Skip to content

Legal

Privacy Policy

What Brand Identity API collects, why, who helps us process it, and the choices you have.

Effective October 12, 2026

1. Who we are

Brand Identity API (“we”, “us”) runs Brand Identity API. We decide how your personal data is used, which makes us its “controller” under data protection law.

Questions about this policy go to agenticstudio@gmail.com.

2. What we collect

  • Account details: your name, email address, profile picture and how you sign in.
  • Sign-in with another service: if you sign in with an account such as Google, GitHub or Microsoft, we receive your name, email address and profile picture from it. We never see that account’s password.
  • Payment details: if you buy a plan, our payment provider collects your card details. We never see or store your full card number. We keep your plan, invoices and billing address.
  • API requests: the domains, URLs and search terms you send, which key sent them, when, and the result. We use them to count your usage, enforce limits and fix problems. When you send an email address as an identifier, we keep only its domain.
  • Usage and device data: pages you visit, features you use, your IP address, browser, device type and error reports.
  • Messages to us: what you send when you email us or use support chat.

3. How we use it

We use your data only for these purposes, each with a legal basis:

  • To run Brand Identity API and your account (to perform our contract with you).
  • To take payments and keep tax records (contract, and our legal obligations).
  • To keep the service secure and fix problems (our legitimate interests).
  • To understand how the product is used and improve it (our legitimate interests, or your consent where the law requires it).
  • To send service emails such as sign-in links, receipts and notices of important changes (contract). Product news only if you opt in (consent).

4. Brand records we publish

The brand records Brand Identity API serves come from companies’ public websites and from Wikidata, and they are about organizations. If a record contains personal data about you, email agenticstudio@gmail.com and we will correct or remove it.

5. Cookies

We use cookies and similar browser storage to keep you signed in and to remember settings such as your theme. Some service providers below, such as analytics or support chat, may set their own. You can block or clear cookies in your browser, but parts of the product will not work without the ones that keep you signed in.

6. Service providers

We share personal data only with these companies, only as needed for the purpose listed, and under contracts that require them to protect it. We do not sell your personal data, and we do not share it for targeted advertising.

ProviderWhat it does for us
Cloudflare privacy policy (opens in a new tab)File storage
Dodo Payments privacy policy (opens in a new tab)Payments and sales tax, as merchant of record
Neon privacy policy (opens in a new tab)Database hosting
OpenRouter privacy policy (opens in a new tab)Writing brand descriptions and classifying industries from public website text
PostHog privacy policy (opens in a new tab)Product analytics
Resend privacy policy (opens in a new tab)Sending account and product emails
Sentry privacy policy (opens in a new tab)Error monitoring
Vercel privacy policy (opens in a new tab)Hosting and content delivery

7. International transfers

Our providers may process data outside your country, including in the United States. Where the law requires it, we rely on safeguards such as the European Commission’s Standard Contractual Clauses.

8. How long we keep it

We keep your data while your account is open. When you delete your account, we delete or anonymize your personal data within 30 days. We keep records the law requires, such as invoices, for as long as it requires.

9. Your rights

Depending on where you live, you can ask us to:

  • show you the personal data we hold about you, and send you a copy;
  • correct it, or delete it;
  • stop or limit how we use it, or object to a use;
  • withdraw a consent you gave, at any time.

California residents also have the right to know what we collect and why, and to opt out of the sale or sharing of personal data. We do neither. We will not treat you differently for using any of these rights. You can also complain to your local data protection authority.

10. How to use your rights

Email agenticstudio@gmail.com. We may ask you to confirm your identity first. We reply within 30 days, or 45 days where California law applies.

11. Security

We encrypt data in transit, limit who can access it, and use providers with strong security practices. No system is perfectly secure. If a breach affects your data, we will tell you as the law requires.

12. Children

Brand Identity API is not meant for children under 16, and we do not knowingly collect their data. If you think a child has given us personal data, email agenticstudio@gmail.com and we will delete it.

13. Changes to this policy

When we change this policy, we update the date at the top. For significant changes, we tell you by email or in the product before they take effect.

14. Contact

Brand Identity API. Email agenticstudio@gmail.com.