Legal
Privacy Policy
Last updated: 1 April 2025
1. Who we are
Brank is operated by Brank Ltd ("we", "us", "our"). We provide brand kit management software at brank.app. If you have questions about this policy, contact us at privacy@brank.app.
2. Information we collect
We collect information you provide when you create an account (name, email address), payment information processed by our payment provider Stripe (we do not store card numbers), and content you add to your brand kits (colours, logos, typography). We also collect usage data automatically: pages visited, features used, browser type and IP address, via cookies and server logs.
3. How we use your information
We use your information to provide and improve the Brank service, process payments, send transactional emails (receipts, password resets, team invitations), and respond to support requests. We do not sell your data to third parties. We do not use your brand kit content for advertising.
4. Cookies
We use essential cookies to keep you logged in and remember your preferences. We use analytics cookies (via a privacy-respecting provider) to understand how the product is used in aggregate. You can opt out of analytics cookies in your account settings. We do not use third-party advertising cookies.
5. Data retention
We retain your account data for as long as your account is active. If you delete your account, we remove your personal data within 30 days. Brand kit content uploaded by your team is deleted within 30 days of account closure. Anonymised usage analytics may be retained indefinitely.
6. Sharing with third parties
We share data with a limited set of service providers who help us run the product: Stripe (payments), AWS (infrastructure), Postmark (transactional email), and Vercel (hosting). Each provider is contractually bound to handle your data securely and only for the purposes we specify. We do not sell data to data brokers or advertisers.
7. Your rights
Under GDPR and UK data protection law, you have the right to access, correct, or delete your personal data. You can export your brand kit data from your account settings at any time. To exercise any right or to make a deletion request, email privacy@brank.app. We will respond within 30 days.
8. Security
We encrypt all data in transit (TLS) and at rest (AES-256). Access to production systems is restricted to authorised personnel. We undergo annual security reviews. If you discover a security vulnerability, please email security@brank.app.
9. Changes to this policy
We may update this policy as the product evolves. We'll notify you by email and post the updated version here with a new "last updated" date. Continued use of Brank after a policy change constitutes acceptance.
10. Contact
Questions about this policy? Email privacy@brank.app or write to: Brank Ltd, 20 W Smithfield, London, EC1A 1HQ, United Kingdom.
Questions? Email us at privacy@brank.app. See also our Terms of Service and Cookie Policy.