PrivacyPrivacy

Who looks after your information

Brand Alchemy — The Brand Alchemist, a one-person studio — is responsible for the information on this site. Questions go to therealbrandalchemist@gmail.com.

What I collect

• Your account: name and email; your password, which is held by the sign-in provider and never readable by me; and, if you add them, a phone number and how you prefer to be contacted.
• Your brands: name, logo, colours, website, social handles and any notes you save.
• Your projects: your answers to the brief, the contact details and dates you give for the project, the files you upload, the direction you confirm before paying, your approvals and change requests, and the project’s history.
• Payments: handled by Stripe. I receive the result — the amount, any discount code, and Stripe’s references. Your Billing page shows your card’s brand, last four digits and expiry, read from Stripe. I never receive your full card number.
• Memberships and credits: your plan, its status and dates, and the history of your credit balance.
• Reviews: your rating and words, the brand they go out under, and an optional private note about past work. A published review shows the rating, the words, your brand name (or your name) and, if you added one, your brand’s logo.
• Agreement records: when you pay, which version of the Terms and Refund Policy you agreed to, and when.
• Technical: the browser description (user agent) sent with a project submission. Your IP address is used briefly to slow down abuse and is not stored by the site; the hosting provider keeps standard request logs.

How it is used

To run your account, do and deliver your work, take payments, send the emails the service needs, and keep the site secure. Payment receipts are sent by Stripe.

I do not sell your information, use it for advertising, or send marketing email.

Your files

Files are kept in private storage. Only you and I can open the files on your projects, through links that stop working within minutes, and they always arrive as downloads. Other customers cannot see them.

Each file, and your brand logos, also has a backup copy in separate private storage, so a file lost by mistake can be put back. When a file is deleted, its backup copy is deleted within 30 days.

Who helps run the site

• Supabase — accounts, the database and file storage.
• Stripe — card payments, memberships and billing.
• Vercel — hosting the site.
• Resend — sign-in and email-verification messages.
• Google (Gmail) — the other emails, which are sent from the studio’s own address.
• Telegram and Pushover — private alerts to my own devices about new sign-ups, orders and payments. They carry a name or email, the project reference, the service and the amount — never your brief or your files.

Each handles information only to provide its part of the service.

Cookies and your browser

The site sets one essential cookie, which keeps you signed in for up to 30 days. There are no analytics, advertising or tracking cookies.

Your browser also keeps a draft of a brief you are writing, the receipt for your latest order, and your music settings, so you do not lose your place. Stripe’s checkout and billing pages are Stripe’s own and follow Stripe’s privacy policy. Emails from me may load fonts from Google when you open them.

How long it is kept

Your information is kept while your account is open, and for as long as it is needed for the work or for legal and accounting obligations.

If you ask me to delete your account, your sign-in is deleted and every signed-in session ends, any active membership is cancelled, and your profile, preferences, brands, logos, uploaded and delivered files, reviews and credits are deleted.

Only what payment, tax, fraud-prevention and security obligations need is kept, and it no longer works as an account: the record of each paid order (the service, amount, date and payment reference, with your name and contact details removed), which version of the Terms and Refund Policy you agreed to, when, and the email address it was agreed under, and a short internal note that the deletion happened. Stripe keeps its own payment history.

Backup copies of your files are deleted within 30 days of the deletion. The database is also backed up automatically, and those backups expire on their own after a short time.

Security

Private storage, links that expire, passwords held by the sign-in provider, encrypted connections, and access to the studio’s side of the site limited to me.

Your choices

You can update your name, phone number, contact preference and brands in your account at any time. To get a copy of your information, correct it, or have it deleted, email therealbrandalchemist@gmail.com. Depending on where you live, you may have further rights under your local law, and I will respect them.

Children

The site is not meant for children under 13, and I do not knowingly collect their information.

Changes

If this policy changes, the date at the top changes with it.

Contact

Brand Alchemy · therealbrandalchemist@gmail.com