Last updated: 7 October 2026. Plain English, because that’s the whole product philosophy.
Your brand content lives in your browser, not on our servers, unless you’re signed in and choose to keep your studio in your account so it opens on any device. The free audit keeps nothing you type. The on-device headshot treatments never upload your photo. AI portraits are opt-in: only if you choose to generate them are your selfies sent to our image provider (Google) to create your portraits — they aren’t stored afterwards. Text and images you submit aren’t used to train anything. We run no advertising trackers — only cookieless page counts that tell us which pages are visited, never who visited them.
What we keep is your choice. If you become a member, we keep a small record so your access works (your email and your access code). If you create an account, we keep your email and your sign-in records, and on the free plan a record of which parts of the studio you’ve tried (never what they made). Your account page shows you all of it and deletes it on request. If you ask for a bio page (open to members first), we keep what that page is built from — you’ll be asked to accept this before anything is saved, and you can delete it at any time.
Content you type — your role, goals, headline, About text, posts you paste, and emails you paste into the Email coach — is sent to our servers only at the moment you request a generation or audit, solely to produce your output. Unless you ask for a bio page (section 2), we do not store this content in a database; it passes through and comes back as your result.
An email you paste can include other people’s names and details. Paste only the message you’re replying to, and leave out anything they wouldn’t expect you to share. It is used to write your drafts and is not kept.
The free audit may ask for the name you’d like your bio page to use (for now, only when you’re signed in as a member). Answering is optional, and the audit works the same either way. Giving a name does not mean we keep it: like the rest of the audit, it is used for that one result and discarded — unless you then choose a bio page and accept that it will be kept.
Your photo — the headshot treatments run entirely on your device using browser image effects; those photos are never uploaded. AI portraits are opt-in and different: if you choose to generate them, the selfies you upload are sent to our image provider (Google) purely to produce your portrait options, and you tick a consent box before this happens. We don’t store your selfies or the generated portraits on our servers — they’re processed in the moment and returned to your browser — except a headshot you choose to put on your bio page (section 2).
Locally stored data — your strategy, your craft rules (how you write), your email signature, generated assets, audit score history, and access code are saved in your browser’s local storage so your work survives reloads. Unless you keep your studio in your account (below), this data sits on your device and we cannot see it. Clearing your browser storage deletes the copy on that device.
Membership and payments — payments are handled by Stripe (your checkout and bank statement may show Link, Stripe’s payment service). We never see or store your card details. When you join, we keep a membership record: the email address you paid with, your access code, your plan, its status, and the Stripe customer and subscription references needed to keep your access in step with your subscription. We use your email to send your access code and messages about your membership, and to answer you when you contact us. Those emails are sent through our email provider, Resend.
Your account — you can sign in with your email address instead of your access code. You enter your email and we send a single-use sign-in link that stops working after 15 minutes. If you never use the link, the address is deleted within 24 hours. Once you’re signed in, we keep: your email address; when your account was created and when you last used it; your sign-in sessions (a scrambled copy of the key your browser holds, and when it expires — 30 days after you last use it); which access code you linked, and when; and a record of the account emails we’ve sent you, and when. We don’t record your IP address or your device against your sessions.
The free plan — if you use the studio with a free account, we record which parts you’ve tried and when, never the words, so we can show what’s left and keep each free try to one. We look at these records, never the words, to see how the free plan is used. To keep the free plan fair, we don’t open free accounts for throwaway email addresses, and we limit how many can be opened from one network in a day. For that we use your IP address for up to two days, as we do for the audit, and don’t store it with your account. If you tell us why you didn’t join, we keep your answer as feedback about BrandStudio (see “Seeing and deleting it”). The record is on your account page and is deleted with your account.
Your studio in your account — if you’re signed in, you can keep your studio in your account so it opens the same on your phone and your laptop. We ask before the first save, and you can switch it off at any time, in the studio or on your account page. While it’s on, we keep three things: your strategy (your positioning, your pillars, and the answers you gave to build them), your craft rules (how you write), and your email signature. Each change is kept as a new version, so your account page shows what changed and when, and you can delete any of it. We use it only to show you your studio and to write your drafts in your position and voice. It is never used to train AI models, never combined with other members’ data, and your signature is still never sent to the AI. We don’t keep the posts, comments, emails or other drafts you generate, or your Saved items: those stay in the browser where you made them. Switching it off deletes your studio from your account; your browser keeps its own copy.
Seeing and deleting it — your account page shows everything we hold about you, lets you download it, and deletes it. Deleting your account deletes your email, your sessions, the link to your access code, and anything BrandStudio has learned about you. It doesn’t cancel a subscription (do that in the billing portal) and doesn’t remove your membership record or Stripe’s payment records, which are kept as section 5 describes. If you’ve given us feedback about BrandStudio, that record survives deletion without your name or your words: only the choice you made and when, so we can count what people think of the product.
