Who is responsible
BRANDLAB Group, operating under the names BrandLAB and BRAND-GPT. Business contact address: 11 George Town, Cayman Islands. Contact [email protected]. The effective year is 1999.
Information handled
Depending on how you use the service, information may include your sign-in identifier and email, profile name and company, subscription and credit records, usage and security events, support correspondence, prompts and conversation content, uploaded files or images, generated results, and information required to connect an optional integration. Stripe processes payment details for checkout.
Recent chat history is stored in your browser. Generated media may be stored privately against your account. Information submitted to an AI feature may be sent to the provider needed to perform that feature. Your uploaded ChatGPT conversations.json is parsed locally and saved in the existing browser history only after confirmation. It is not account-synced and may be visible to other users of this browser. Continuing an imported chat sends bounded context to the AI service and uses your normal allowance.
How information is used and shared
We use information to authenticate users, provide and secure features, manage plans and usage, process payments, respond to requests, prevent misuse, and meet legal obligations. Information may be shared as needed with Cloudflare for hosting and database services, Supabase for customer sign-in, Stripe for payments, OpenAI, Anthropic, or Google for configured BrandLAB-managed AI features, or an integration you expressly connect. We may also disclose information when required by law or necessary to protect people, the service, or legal rights. Provider-specific handling is explained in AI and provider disclosure.
Browser storage and retention
Some chat history and local creations are kept in browser storage; clearing the relevant site data removes those local copies. Account, payment, security, and generated-asset records may be kept for as long as needed for the purposes above, including reconciliation, security, and legal obligations. No fixed retention period for every data category is currently stated. Provider retention is controlled by the selected provider's applicable API terms and settings, not by a consumer chatbot policy.
Security and international processing
We use access controls and technical safeguards appropriate to the service. Customer-owned provider keys are not accepted or used for BrandLAB requests. Previously stored encrypted keys remain owner-associated and can be removed from Models. No online service can guarantee absolute security. BrandLAB and its service providers may process information in different countries; a particular data-residency location is not promised by this policy. Check the relevant provider's current terms before submitting confidential, regulated, or sensitive information.
Your privacy requests
Depending on your location, you may have rights to access, correct, or request deletion of personal information, or to raise an objection or complaint. Contact [email protected] and describe your request. We may need to verify your identity and may retain information where the law permits or requires it. Applicable local rights are not limited by this policy.
Updates
We will identify material changes and their effective date when an updated policy is published. This policy does not state a jurisdiction-specific legal basis, fixed retention schedule, or data-residency commitment.