Privacy Policy

1. Introduction

Brand Context ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our AI-powered marketing platform.

Data Controller: Brand Context, based in Turkey, is the data controller responsible for your personal data. You can reach us at [email protected].

2. Information We Collect

We collect the following categories of information:

• Account Data: Name, email address, and authentication credentials (via Firebase Auth).
• Brand Data: Website URLs, brand descriptions, tone of voice, logos, and target audience profiles used to ground AI generations.
• Usage Data: Information about how you interact with our tools, including credit usage, features accessed, and generation history.
• Payment Data: Transaction records processed through our Merchant of Record, Creem. We do not directly store your credit card details.
• Technical Data: IP address, browser type, device information, and access timestamps collected automatically when you use the Service.

3. Legal Basis for Processing

We process your personal data based on the following legal grounds under the GDPR and Turkey's KVKK:

• Contract Performance: Processing necessary to provide the Service you signed up for (account management, AI generation, credit tracking).
• Legitimate Interest: Processing for platform security, fraud prevention, and service improvement.
• Consent: Marketing communications and optional analytics cookies — you may withdraw consent at any time.
• Legal Obligation: Processing required to comply with applicable laws, such as tax and accounting requirements.

4. How We Use Your Information

We use the collected data to:

• Provide, maintain, and improve our AI-powered marketing services.
• Ground AI outputs in your specific brand identity to ensure consistency.
• Process transactions and manage your credit balance.
• Send technical notices, updates, and support messages.
• Communicate with you about new features and promotions (with your consent).
• Detect and prevent fraud, abuse, and security incidents.

5. AI Processing and Data Privacy

Our service uses third-party Generative AI technology (currently Google Gemini API) to generate content. By using Brand Context, you acknowledge that your brand data is sent to third-party AI providers for processing.

Data Usage: We do not use your brand data to train global AI models. Your brand profile is used exclusively to provide context for your specific generation requests. We do not sell your data to any third party.

6. Data Storage and Security

Your data is stored securely using Firebase Firestore and Google Cloud Platform (GCP). We implement industry-standard security measures, including encryption at rest and in transit, to protect your personal information from unauthorized access, alteration, or destruction.

7. International Data Transfers

Your data may be transferred to and processed in countries outside of Turkey and the European Economic Area (EEA), including the United States, where our infrastructure providers (Google Cloud, Cloudflare) operate. These transfers are protected by appropriate safeguards, including Standard Contractual Clauses (SCCs) approved by the European Commission and equivalent measures under Turkish law.

8. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service. Upon account deletion, we will delete or anonymize your personal data within 30 days, except where we are required to retain certain information for legal, tax, or accounting purposes. Generation history and usage logs are retained for up to 12 months after account closure for dispute resolution and fraud prevention.

9. Third-Party Services

We share data with third-party service providers only as necessary to operate our platform:

• Google Cloud / Firebase: For authentication, database hosting, and AI processing.
• Creem: Our Merchant of Record for payment processing. Creem processes your payment information in accordance with their own privacy policy.
• Cloudflare: For website hosting, CDN, and performance optimization.
• Google Analytics: For understanding how users interact with our platform (subject to your cookie consent).

10. Cookies and Tracking

We use essential cookies for authentication and session management. We may also use analytics cookies to understand how users interact with our site, subject to your consent. For more details, please see our Cookie Policy.

11. Your Rights (GDPR/KVKK)

Depending on your location, you have the following rights regarding your personal data:

• Access: The right to request a copy of the personal data we hold about you.
• Rectification: The right to correct inaccurate or incomplete information.
• Erasure: The right to request deletion of your account and personal data.
• Restriction: The right to restrict or object to certain processing activities.
• Data Portability: The right to receive your data in a structured, commonly used, machine-readable format.
• Withdraw Consent: Where processing is based on consent, you have the right to withdraw it at any time without affecting the lawfulness of prior processing.
• Lodge a Complaint: You have the right to lodge a complaint with your local data protection authority (in Turkey: KVKK; in the EU: your national supervisory authority).

12. Children's Privacy

The Service is not intended for children under the age of 16. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child under 16, we will take steps to delete it promptly.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or by posting a prominent notice on the Service and updating the "Last Updated" date. Your continued use of the Service after the changes take effect constitutes your acceptance of the revised policy.

14. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us at: [email protected]