Privacy Policy
Last updated: 28 August 2026
What we collect
Account data: your email address and optional display name, via magic-link or Google sign-in. Campaign data: photos, descriptions and pricing you upload as a host. Bid data: brand name, brand link, logo artwork and bid amounts. Payment data: handled by Stripe — Brand Anything never sees or stores card numbers, only payment references and statuses.
How we use it
To run auctions (rendering previews, ranking bids, notifying outbid sponsors), to process deposits through Stripe, to send transactional email through Resend (bid confirmations, outbid alerts, auction results), and to keep the service safe (Cloudflare Turnstile on bid submission).
What is public
Live campaign pages are public, including photos, spot details, and the bid history for each spot (brand name, logo and amount). Sponsor logos become publicly visible once a bid is placed. Your email address is never public.
Processors
Supabase (database, authentication, file storage), Stripe (payments), Resend (email), Cloudflare (bot protection), and Vercel (hosting). Each receives only the data needed for its function.
Retention and your rights
Campaign and bid records are retained for as long as your account exists and as required for financial record-keeping. You can request an export or deletion of your data by contacting us; deletion requests are honoured except where records must be kept by law.