Brandex LLC Privacy Policy (brandexme.com)

This Privacy Policy describes how Brandex LLC ("Brandex LLC," "brandexme.com," "we," "us," or "our") collects, uses, discloses, and protects personal information when you visit brandexme.com or use our services, including purchasing and accessing digital downloads (collectively, the "Services").

By using the Services, you agree to this Privacy Policy. If you do not agree, do not use the Services.

1) Who We Are

• Legal Entity: Brandex LLC
• Website: brandexme.com
• Location: Granger, Indiana, United States
• Email: team@brandexme.com

2) Key Points

• Accounts required: You must be signed in to purchase, download, or leave a review (no guest checkout).
• Digital-only: We provide digital products only and do not ship physical goods.
• Payments: Payments are processed by Stripe.
• Hosting: Our Services are hosted on Vercel.
• Consent-gated analytics/ads: Non-essential cookies (including GA4 and Google Ads conversion tracking) are blocked unless you consent.

3) Information We Collect

We collect information in the following ways:

A) Account and Identity Information (Clerk)

We use Clerk for authentication and user account management (shared across Store, Admin, and Studio apps). Clerk collects and processes:

• Email address
• First and last name
• Password (handled by Clerk; we do not access your password)
• Profile photo (optional, such as via OAuth)

B) Payment and Billing Information (Stripe)

Payments are processed by Stripe. Stripe collects and stores:

• Full billing address (required)
• Phone number (collected at checkout)
• Payment card details

We do not store full payment card numbers on our servers. Payment processing is handled by Stripe under its own privacy and security practices.

C) Information You Create or Submit on Our Site (Our Database)

We store certain information in our own database (hosted on Neon PostgreSQL), including:

• Product reviews (star rating and review text)
• Download records (user ID, product ID, timestamp, and credit cost)

D) Studio Uploads and Prompts

If you use Studio features, we process and store:

• Uploaded images and text prompts

Studio uploads and prompts may be transmitted to third-party AI providers to generate outputs. Studio assets are stored on BunnyCDN.

E) Search Queries (Typesense)

When you use search, we process search query strings using Typesense to return results.

F) Automatically Collected Technical Data (Logs and Analytics)

When you use the Services, certain technical data is collected automatically, such as:

• IP address
• Device and browser information
• Pages viewed and interactions
• Request metadata and diagnostics

This data may be processed by our providers for hosting, delivery, security, and performance, including Vercel, BunnyCDN, Clerk, Sentry, and (with consent where required) Google Analytics 4.

4) How We Use Information

We use personal information to:

Provide and Operate the Services

• Create and manage accounts
• Process purchases and confirm transactions
• Deliver digital downloads and maintain access to purchased content
• Enable reviews, credits, and download history

Maintain Security and Improve the Services

• Monitor performance and debug issues
• Detect and prevent fraud, abuse, and unauthorized access
• Protect the integrity of our Services and enforce our policies

Communicate Administrative Updates

Send admin-facing operational notifications and reports (via Resend)

Note: Customer-facing transactional emails (like receipts or download links) may be added in the future; if so, we will use your email to send those messages.

Comply With Law and Business Requirements

• Maintain records required for accounting/tax purposes
• Respond to lawful requests and enforce legal rights

5) Legal Bases for Processing (EEA/UK and Similar Regions)

If you are located in the European Economic Area (EEA), the United Kingdom, or a similar jurisdiction, we rely on the following legal bases where applicable:

• Contract: to provide the Services and deliver digital products you purchase
• Legitimate interests: to operate, secure, and improve the Services
• Consent: for certain cookies/tracking where required
• Legal obligation: to comply with applicable laws

Where we rely on consent, you may withdraw it at any time through our cookie controls or applicable settings.

6) Cookies and Similar Technologies

We use cookies and similar technologies (such as pixels and local storage) to operate and understand the Services.

A) Essential Cookies

Essential cookies are required for core functions such as authentication, session management, and security. For example, Clerk uses session/authentication cookies to keep you signed in.

B) Analytics Cookies (Consent-Based)

We use:

• Vercel Analytics (performance/usage insights)
• Google Analytics 4 (GA4) (web analytics; configured with IP anonymization)

GA4 is configured to default to denied and only run after you consent through our banner/preferences.

