Privacy Policy.
Legal.

How BrandBnk collects, uses, and protects your information.

Last updated: 19 October 2026

1Information we collect

When you sign up for BrandBnk, we collect your name, email address and the work details you add to your profile, and we store what you save in the app (brands, pitches, your pipeline). Paid plans aren’t live yet. When they launch, payments will be handled by Stripe and we will never store card numbers on our servers.

We count page views with Vercel Web Analytics, which uses no cookies. If you accept analytics cookies in the cookie banner, Google Analytics also measures how the site is used. See our Cookie Policy.

When you join the waitlist, we store your email address and plan interest together with how you found us: the website or campaign that linked you to BrandBnk, the page you arrived on and the page you signed up from. This is read from the link you followed, not from cookies, and helps us understand which channels bring the right people. We only ever look at it in aggregate.

2How we use your information

Your data is used to provide and improve BrandBnk, send you product updates and transactional emails, and respond to support requests.

We may use aggregated, anonymised data to publish research or product statistics. We will never sell your personal data to third parties or use it for advertising you did not opt into.

3Business contacts we list

To help creatives reach the right person, BrandBnk shows signed-in members the names and job titles of people at the UK brands we track. We only use business information that is already public: company directors from Companies House, appointments reported in the trade press, and team pages on the brand’s own website. When a member asks, we look up that person’s work email through Hunter (hunter.io). We save the email so we don’t look it up again, and show it only to members who choose to unlock it. We keep names while we track the brand, and re-check saved emails when they are unlocked again after 120 days.

We do this on the basis of legitimate interests: business contacts are used only for business-to-business introductions about creative work. We never list home addresses, personal phone numbers or personal email addresses, and we don’t sell this information.

If you are listed and would like to be removed, use the contact form (reason: “Remove my details”) or email legal@brandbnk.com. We will remove you within 30 days and keep a note so you are not added again.

4Data sharing

We share data with trusted sub-processors to operate the platform, including Supabase (database and sign-in, including waitlist sign-ups), Vercel (hosting and cookieless website analytics), Google (Analytics, only if you accept analytics cookies), Resend (email sending), ImprovMX (email forwarding), Hunter (finding work emails when a member asks), Brave Search and Google Gemini (checking, when a member asks, who currently works in a brand’s marketing team from public web pages; no member data is sent) and, once paid plans launch, Stripe (payments). Each sub-processor is contractually bound to protect your data under GDPR-equivalent standards.

We will disclose your data if required by law, a court order, or to protect the rights and safety of BrandBnk users.

5Data retention

We retain your account data for as long as your account is active. If you delete your account, we remove your personal data within 30 days, except where we are required by law to retain it longer (e.g. financial records, which we keep for 7 years).

6Your rights

Under GDPR and UK data protection law, you have the right to access, correct, or delete your personal data at any time. You may also request a portable copy of your data or withdraw consent for processing where consent is the legal basis.

To exercise any of these rights, email us at legal@brandbnk.com. We will respond within 30 days.

7Cookies

BrandBnk uses strictly necessary cookies to keep you logged in, and optional analytics cookies to understand product usage. You can manage cookie preferences at any time via our cookie settings panel. See our Cookie Policy for full details.

8Security

We use industry-standard encryption (TLS in transit, AES-256 at rest), role-based access controls, and regular security audits. We will notify you within 72 hours of discovering any breach that affects your personal data.

9Changes to this policy

We may update this Privacy Policy periodically. We will notify you by email and update the "last updated" date at the top of this page. Continued use of BrandBnk after changes constitutes acceptance of the revised policy.

Questions about this policy? Email us at legal@brandbnk.com and we'll respond within 2 business days.