Brand Professorai
legal · privacy policy

Privacy Policy.

Last updated · 27 May 2026

Wireframe note · Plain-English structure. A solicitor should review the final version before launch, particularly the lawful basis statements, the data transfer language for non-UK processors, and the cookie disclosures.

The short version.

We collect the bare minimum needed to sell you a digital product and to deliver it. Email address, billing country for tax, payment data (processed by Paddle — we never see card numbers), and IP address for fraud screening. We don't sell your data. We don't run ads on this site. We don't share it with marketing partners. Email us any time and we'll tell you exactly what we hold on you.

Who's responsible.

Brand Professor — trading name of [Entity Name], registered in [Jurisdiction] — is the data controller for personal data collected through ai.brand-professor.com. Data Protection contact: privacy@brand-professor.com.

What we collect, why, and how long we keep it.

DataWhy we need itHow long
Email addressDeliver the order confirmation, the skill download, account login, and (if you opt in) the newsletter.Until you delete your account or unsubscribe.
NamePersonalise the receipt and any support email.Same as email.
Billing countryCalculate VAT or GST at checkout. Required by tax law.7 years (UK tax record retention).
Payment dataProcessed by Paddle. We never see your card number. We see only the last 4 digits and a Paddle customer ID.7 years for invoicing. Paddle holds the rest under its own privacy terms.
IP addressFraud screening at checkout. Reduces chargeback risk.30 days, then deleted.
Order historyShow you what you've bought and allow re-downloads.Same as account.
Newsletter activityIf you subscribe: open and click data, so we can tell which topics land.2 years from last activity, then deleted.

What we don't collect.

  • We don't run third-party advertising cookies on this site.
  • We don't sell or rent your data to anyone, for any reason.
  • We don't track you across other websites.
  • We don't use Facebook Pixel, Google Ads tracking, or similar profile-building tools.

Who we share data with.

We use these processors to run the business. They each have their own privacy policies and we have data-processing agreements with each.

  • Paddle · payment processing and tax calculation.
  • [Auth provider — custom JWT] · login and account management.
  • [Email provider — Resend, Postmark, or similar] · transactional email delivery.
  • [Hosting — Vercel, Cloudflare, or similar] · website hosting.
  • [Analytics — Plausible or Fathom, privacy-respecting] · aggregate page-view counts. No individual tracking.

Data may be transferred outside the UK or EU to these processors. We rely on the UK International Data Transfer Agreement and Standard Contractual Clauses to ensure equivalent protection.

Your rights.

Under UK GDPR you can:

  • Ask to see the data we hold on you (Subject Access Request).
  • Ask us to correct anything that's wrong.
  • Ask us to delete your account and your data, subject to tax-record retention for purchases.
  • Ask us to export your data in a portable format.
  • Withdraw consent for newsletter use at any time (unsubscribe link in every email).
  • Complain to the UK Information Commissioner's Office (ico.org.uk) if you think we've handled your data badly.

To exercise any of these rights, email privacy@brand-professor.com. We respond within 30 days.

Cookies.

We use the smallest possible set of cookies. A session cookie for login. A consent cookie if you set preferences. No tracking cookies. No third-party ad cookies. If we ever add anything more invasive, we'll show a consent banner first.

Children.

The shop is not intended for under-18s. We don't knowingly collect data from anyone under 18. If you believe we have, email us and we'll delete it.

Changes to this policy.

Material changes will be emailed to registered users. The "Last updated" date at the top reflects the most recent change.