C) Advertising/Conversion Measurement (Consent-Based)

We use Google Ads conversion tracking to measure conversion events related to downloads. This tracking is gated behind cookie consent.

D) Your Choices

We use a custom consent system that appears on first visit and supports:

• Accept All
• Reject All
• Manage Preferences

Non-essential cookies and tracking are blocked until you provide permission. We also implement Google Consent Mode v2, and Google signals default to denied before anything loads. Your choice is stored in your browser (currently via local storage key brandex_cookie_consent_v1).

You can also control cookies through your browser settings. If you disable certain cookies, some features may not work properly.

7) How We Share Information

We share personal information only as needed to operate the Services.

A) Service Providers

We share information with third-party providers that help us run the Services, including:

• Clerk (authentication and identity management)
• Stripe (payment processing)
• Vercel (hosting, edge network, and analytics)
• BunnyCDN (file storage/delivery for downloads and Studio assets; logs download requests)
• Neon (PostgreSQL) (hosted database infrastructure)
• Sentry (error monitoring and diagnostics)
• Typesense (search processing)
• Resend (admin notification emails)
• Inngest (background job scheduling)
• AI providers used for Studio and Admin features, including Replicate, Freepik AI, Stability AI, Photoroom, OpenAI, and Google Gemini (depending on the feature you use)

These providers process information under their own terms and privacy practices, and where applicable, under agreements with us.

B) Analytics and Conversion Measurement (With Consent Where Required)

If you consent, we share limited information with Google Analytics and Google Ads for analytics and conversion measurement.

C) Legal, Safety, and Rights Protection

We may disclose information if required to comply with law or legal process, or to protect the rights, safety, and security of Brandex LLC, our users, or others.

D) Business Transfers

If Brandex LLC is involved in a merger, acquisition, financing, reorganization, or sale of assets, information may be transferred as part of that transaction.

8) Digital Products Only

brandexme.com provides digital products and digital downloads only. We do not ship physical goods. Delivery may occur through download access within your account or another digital method described at checkout.

9) Data Retention

We retain personal information only as long as reasonably necessary for the purposes described in this Policy, including:

• Providing access to purchased digital content
• Maintaining account records and download history
• Preventing fraud and securing the Services
• Maintaining records required for accounting/tax and legal compliance

Retention periods can vary depending on the type of data and legal requirements. We may delete or de-identify information when it is no longer needed.

10) Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information. However, no system is completely secure, and we cannot guarantee absolute security.

11) Your Rights and Choices

A) Cookie Choices

You can manage cookie preferences using our consent banner and preference controls, and through your browser settings.

B) Access, Correction, Deletion, and Other Rights

Depending on your location, you may have the right to:

• Request access to personal information we hold about you
• Request correction of inaccurate information
• Request deletion of certain personal information (subject to legal exceptions)
• Object to or restrict certain processing
• Request a copy of your information (data portability)

To exercise your rights, email team@brandexme.com with the subject line "Privacy Request." We may verify your identity before completing your request.

C) US State Privacy Rights (Where Applicable)

Residents of certain US states may have additional rights, which may include the right to opt out of certain data sharing for advertising purposes (where applicable) and the right to appeal certain decisions. If we provide a "Do Not Sell or Share My Personal Information" link, you may use it to manage applicable preferences.

D) EEA/UK Complaints

If you are in the EEA/UK, you may have the right to lodge a complaint with your local data protection authority.

12) International Data Transfers

Brandex LLC is based in the United States. If you access the Services from outside the United States, your information may be transferred to and processed in the United States and other countries where we or our service providers operate. These jurisdictions may have different data protection laws than your country.

Where required, we use appropriate safeguards for international transfers.

13) Children's Privacy

The Services are not intended for children under 13 (or under 16 in certain regions). We do not knowingly collect personal information from children. If you believe a child has provided personal information, contact us at team@brandexme.com and we will take steps to delete it.

14) Third-Party Links

Our Services may include links to third-party websites or services. We are not responsible for their privacy practices. Please review the privacy policies of any third-party sites you visit.

15) Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will update the Last Updated date at the top of the page. If changes are material, we will take reasonable steps to provide notice (such as posting a prominent notice on our website).

16) Contact Us