Privacy Policy

This Privacy Policy explains what BrandBento (“we”, “us”) collects, how we use it, and the third parties involved. By using BrandBento you agree to this policy.

1. What we collect

• Account data — your email and authentication identifiers (via Google, X/Twitter, or email magic link).
• Brand data you provide — the website URLs you submit and the brand information, assets, and bentos generated from them.
• Usage & analytics — privacy-friendly, cookieless event and aggregate usage data to understand and improve the product.
• Payment data — handled by our payment provider; we do not store your full card details.

2. How we use it

• To provide the Service — parse URLs, generate assets, render images, host published pages, and track what you share.
• To operate accounts, process payments, and send essential emails (e.g. magic links).
• To improve reliability, performance, and features.

3. Service providers

We share data only as needed with infrastructure providers who process it on our behalf:

• Supabase — database, authentication, storage.
• Vercel — application hosting.
• Anthropic — AI processing of page content to extract brand information.
• logo.dev — brand logo lookup by domain.
• Resend — transactional email delivery.
• Lemon Squeezy — payments and subscription management (Merchant of Record).
• PostHog — product analytics.

We do not sell your personal data.

4. Cookies

We use a small number of cookies strictly to keep you signed in and to operate the Service. Our usage analytics are designed to be cookieless where possible.

5. Data retention

We keep your account and brand data while your account is active. You can delete brands at any time; deleting a brand removes its associated data. Contact us to delete your account entirely.

6. Your rights

Depending on your location, you may have rights to access, correct, export, or delete your personal data. To exercise these, email contact@suchoi.co.

7. International transfers

Our providers may process data in regions including the United States and South Korea. By using the Service you consent to such transfers, subject to appropriate safeguards.

8. Children

The Service is not directed to children under 13 (or the minimum age in your jurisdiction), and we do not knowingly collect their data.

9. Changes

We may update this policy; the “Last updated” date reflects the latest version.