Privacy Notice

1. Data controller

Brand Builder is the data controller for the personal data collected through Content Studio. We act as controller with respect to your account data and the content you enter into the Service. You can contact us at the support email provided in the application.

2. Data we process and why

• Account data (email address, encrypted password, user identifier): to create and manage your account and authenticate you. Legal basis: performance of a contract.
• Brand profile (brand name, industry, target audience, tone of voice, platforms): to generate the content you request. Legal basis: performance of a contract.
• Generated content and history (posts, calendars, dates): to show you your previous generations. Legal basis: performance of a contract.
• Subscription data (status, plan, customer and subscription identifiers, renewal date): to grant you access to paid features. Legal basis: performance of a contract and legal obligation.
• Technical and usage data(IP address, device identifiers, error and activity logs): security, fraud prevention, diagnostics and product improvement. Legal basis: legitimate interest.
• Support messages: to handle your inquiries. Legal basis: legitimate interest and performance of a contract.

We do not use your data to send you marketing communications unless you give us your consent, which you can withdraw at any time.

3. Artificial intelligence

To generate content we send your brand profile and instructions to an AI model provider that acts as a data processor on our behalf. Do not enter sensitive personal data or confidential third-party information into the generator.

4. Who we share data with

• Service providers: hosting, database and authentication providers, and AI model providers, acting as data processors.
• Paddle.com, our Merchant of Record, for product sales, subscription management, payments, tax compliance and billing.
• Professional advisors(legal or accounting) when necessary.
• Authorities when there is a legal obligation to do so.

We do not sell your personal data.

5. International transfers

Some of our providers may process data outside the European Economic Area. In such cases we apply appropriate safeguards, such as adequacy decisions or standard contractual clauses from the European Commission.

6. Retention

We keep your account data, brand profile and history for as long as your account is active. If you close it, we delete or anonymize it within 30 days, except for billing data that we must keep for legal and accounting obligations. You can delete specific generations from your history at any time.

7. Your rights

You can exercise your rights of access, rectification, erasure, restriction, portability and objection, as well as withdraw your consent when processing is based on it. Write to us at the support email and we will respond within one month. You can also file a complaint with the competent supervisory authority (in Spain, the Spanish Data Protection Agency).

8. Security

We apply appropriate technical and organizational measures: encryption in transit, passwords stored encrypted, per-user access control in the database, and limited access by our staff.

9. Cookies and local storage

We use cookies and local storage that are strictly necessary to keep you signed in and for the payment process. We do not use advertising or profiling cookies. You can delete these cookies from your browser, though you will then need to sign in again.

10. More information

See also our terms and conditions and our refund policy.