Skip to content
Legal

Privacy Policy

Last updated 5 October 2026

Who we are

Brandreforge is provided by Theepa Studio (United Arab Emirates), which is responsible for the personal data described here. “We” in this policy means Theepa Studio.

The short version

Your Illustrator work stays on your Mac unless you choose to back it up or share it. We store what we need to sign you in, bill you, license your Macs and keep your account secure. We count visits to this website with Google Analytics, but we don’t sell your data or show ads.

What we store

  • Account. Your email address, used to sign you in with one-time links and codes and to send account emails. Signed-in browsers are listed with their browser type and an approximate location (city and country) worked out from the IP address.
  • Billing. Your plan, add-ons, billing period, subscription status and trial and renewal dates, plus your Stripe customer and subscription IDs. Card details go straight to Stripe and never reach us. If you tell us why you cancelled, we keep that answer.
  • Licence data for each Mac. The Mac’s name, a hashed hardware identifier (a one-way fingerprint, never the raw serial or hardware ID), the Brandreforge and macOS versions, an approximate location from the IP address at activation, and when it was activated and last checked in.
  • Activity log. Sign-ins, Mac activations and removals, and plan changes, each with a time and approximate location, so you can spot anything you don’t recognise in Account › Settings.
  • Cloud backups and share links. Only the brands you choose to back up: the brand profile, captured vector snapshots and captured Illustrator asset files. Share links stay readable by anyone with the link until you revoke them.
  • Email log. Which emails we sent you and when, so we don’t send the same reminder twice.

What stays on your Mac

Your Illustrator documents and everything the vector tools generate stay on your Mac unless you back a brand up. Your licence and any AI provider keys are stored in the macOS Keychain. The licence is checked on your Mac, so Brandreforge works offline between check-ins. BrandReforge Helper keeps a short log on your Mac (in Library › Logs › BrandReforge) for troubleshooting; it isn’t sent anywhere unless you email it to us.

AI features

AI Studio, AI mockups and smart checks run through the Brandreforge helper on your Mac and go directly to the AI provider you connected (for example OpenAI through your ChatGPT login or API key, or OpenRouter for smart checks). Your prompt, the brand details you entered and, if you choose, an image of your logo are sent only when you ask. They don’t pass through our servers, and the provider’s own privacy terms apply. Smart checks are off until you turn them on, because a free model may use prompts for training.

Emails we send

  • Account, billing and security emails are always sent, because they’re part of the service: sign-in links and codes, the trial reminder before you’re charged, yearly renewal reminders, payment problems, plan changes and new Mac activations.
  • Setup tips, such as a reminder to activate your first Mac, are optional. Turn them off in Account › Settings or from the link in any tip.

Website analytics

We use Google Analytics to see which pages of this website people visit, so we can improve it. For each page it records the page address, the site you came from, your browser and device, and an approximate location worked out from your IP address. We don’t send it your email address, sign-in links or codes, activation codes, payment details or anything from the Brandreforge panel, and pages whose address holds a code aren’t reported at all. Google signals and advertising features are off, so the data isn’t used for ads.

In the EEA, the UK and Switzerland, Google Analytics sets no cookies and receives only cookieless measurements. Anywhere, you can opt out with Google’s opt-out browser add-on or a content blocker that blocks Google Analytics.

Cookies

We set one essential cookie to keep you signed in. Outside the EEA, the UK and Switzerland, Google Analytics also sets its own cookies (_ga and _ga_8C9ZVL74QR) to tell visits apart; they last up to two years. There are no advertising cookies.

Processors

These companies process data on our behalf, only to run Brandreforge:

  • Vercel hosts the website, account pages and licence server.
  • Neon hosts the account database.
  • Vercel Blob stores cloud backups.
  • Stripe processes payments, manages subscriptions and calculates tax.
  • Resend delivers our emails.
  • Google (Google Analytics) measures visits to this website.

Some of them store data in the United States and other countries.

How long we keep it

We keep your account data while your account exists. Unused sign-in links, activation codes and pending Mac approvals are deleted within a day of expiring. When you delete your account, your Macs, share links, cloud backups and activity log are deleted with it. Stripe keeps the billing records the law requires.

Your choices

You can download your account data or delete your account from Account › Settings at any time, and remove Macs or revoke share links whenever you like. Depending on where you live, you may also have the right to access, correct or object to how we use your data, and to complain to your data protection authority. Email us and we’ll help.

Children

Brandreforge is a professional tool and isn’t meant for anyone under 16.

Changes and contact

We’ll update the date above when this policy changes and email you about significant changes. Privacy questions: support@brandreforge.com. See also our Terms of Service.