Privacy Policy

Last updated: September 17, 2026. This policy describes how BrandPilot ("we", "us", "our") collects, uses, and protects your information.

Information We Collect

Account Information

When you create an account, we collect your name, email address, and authentication credentials.

Project Data

When you create projects, we store the briefs, design tokens, generated components, pages, and visual assets you produce. This data is associated with your account and used to deliver the service.

Usage Data

We collect anonymized usage analytics through Google Analytics 4, and only after you consent through the cookie banner. If you decline, no analytics script loads.

How We Use Your Information

  • To provide and maintain the BrandPilot service
  • To generate design systems based on your project briefs
  • To improve our AI agents and generation quality
  • To communicate service updates and respond to support requests
  • To detect and prevent abuse or unauthorized access

Data Storage and Security

Your data is stored on servers in the Asia-Pacific region (Singapore). We use encryption in transit (TLS) and at rest. Database access is restricted to authenticated application connections only.

Third-Party Services

We use the following processors to operate BrandPilot:

  • DigitalOcean - managed PostgreSQL database
  • Vercel - hosting and serverless functions
  • Vercel Blob - file and asset storage
  • Upstash - Redis caching and job queues
  • Anthropic (Claude) - AI design generation
  • OpenAI - image generation and embeddings
  • Google Analytics 4 - anonymized usage analytics, only after consent through the cookie banner
  • Resend - transactional email

Your Rights

You have the right to:

  • Access and export your project data on request
  • Request deletion of your account and all associated data on request
  • Opt out of analytics tracking through the cookie consent banner

Data Retention

We retain your data for as long as your account is active. When you delete your account, all associated project data is permanently deleted within 30 days. Anonymized usage statistics may be retained indefinitely.

Contact

For privacy-related questions or requests, use the contact page.