Privacy Policy

Last updated: 18 September 2026

This policy explains what BRAND-ME (brand-me.app) collects about you, why, who we share it with and what you can ask us to do. We keep it short on purpose. If anything is unclear, write to hello@brand-me.app.

1. What we collect

Account details: your name, email address, password (stored hashed), and whether you use the service as a creator, a brand or both.
Profile details you add: photo, bio, the channels you link and the audience numbers you enter, company name, website, industry and budget.
Listings, bids and messages: everything you publish on a listing, the bids you place, the logos, photos, videos and proof you upload, the notes and messages you send.
Payment details: handled by Stripe. We never see or store full card numbers. We store Stripe identifiers so we can reserve, charge, refund and pay out.
Technical data: your IP address, browser and device information, and the pages you visit, in server logs and basic analytics.

2. Why we use it

To run the marketplace: show listings, take bids, reserve and charge cards, check proof, pay creators.
To send you the emails the service needs: bids, outbids, approvals, proof, payouts, messages.
To answer you when you contact us, and to keep the service safe and prevent fraud.
To improve the service, using aggregated usage data.

We do not sell your data, and we do not use it for advertising outside the service.

3. What is public

A published listing is public, including the creator's name, photo, bio, linked channels, audience numbers, spots, prices and the proof standard. Winning brands are shown on the listing with their logo and website, unless they chose to bid privately, in which case the spot only shows as taken until proof is posted. Reviews left by brands are public.

4. Who we share it with

Stripe for payments and payouts.
Supabase for hosting the database and uploaded files, and Railway for hosting the application.
Resend for sending email.
The other party of a deal: a creator sees the brand's name, logo, note and messages; a brand sees the creator's listing, proof and messages.
Authorities, when the law requires it.

5. How long we keep it

We keep your account data while your account exists. Records of bids, charges, refunds and payouts are kept for as long as accounting and tax rules require, usually seven years. Proof files are kept for two years after the listing completes, so disputes can be reviewed. Messages are kept while either account exists.

6. Your rights

You can ask us to give you a copy of your data, correct it, delete it, or stop using it for a specific purpose. You can update most of it yourself in your settings. To delete your account, write to us; we delete what we can and keep only what the law requires. If you are in the UK or the EU you also have the right to complain to your data protection authority.

7. Cookies

We use a login cookie to keep you signed in and a small number of cookies needed for security and for Stripe's payment form. We do not use advertising cookies.

8. Changes

If we change this policy in a way that matters to you, we will email you and show the new date at the top of this page.