Privacy Policy
1. Overview
This Privacy Policy explains what information BrindLeaf collects through brindleaf.com (the "Site"), why, who else it's shared with, how long it's kept, and how you can request access to or deletion of it. It covers the Site's own forms and analytics — see the Cookie Policy for details specific to cookies and browser storage.
2. Information we collect
BrindLeaf collects information you choose to submit through the Site's forms:
- Contact form: your name, email address, and message.
- Web Design intake: your name, email, website (if any), project goal, summary, brand status, desired features, content readiness, timeline, and any brand asset files you upload (up to 5 files, images or PDF, 15MB each).
- SEO intake: your name, email, site URL, target keywords, current challenges, visibility notes, and any additional notes.
- Services intake (AI Integration / App Building / Web Management): your name, email, and the project details specific to the service(s) you select.
We don't collect payment information through the Site — the Site has no payment processor. Any payment terms for a project are handled separately, as part of that project's signed contract.
3. How we use your information
We use the information you submit to review your project, respond to you, and — if we take on your project — deliver the service. If you upload brand assets, they're used only for the project you submitted them for.
4. Who we share information with
We don't sell your information. It's shared only with the service providers that operate the Site and, for the AI-assisted project review below, one of two AI providers:
- Supabase — stores submission data in our database, and stores any uploaded brand asset files in private cloud storage (accessed only through short-lived signed links).
- Resend — delivers email notifications of new submissions.
- AI provider (only when an admin manually reviews your submission): by default this is a self-hosted, private instance of Ollama that BrindLeaf runs itself — your project details never leave BrindLeaf's own infrastructure for this review. BrindLeaf's systems also support routing this review to Anthropic's cloud API instead, but that path is off by default and is only used if separately enabled.
5. Cookies and analytics
The Site uses Google Analytics, but only after you actively accept the cookie-consent banner — nothing is loaded or set beforehand. Full detail on this, and on the browser storage the Site uses, is in the Cookie Policy.
6. Data retention
We keep submission data until it's no longer needed for the purpose it was collected for, or until you ask us to delete it. There's no automatic expiry — retention is managed manually, and deleting a submission also removes any brand asset files attached to it.
7. Your rights and choices
You can ask us to access, correct, or delete the information you've submitted at any time through the Contact page. We'll respond and act on reasonable requests.
8. Data security
Data in transit to and from the Site is encrypted (HTTPS/TLS). Submission data and uploaded files are stored with an access-controlled database and private cloud storage, reachable only through authenticated administrator access.
9. Children's privacy
The Site is intended for business use and is not directed at children. We don't knowingly collect information from children.
10. Changes to this policy
This policy may be updated from time to time. The effective date at the top of this page reflects the most recent revision.
11. Contact
Questions about this policy, or requests about your data, can be sent through the Contact page.