Privacy Policy

Account data: when you sign in with Google we receive your name, email address and profile picture from Google. We do not see or store your Google password.

Project data: your chat messages, project briefs, proposals, agreements and uploaded context. This is the core of the service — the AI and the human team use it to scope and deliver your project.

Payment data: the crypto transaction hash and network you submit when funding an agreement. Transaction hashes are public on-chain data; we store them to link your payment to your agreement.

Guest chats: you can try BrandForge without an account. We keep a random session id in a cookie so the chat stays yours, and the messages you send.

Telegram and Discord: if you message our bots, we receive your Telegram or Discord user id and the text you send, and we keep it as a guest chat you can continue on the web.

Usage data: standard server logs (IP address, browser, pages visited) kept for security and debugging, plus anonymous product events (for example, which step of sign-up was reached) with no message content.

To run the service: structuring your brief, staffing your project, verifying funding, delivering milestones and supporting you in the chat.

To keep the platform safe: abuse prevention, fraud checks on funding transactions, and enforcing the Terms of Service.

We do not sell your data, and we do not show you ads.

Supabase hosts our database, authentication and file storage.

OpenRouter routes chat content to AI model providers (such as Anthropic, OpenAI or Google) to write answers and structure projects. Do not paste secrets, passwords or highly sensitive personal data into the chat.

Resend sends our emails. Telegram and Discord carry bot messages and notifications you ask for.

Google provides sign-in. Vercel hosts the application and serves pages.

BrandForge staff and the operators assigned to your project can read your project conversations — that is how the human-in-the-loop service works.

Necessary cookies keep you signed in (Supabase session cookies), keep a guest chat yours (a session cookie) and remember your choice here (bf_consent, six months). They need no consent.

Measurement is off until you accept: Vercel Analytics counts page views, our own first-party funnel counts the steps people take, and a once-a-minute heartbeat counts how long an open, visible tab stays on the site (a random id in your browser; when you are signed in the time is added to your account so you can see it on Explore). Choose Essential only and neither runs. Change your mind any time with the Cookies link in the footer. There are no advertising or cross-site tracking cookies.

Guest chats that nobody signs in to keep are deleted automatically after 90 days without activity, with their uploaded files. Chats tied to funds held in escrow are kept until the agreement is settled.

You can delete individual conversations from the app. To disconnect a social account or delete your account and remaining data, see https://brandforge.gg/data-deletion or message the project manager on Telegram (@headstartup) or ask in Discord; we will remove your profile and projects within 30 days, except records we must keep for accounting or fraud-prevention reasons (for example, payment verification records tied to completed agreements).

Data is encrypted in transit and access is limited to staff who need it. Our processors may store data outside your country; by using BrandForge you consent to those transfers. No system is perfectly secure — if we ever suffer a breach that affects you, we will tell you.

We will post material changes to this policy in Discord and Telegram before they take effect. Questions or deletion requests: Telegram (@headstartup) or Discord — links are on the homepage.