Legal
Privacy Policy
What Brand Identity API collects, why, who helps us process it, and the choices you have.
Effective October 12, 2026
1. Who we are
Brand Identity API (“we”, “us”) runs Brand Identity API. We decide how your personal data is used, which makes us its “controller” under data protection law.
Questions about this policy go to agenticstudio@gmail.com.
2. What we collect
- Account details: your name, email address, profile picture and how you sign in.
- Sign-in with another service: if you sign in with an account such as Google, GitHub or Microsoft, we receive your name, email address and profile picture from it. We never see that account’s password.
- Payment details: if you buy a plan, our payment provider collects your card details. We never see or store your full card number. We keep your plan, invoices and billing address.
- API requests: the domains, URLs and search terms you send, which key sent them, when, and the result. We use them to count your usage, enforce limits and fix problems. When you send an email address as an identifier, we keep only its domain.
- Usage and device data: pages you visit, features you use, your IP address, browser, device type and error reports.
- Messages to us: what you send when you email us or use support chat.
3. How we use it
We use your data only for these purposes, each with a legal basis:
- To run Brand Identity API and your account (to perform our contract with you).
- To take payments and keep tax records (contract, and our legal obligations).
- To keep the service secure and fix problems (our legitimate interests).
- To understand how the product is used and improve it (our legitimate interests, or your consent where the law requires it).
- To send service emails such as sign-in links, receipts and notices of important changes (contract). Product news only if you opt in (consent).
4. Brand records we publish
The brand records Brand Identity API serves come from companies’ public websites and from Wikidata, and they are about organizations. If a record contains personal data about you, email agenticstudio@gmail.com and we will correct or remove it.
5. Cookies
We use cookies and similar browser storage to keep you signed in and to remember settings such as your theme. Some service providers below, such as analytics or support chat, may set their own. You can block or clear cookies in your browser, but parts of the product will not work without the ones that keep you signed in.
6. Service providers
We share personal data only with these companies, only as needed for the purpose listed, and under contracts that require them to protect it. We do not sell your personal data, and we do not share it for targeted advertising.
| Provider | What it does for us |
|---|---|
| Cloudflare privacy policy (opens in a new tab) | File storage |
| Dodo Payments privacy policy (opens in a new tab) | Payments and sales tax, as merchant of record |
| Neon privacy policy (opens in a new tab) | Database hosting |
| OpenRouter privacy policy (opens in a new tab) | Writing brand descriptions and classifying industries from public website text |
| PostHog privacy policy (opens in a new tab) | Product analytics |
| Resend privacy policy (opens in a new tab) | Sending account and product emails |
| Sentry privacy policy (opens in a new tab) | Error monitoring |
| Vercel privacy policy (opens in a new tab) | Hosting and content delivery |
7. International transfers
Our providers may process data outside your country, including in the United States. Where the law requires it, we rely on safeguards such as the European Commission’s Standard Contractual Clauses.
8. How long we keep it
We keep your data while your account is open. When you delete your account, we delete or anonymize your personal data within 30 days. We keep records the law requires, such as invoices, for as long as it requires.
9. Your rights
Depending on where you live, you can ask us to:
- show you the personal data we hold about you, and send you a copy;
- correct it, or delete it;
- stop or limit how we use it, or object to a use;
- withdraw a consent you gave, at any time.
California residents also have the right to know what we collect and why, and to opt out of the sale or sharing of personal data. We do neither. We will not treat you differently for using any of these rights. You can also complain to your local data protection authority.
10. How to use your rights
Email agenticstudio@gmail.com. We may ask you to confirm your identity first. We reply within 30 days, or 45 days where California law applies.
11. Security
We encrypt data in transit, limit who can access it, and use providers with strong security practices. No system is perfectly secure. If a breach affects your data, we will tell you as the law requires.
12. Children
Brand Identity API is not meant for children under 16, and we do not knowingly collect their data. If you think a child has given us personal data, email agenticstudio@gmail.com and we will delete it.
13. Changes to this policy
When we change this policy, we update the date at the top. For significant changes, we tell you by email or in the product before they take effect.
14. Contact
Brand Identity API. Email agenticstudio@gmail.com.