Brand Anchor ("we", "our", "us") operates the website at brandanchor.app and the application at dashboard.brandanchor.app. This Privacy Policy explains what data we collect, why we collect it, and how you can control it. We believe in plain language over legal jargon.

1. What We Collect

Account data

When you register, we store your name, username, email address, and a bcrypt-hashed copy of your password. We never store your password in plaintext. You may also upload an avatar image.

Team and workspace data

We store your team name, branding configuration (logo URL, primary colour), and the roles and membership status of team members you invite.

Digital assets and file metadata

Files you upload are stored on Cloudflare R2 (a S3-compatible object storage service). We also store metadata for each file: filename, file size, MIME type, version history, workflow status, and any change notes you add.

Comments and collaboration

We store all comments made on assets, including their text content, pixel-level coordinates (for pinned comments), video timestamps, and thread replies. Comments made by guest clients via a share link include the guest's self-provided name — guests do not need an account.

Share link activity and access logs

For every file access through a share link, we log: the IP address of the accessor, their browser user agent, the referrer URL, the number of bytes transferred, and the timestamp. This data is used to enforce plan egress limits and provide you with access analytics on your shared files. It is not sold or used for advertising.

Usage metrics

We track your workspace's storage consumption, number of assets, team member count, share link count, API call volume, and monthly egress to enforce plan limits and display usage in your dashboard.

Subscription and billing data

We store your plan type, billing cycle, subscription status, and the customer and subscription IDs provided by our payment processor. We do not store your credit card number or full payment details — these are handled entirely by our payment processor.

Contact form submissions

When you contact us via the website form, we store your name, email address, inquiry type, message text, and the timestamp of your consent. This data is used solely to respond to your inquiry.

Website analytics

The brandanchor.app marketing website uses Firebase Analytics to collect anonymous interaction data: which buttons you click, which pages you visit, and navigation patterns. This helps us understand what content is useful. Firebase may set cookies for this purpose. This analytics is limited to the marketing website — the application at dashboard.brandanchor.app does not use third-party analytics.

2. Cookies and Session Data

Session cookie: When you log in to the dashboard, we set a session cookie that expires after 24 hours. It is httpOnly, secure (HTTPS only in production), and sameSite: lax. This cookie is strictly necessary for you to stay logged in — we do not use it for tracking.
Firebase Analytics cookies: On the marketing website only, Firebase may set cookies to distinguish unique visitors and sessions for analytics purposes.

We do not use advertising cookies, cross-site tracking cookies, or retargeting pixels.

3. How We Use Your Data

To provide, operate, and maintain the Brand Anchor platform.
To process your file uploads and generate thumbnails and preview images.
To track your usage against your plan's limits and notify you when you approach them.
To send essential account emails: email verification, invitation links, password resets, and billing notifications.
To respond to contact form inquiries.
To detect and prevent abuse, fraud, or security incidents (using access logs).
To improve the platform using aggregated, anonymised analytics from the marketing website.

We do not use your data to train AI models. We do not sell your data. We do not use your data for advertising.

4. Third-Party Services

Cloudflare R2: Your uploaded files, thumbnails, and previews are stored on Cloudflare's object storage infrastructure.
Payment processor: We use a third-party payment gateway to handle subscription billing. They process and store your payment card details under their own privacy policy — we only receive a customer ID and subscription ID.
Firebase (Google): Used for analytics on the marketing website and for push notification infrastructure. Governed by Google's Privacy Policy.

5. Guest Clients and Share Links

Clients who receive a share link can comment on and approve assets without creating an account. When a guest leaves a comment, their self-provided display name is stored alongside the comment. Their IP address and user agent are logged as part of the access log for security and egress tracking. Guests are not profiled or tracked beyond the scope of the specific share link they were given.

6. API Access and OAuth

If you generate API keys or connect third-party applications via OAuth, we store the associated tokens, their scopes, and their expiry timestamps. You can revoke these at any time from your account settings. Revoking a token immediately invalidates it.

7. Data Security

Passwords are hashed using bcrypt and never stored in plaintext.
All data is transmitted over HTTPS/TLS.
The API enforces HTTP security headers via Helmet.js and applies rate limiting to all endpoints.
Session cookies are httpOnly and secure, preventing access from client-side scripts.
CORS is restricted to authorised origins only.

No method of transmission over the Internet is 100% secure. While we apply industry-standard protections, we cannot guarantee absolute security.

8. Your Data Rights

Access and export: You can export a full copy of your personal data — including your profile, assets, comments, access logs, and connected applications — directly from your account settings.
Correction: You can update your name and avatar at any time from your account settings.
Deletion: You can delete your account at any time. Deletion is immediate and permanent — all your data, teams you own, and uploaded assets are removed from our systems with no recovery option.

9. Data Retention

Active accounts: Data is retained for as long as your account is active.
Subscription cancellation: If you cancel your subscription but do not delete your account, your data is retained for 30 days to allow reactivation. After 30 days, all data is automatically and permanently purged by our daily maintenance jobs.
Account deletion: Immediate, permanent deletion of all associated data.
Session cookies: Expire after 24 hours.
Expired OAuth tokens and verification tokens: Removed automatically by daily cleanup jobs.
Contact form data: Retained until the inquiry is resolved and no longer needed for our records.

10. Children's Privacy

Brand Anchor is not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have done so, we will delete that data promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the date at the top of this page. For material changes, we will notify active users via email.

12. Contact Us

If you have questions about this Privacy Policy or want to exercise any of your data rights, contact us at:

[email protected]