Technical basics — our hosting provider (Vercel) processes IP addresses and standard request logs to serve and secure the site, and we use IP addresses and access codes transiently to rate-limit the audit and the app. We do not run advertising or cross-site tracking cookies.
Aggregate page analytics — we use Vercel Web Analytics to count page views and see which pages people visit, so we know whether the product is useful. It is cookieless: it sets no cookies, assigns you no persistent identifier, and cannot follow you to other websites. We see counts and trends, never individuals, and it is never joined to anything you type into the app. Separately, when you complete an audit we count it along with the campaign link you arrived from (if any) and a broad score band — never your IP, your words, or anything that tells one person from another.
A bio page is a public page about you at brandstudio.tech/yourname, built to be read by people and by AI assistants. Claiming a name is open to members first: you need to be signed in, with your membership linked to your account, and the name is claimed for your account’s email address. If you aren’t, nothing described in this section is collected.
A bio page only works if we keep your details, so asking for one means agreeing to that. Before anything is saved you’ll be asked, in a separate step, to accept it. That box is never ticked for you, and running an audit or typing a name is not agreement. We record when you accepted.
What we keep once you accept: the name you chose for your page, the headline and About text you had audited, the audit result, and your account’s email address. Later, whatever you add or confirm for the page itself, including a headshot if you add one, stored so your page can show it. Remove it and it’s deleted.
How it’s used: only to build, show and update your bio page and the positioning in your account. You review it before it is used — nothing from your audit goes onto your page until you confirm it. It is never used to train AI models, never combined with other members’ data, and never sold or shared for marketing.
Your audit as a suggestion: once you’ve claimed a name, your audit waits in your account as a suggested starting position. Keep it, and it becomes your current position. Dismiss it, and we keep it marked as dismissed, only so we never suggest it again; it stays on your account page, where you can delete it. Delete it, and it’s gone.
Public means public. Your bio page is private until you publish it. Once published, what’s on it can be seen, and indexed, by anyone — including search engines and AI assistants. You can unpublish it at any time. We cannot recall copies that others have already made.
If you don’t finish: if you start claiming a page but never confirm your email, what you gave us is deleted within 24 hours. It is not kept “just in case”.
Deleting it: you can delete your bio page and the details behind it at any time. Delete means deleted, not hidden.
Text generations and audits are produced by Anthropic’s Claude API. AI portraits are produced by Google’s Gemini API. Content you submit is processed by the relevant provider to return your result, subject to that provider’s commercial API terms, under which API inputs and outputs are not used to train their models. We recommend not submitting sensitive personal information (health, financial details, government identifiers) — a branding tool doesn’t need it.
We don’t sell or share your information for marketing. We don’t access your LinkedIn account — the Service has no connection to LinkedIn; you copy and paste content yourself. We don’t build advertising profiles. We don’t store the content you generate in the app on our servers. The only content we keep is what you ask us to keep for a bio page, what you confirm into your account, and your studio, if you choose to keep it in your account.
Content in the app and the audit: not kept beyond transient processing and standard infrastructure logs held by our providers for security purposes. Data on your device is under your control at all times.
Membership records: kept while your membership exists, and afterwards for as long as we need them to handle refunds, disputes and our tax and accounting obligations. Stripe keeps its own payment records under its own policy.
Free-plan record: kept with your account until you delete it.
Your studio in your account: kept until you switch it off, delete it, or delete your account.
Your account: kept until you delete it. Unused sign-in links, and the email address in them, are deleted within 24 hours. Feedback survives deletion without your name or words, as described in section 1.
Bio page data: kept until you delete it. Unfinished claims are deleted within 24 hours, as described in section 2. Suggestions you dismiss are kept until you delete them or your account.
Our providers — Vercel (hosting), Anthropic (text), Google (AI portraits), Stripe (payments), Resend (email), Upstash (membership records), and Neon (member accounts and bio page data, stored in Sydney) — process data in the United States, Australia and other regions where they operate. By using the Service you acknowledge this processing.
Under the Australian Privacy Act you may request access to or correction of personal information we hold. For most visitors that is nothing beyond transient logs. For members it is your membership record, your account and, if you asked for one, your bio page data. Your account page shows your account data and lets you download or delete it yourself; for anything else, ask and we’ll show you exactly what exists, and correct or delete it. Complaints can also be directed to the Office of the Australian Information Commissioner (oaic.gov.au).
The Service is intended for professionals and is not directed at anyone under 18.
If our data practices change, this policy is updated first — before the change reaches the product — with the changes explained in plain language and a new “last updated” date.
Vestry Technology Pty Ltd (ABN 15699575034) · support@brandstudio.tech