Legal
Privacy Policy
Who we are
Brandnetic is operated by Efficiency Strength Training, LLC (“we”, “us”). This policy explains what we collect when you use Brandnetic, why, and what you can ask us to do. It works together with our Terms of Service.
What we collect
- Account. Your name, email address and a salted hash of your password (never the password itself).
- Workspace content. Your Brand Kit, uploads, campaigns, briefs, the images and video made for you, and the records of how each was made.
- Activity and security. What happens in a workspace (for its owners' audit trail), sign-in and generation records, and a one-way hash of your network address used to limit abuse.
- Billing. Stripe handles your card. We receive your Stripe customer and subscription identifiers, what you bought, amounts and payment status. We never see or store full card numbers.
- Connected ad platforms. If you connect one, read-only performance data for your ads. Access tokens are stored encrypted.
- Invitation requests. The details you enter when you request access.
Brandnetic uses a single session cookie to keep you signed in. We do not use advertising cookies or sell your information.
Why we use it
To provide Brandnetic: run your workspaces, make the creative you ask for, bill you, keep accounts secure, prevent abuse, answer support requests and improve the service. Your content is used for your workspace only; it is never shown to other customers.
Who processes it for us
- Vercel (hosting) and Neon (database), in the United States.
- Cloudflare R2 (file storage for uploads and generated media).
- Stripe (payments and billing).
- Higgsfield and the model makers it routes to (image and video generation): the request and any source images or video you choose are sent to make the output.
- Anthropic or xAI (the AI directors that write briefs and plans), when those features are used.
Each processes data only to provide its service to us, under its own terms and security commitments.
How long we keep it
We keep your data while your account or workspace is active. Deactivating a workspace keeps its data so it can be reactivated. When you ask us to delete your account or a workspace you own, we delete it within 30 days, except records we must keep for billing, tax or legal reasons.
Your choices
You can ask to see, correct, export or delete your personal information by emailing [email protected]. We answer within 30 days. Depending on where you live you may have further rights, and you can always complain to your local regulator.
Security
Passwords are stored only as salted hashes, sessions expire, sign-in attempts are limited, platform tokens are encrypted, media is served through short-lived signed links, and all traffic uses HTTPS. No system is perfectly secure; if we learn of a breach affecting you, we will tell you.
Children
Brandnetic is for businesses and adults. It is not meant for anyone under 18, and we do not knowingly collect their information.
Changes and contact
If we change this policy in a way that matters, we will tell you before it takes effect. Questions: Efficiency Strength Training, LLC · [email protected]