using available account controls and contact us to request account or personal-data deletion. Deleting an authentication account may not automatically delete all project records; contact us for a complete deletion request.

Deletion from backups or provider systems may take additional time, and some records may need to be retained where legally required. We use access controls and other safeguards, but no storage or transmission system can guarantee absolute security.

Depending on your location, you may have rights to access, correct, delete, or obtain a copy of your personal information; object to or restrict certain processing; or withdraw consent where processing depends on consent. You may also have a right to complain to your local data-protection authority.

Send requests to [email protected] from your account email where possible. We may need to verify your identity and will respond within the time required by applicable law. Revoking Google access does not itself delete information already saved in Brandkura.

Our providers may process or store information outside your country, where privacy laws may differ. Where applicable law requires safeguards for international transfers, those requirements apply to our handling of your information.

Brandkura is not intended for children under 18. If you believe a child has provided personal information, contact us so we can investigate and address it.

We may update this policy as the service changes. The date above identifies the latest revision. We will provide additional notice of material changes where required by law. Contact Brandkura at [email protected].