Privacy
Updated August 24, 2026
Your conversations and reports stay private. We use only the data needed to create and provide the service to you.
1. Data we process
Your email address and the information needed for your account.
The conversations you upload, notes you add and reports generated at your request.
Payment information processed by Stripe. We do not receive your card details.
Technical data needed to secure, operate and measure the service.
2. Why we use it
We use this data to create and deliver reports, manage your account, secure the service, answer requests and meet legal obligations. Depending on the purpose, we rely on performance of our contract, legitimate interests or a legal obligation.
We do not sell your data, and we do not use your conversations or reports to train artificial intelligence models.
3. Services that help us
We share only the data needed by our providers: Supabase for accounts and storage, Vercel for hosting, Stripe for payments, Resend for email, Sentry for security and errors, and Anthropic, Google Gemini or OpenRouter to generate reports.
Some providers may process data outside the European Economic Area. We use their business terms and the transfer safeguards required by applicable law.
4. How long we keep it
Uploaded conversations: automatically deleted from our servers within seven days of your most recent report; each new paid report restarts that period. You can delete them sooner from your account.
Uploads abandoned before account creation or purchase: deleted within 48 hours.
Reports: kept until you delete them or delete your account.
Account: kept while it remains active.
Invoices and payment evidence: kept for the period required by law, generally ten years.
Technical and security logs: kept only as needed, for no more than 90 days unless required by law or an ongoing incident.
5. Your choices and rights
You can delete conversations, reports and your account directly from your account. You may also request access, correction, restriction or portability, or object to certain processing, by emailing support@whatbrandonthinks.com.
We protect data in transit and at rest with appropriate safeguards. No online service can guarantee absolute security.
If you are unhappy with our response, you may contact the French data protection authority (cnil.fr) or your local authority.
Legal information
L4Forge SAS — What Brandon Thinks
222 rue de Brétigny, 01210 Ornex, France
SIREN 999 235 385 — SIRET 999 235 385 00013
RCS Bourg-en-Bresse — EUID FR0101.999235385
VAT FR28999235385
Hosting: Vercel Inc., San Francisco, United States