BrandParent
Privacy Policy
1. What we collect
| Data | Why |
|---|---|
| Email address, password (hashed) | To create and secure your account. |
| Cubicle details — brand name, tone, audience, signature phrases, lexicon | To power the voice profile and Bleed Check features you set up. |
| Drafts and post content you write | To save your work, run Bleed Check, and publish or schedule posts. |
| Logos, background images, and images or videos you attach to posts | To style your cubicles and publish the posts you create. |
| Billing status — your plan, Stripe customer ID and payment date (never your card number, which only Stripe sees) | To know which plan you're on. |
| Access tokens for social accounts you connect (TikTok, Bluesky, Tumblr, Discord webhook URLs, Facebook, Instagram, LinkedIn, Pinterest) | To post to that platform on your behalf, for the one cubicle you connected it to. |
| Basic usage data (login times, error logs) | To keep the service running and debug problems. |
2. What we don't do
- We don't sell your data.
- We don't share one cubicle's connected-account credentials or content with another cubicle, even within your own account — that separation is the whole point of the product.
- We don't post anything to a connected account unless you initiate it (via "Publish now") or schedule it yourself.
3. Where it's stored
BrandParent runs on Supabase (Postgres + authentication), with access to your data restricted by row-level security so only your own account can read or write it. Automated scheduled publishing runs inside that same database on a fixed schedule, using a secret credential that isn't exposed publicly.
4. Third parties we send data to
When you connect a social account and publish or schedule content, we send that content (and, if included, an image URL) directly to the platform you connected — for example, Meta's Graph API for Facebook/Instagram, Bluesky's AT Protocol servers, LinkedIn's API, or TikTok's Content Posting API. We use Anthropic's Claude API (with Google's Gemini API as a backup) to power the optional "Optimize caption" feature and the voice interview; the text you submit is sent to that provider to generate a response, per their own data-use terms. Payments are handled by Stripe, and the website is hosted by Netlify.
5. Your choices
- Disconnect any social account any time from the Connections tab, or by revoking access from that platform's own account settings.
- Delete a cubicle to remove its drafts, voice profile, and connected-account records.
- Request full account deletion by emailing us — we'll remove your account data within a reasonable time.
6. Cookies
We use only what's needed to keep you logged in (an authentication session). We don't run third-party ad-tracking cookies.
7. Children
BrandParent isn't intended for anyone under 18. We don't knowingly collect data from children.
8. Changes
We'll update the date at the top of this page whenever this policy changes.
9. Contact
Questions, data requests, or deletion requests: thegreensatyr@gmail.com.