Privacy Notice
1. Who is responsible for your data
The data controller is Jamie Galloway, an individual trading as WatchTheFall Enterprises, which provides Brandr. Contact: wtf@watchthefall.com, 25D Rathad Na H-Airigh, Portree, IV51 9TW, United Kingdom.
2. What we collect
- Account: your email address, a securely hashed password, your plan, credits, Founder status, and when you verified your email.
- Your content: brand assets you upload (logos, watermarks, settings), videos you upload, links you submit for us to fetch, and the videos Brandr produces for you.
- Payments: handled by Stripe. We keep your Stripe customer and subscription references and subscription status. We never see or store your full card number.
- Usage and technical data: records of jobs you run, credits used, and server and security logs, which include IP addresses and browser details.
- Discord (optional): if you link Discord, your Discord user ID and username, so we can give you community roles.
- Waitlist or beta applications: the details you gave when applying.
- Emails: your email address and basic account events, so we can send service emails.
3. Why we use it, and our legal basis
- To provide Brandr (your account, rendering, storage, billing and service emails such as verification and password reset). Legal basis: performance of our contract with you.
- To keep Brandr secure and prevent abuse (for example, stopping duplicate accounts used to farm credits). Legal basis: our legitimate interests.
- To understand and improve the service using job and usage records. Legal basis: our legitimate interests.
- Product news and offers by email. Legal basis: your consent or, where the law allows, our legitimate interests. You can unsubscribe at any time using the link in those emails.
- Records we must keep by law (for example, payment and tax records). Legal basis: legal obligation.
4. Who we share it with
We use these service providers to run Brandr. They process data on our behalf:
- Render (hosting and storage; servers in Frankfurt, Germany): stores and processes all the data described above.
- Cloudflare (network delivery and security): handles all traffic to brandr.online, including your IP address and browser details.
- Stripe (payments): receives your email address when you start a checkout, and the payment details you enter on its pages.
- Loops (email): receives your email address, the emails we send you (such as verification and password-reset links), and basic account events such as your plan.
- Discord: involved only if you choose to link your Discord account. We then receive your Discord user ID and username from Discord, and we use them to manage your community roles.
- Google Fonts (fonts): your browser loads fonts from Google, so Google receives your IP address and browser details.
- DataImpulse (network proxy): routes some of the requests Brandr makes when it fetches a link you submit from certain platforms. It sees which website is being contacted. No account details are sent to it.
We don't sell your personal data. We may share data if the law requires it, or to protect our rights or the safety of others.
5. International transfers
Some of these providers are based in, or process data in, countries outside the UK, such as the United States. Where that happens, we rely on the safeguards those providers offer under UK data protection law, such as adequacy regulations or approved contract terms.
6. How long we keep it
Fetched source videos and finished videos are deleted automatically after about 24 hours, unless you bookmark a finished video. We keep your account data, brand assets and bookmarked videos while your account is open. We keep other data only as long as needed for the purposes above. Payment records are kept for as long as the law requires. You can ask us to delete your account at any time (see section 7).
7. Your rights
Under UK data protection law, you can ask to access, correct, delete or receive a copy of your data, and to object to or restrict how we use it. Where we rely on consent, you can withdraw it at any time. Email wtf@watchthefall.com. You can also complain to the Information Commissioner's Office (ico.org.uk).
8. Cookies
Brandr uses an essential session cookie to keep you logged in. Our payment and security providers (Stripe and Cloudflare) may set cookies needed for payments and security. We don't use advertising or third-party analytics cookies.
9. Security
Passwords are stored only as secure hashes, and the site is served over HTTPS. Access to production systems is restricted.
10. Children
Brandr is available to people aged 13 and over and is not for children under 13. If you believe a child under 13 has created an account, contact us and we will delete it.
11. Changes
We may update this notice. We will tell you about important changes.