Privacy Policy

1. Introduction

BrandKit ("we," "our," or "us") is operated by No Half Cakes. We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

By using BrandKit, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not use our service.

2. Information We Collect

2.1 Personal Information

We collect personal information that you voluntarily provide to us when you register for an account, including:

• Email address
• Full name
• Payment information (processed securely through Stripe)
• Company or brand name

2.2 Brand Content

When you use BrandKit, we collect and store the brand information you provide, including:

• Brand basics (name, tagline, description)
• Design elements (colors, fonts, logos)
• Brand voice and tone guidelines
• Target audience information
• Brand values and messaging
• Custom brand content and recommendations

2.3 Automatically Collected Information

We automatically collect certain information when you visit, use, or navigate our service:

• Device and browser information
• IP address
• Usage data and analytics
• Cookies and similar tracking technologies

3. How We Use Your Information

We use the information we collect or receive to:

• Create and manage your account
• Process your subscription payments
• Provide, maintain, and improve our service
• Generate AI-powered brand recommendations and content
• Store and display your brand guidelines
• Send you service-related communications
• Respond to your inquiries and provide customer support
• Monitor and analyze usage patterns to improve user experience
• Detect and prevent fraud or abuse
• Comply with legal obligations

4. AI and Data Processing

BrandKit uses artificial intelligence to analyze your brand information and generate personalized recommendations. When you use AI features:

• Your brand data may be processed by OpenAI's services to generate AI-powered insights
• We do not use your brand data to train AI models
• AI-generated content is stored in your BrandKit and associated with your account
• You retain all ownership rights to your brand content and AI-generated recommendations

5. Information Sharing and Disclosure

We do not sell, rent, or trade your personal information. We may share your information only in the following circumstances:

5.1 Service Providers

We share information with trusted third-party service providers who assist us in operating our service:

• Supabase (database and authentication services)
• Stripe (payment processing)
• OpenAI (AI content generation)
• Cloud hosting providers

These service providers are contractually obligated to use your information only for the purposes we specify and to maintain appropriate security measures.

5.2 Public Brand Pages

If you choose to make your BrandKit public, your brand information will be accessible to anyone with the link to your public brand page. You can control the visibility of your BrandKit at any time through your Settings page.

5.3 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities, including to meet national security or law enforcement requirements.

5.4 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will provide notice before your information is transferred and becomes subject to a different privacy policy.

6. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Secure authentication systems
• Regular security assessments
• Limited access to personal information by our personnel
• Secure payment processing through PCI-compliant providers

However, no method of transmission over the Internet or electronic storage is completely secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee absolute security.

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. When you delete your account, we will delete or anonymize your personal information, except where we are required to retain it for legal, regulatory, or technical reasons.

Brand content you create will be deleted when you delete your account, unless it has been shared publicly and cached by third parties.

8. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request access to the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information
• Data Portability: Request a copy of your information in a structured, machine-readable format
• Objection: Object to our processing of your personal information
• Restriction: Request restriction of processing of your information
• Withdraw Consent: Withdraw consent where we rely on consent to process your information

To exercise these rights, please contact us at success@nohalfcakes.com. We will respond to your request within 30 days.

9. International Data Transfers

Your information may be transferred to and maintained on computers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ. By using BrandKit, you consent to the transfer of your information to the United States and other jurisdictions where our service providers operate.

10. Children's Privacy

BrandKit is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us so we can delete it.

11. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our service and store certain information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our service.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. We will also notify you via email or through a prominent notice on our service prior to the change becoming effective.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

13. Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us:

14. California Privacy Rights

If you are a California resident, you have specific rights regarding access to your personal information under the California Consumer Privacy Act (CCPA). These rights include:

• The right to know what personal information we collect, use, disclose, and sell
• The right to request deletion of your personal information
• The right to opt-out of the sale of your personal information (we do not sell personal information)
• The right to non-discrimination for exercising your privacy rights

To exercise these rights, please contact us at success@nohalfcakes.com.

15. GDPR Compliance

If you are in the European Economic Area (EEA), you have certain data protection rights under the General Data Protection Regulation (GDPR). We aim to take reasonable steps to allow you to correct, amend, delete, or limit the use of your personal information.

The legal bases for our processing of personal information include: consent, contractual necessity, legal obligations, and legitimate interests. You have the right to withdraw consent at any time and to lodge a complaint with your local data protection authority.