Privacy notice

This notice applies to brandon (heybrandon.app and *.brandon.guide), operated by Thomas Schörghuber-Haider Werbegrafik und -design. It describes how we process personal data when you visit our marketing site, sign up for early access, or use the brandon app.

Thomas Schörghuber-Haider Werbegrafik und -design Lorch 5A, 4470 Enns, Austria Email: tom@grafication.at

This site is hosted on infrastructure provided by Vercel Inc. (USA). Every request necessarily processes technical log data (IP address, browser/user agent, timestamp, requested page) to deliver the site and keep it secure and stable, on the basis of our legitimate interest (Art. 6(1)(f) GDPR). This data is not otherwise linked to your account.

When you create an account, we process your name, email address, and password (stored as a salted hash) to authenticate you, on the basis of performing our contract with you (Art. 6(1)(b) GDPR). Any organizations, brand guides, uploaded assets (logos, images, fonts), and team member information you create in the app are stored to provide the service you've signed up for. This data is stored and processed by our database and authentication provider, Supabase Inc.

If you use the optional "analyze a PDF" feature during onboarding, the content of the PDF you upload is sent to Anthropic PBC (USA) to extract brand colors, typography, and tone-of-voice suggestions. This only happens when you actively use this feature, on the basis of your consent and our contract with you (Art. 6(1)(a)/(b) GDPR). The PDF content is used solely to generate suggestions for your own brand guide.

We use CookieYes to manage cookie consent. Strictly necessary cookies (e.g. keeping you signed in, remembering your language and theme preference) are set regardless of consent, as they are required for the site to function (Art. 6(1)(f) GDPR). Any non-essential cookies (e.g. analytics) are only set after you actively consent via the cookie banner, and you can withdraw that consent at any time through the same banner.

If you join our early-access waitlist, we store the email address you provide to contact you about access, on the basis of your consent (Art. 6(1)(a) GDPR). If you sign up with an invite code or are invited to an organization by an existing member, we process your name and email address to create and manage your account (Art. 6(1)(b) GDPR).

We do not sell personal data. To operate brandon, we share data with the following processors, each bound by a data processing agreement: Supabase Inc. (database, authentication, file storage), Vercel Inc. (hosting), Anthropic PBC (AI-assisted PDF analysis, only when you use that feature), CookieYes (consent management), and Prismic (content management for our marketing pages — this does not involve your account or personal data).

Some of the processors listed above (Supabase, Vercel, Anthropic) may process data outside the European Economic Area, including in the United States. Where this happens, we rely on appropriate safeguards such as the EU-U.S. Data Privacy Framework or Standard Contractual Clauses. [Data storage region to be confirmed and specified here once finalized.]

We retain account and brand guide data for as long as your account is active. If you delete your account or organization, associated data is deleted or anonymized within a reasonable period, except where we are legally required to retain it for longer (e.g. accounting records).

Under the GDPR, you have the right to access, rectify, erase, or restrict the processing of your personal data, the right to data portability, and the right to object to processing based on legitimate interest. To exercise any of these rights, contact us at tom@grafication.at. You also have the right to lodge a complaint with a supervisory authority — in Austria, the Österreichische Datenschutzbehörde (www.dsb.gv.at).

For any questions about this privacy notice or how we handle your data, contact us at tom@grafication.at.

We may update this privacy notice as our service or applicable law changes. We'll update the "last updated" date above whenever we do.