Legal

Privacy Policy

Last updated: 12 August 2026

This policy explains what personal information BraVo collects, why, and what happens to it.

BraVo is operated by Crunch Creative Design Ltd, a company registered in England and Wales (company number 5001799), whose registered office is BLOCK, 23 Melville Building, Plymouth PL1 3RP, United Kingdom. In this policy, "we", "us" and "our" mean Crunch Creative Design Ltd.

We are the data controller for the personal information described here.

Questions about this policy, or any request about your information, should go to hello@brandedvoice.co.uk.


Who BraVo is for

BraVo is a business tool. It is intended for businesses and professional users aged 18 or over. It is not intended for children and we do not knowingly collect information about anyone under 18.


What we collect

Information you give us when you sign up

  • Your name
  • Your email address
  • Your password, which is stored only as a cryptographic hash and is never visible to us

Information about your subscription

  • Which plan you are on, its status, and when the current period ends
  • A record of any credit top-ups you buy: the pack, the amount and the date
  • References that identify you to our payment processor

We do not see or store your card details. Payment is taken on Stripe's own secure pages and card management happens in Stripe's own customer portal. Card numbers never reach BraVo.

Information you create in BraVo

You build profiles describing a business, its brand and its audiences, and you generate content from them. That includes:

  • Business information: what the business does, what it sells, its market and website
  • Brand information: mission, vision, values, personality and voice
  • Audience information: who they are, what they need and how they prefer to be communicated with
  • Images and files you upload
  • Prompts and instructions you write
  • Content BraVo generates for you

This is your material. Most of it is business information rather than personal information, but it may contain personal information if you choose to include it.

Please do not enter special category information into BraVo. That means information about health, race or ethnicity, religious or philosophical beliefs, political opinions, trade union membership, genetics, biometrics, sex life or sexual orientation, or information about criminal offences. BraVo is not designed to hold it.

Information collected automatically

On the public marketing pages at brandedvoice.co.uk, if you consent, we use Google Analytics to understand how the site is used. That collects your IP address, your device and browser, and the pages you view. See our Cookie Policy.

Inside BraVo itself, once you are signed in, we run no analytics. We do not track what you do with your profiles or your content, and nothing observes your work in the product.

Our hosting and database providers keep standard technical logs, which include IP addresses and browser information, for security and to keep the service running.

We also keep a record of payment events received from Stripe, so that payments and credits can be reconciled. These hold no personal information beyond a reference.


Why we use it, and our lawful basis

What we doWhyLawful basis
Create and run your accountSo you can use BraVoPerformance of a contract
Take payment and manage your subscriptionSo you can pay for the servicePerformance of a contract
Store and process the profiles and content you createIt is the servicePerformance of a contract
Send account emails: confirmation, password reset, payment and supportTo operate your accountPerformance of a contract
Keep the service secure and availableTo protect you and usLegitimate interests
Keep financial recordsTax and accounting lawLegal obligation
Marketing site analyticsTo understand what the site needsConsent

We do not send marketing emails at present. If that changes, we will ask for your consent first and you will be able to withdraw it at any time.


Who we share it with

We use the following services to run BraVo. Each is bound to protect your information and to use it only for the purpose described.

ServiceWhat it doesWhat it receives
SupabaseDatabase, login and file storageYour account details and everything you create in BraVo
VercelHostingRequests to the site and app; standard technical logs
AnthropicGenerates written contentThe profile information used as the brief for a piece
OpenAIGenerates imagesThe image description, and any image you choose as a reference
StripePayments and subscriptionsYour name, email, billing address, card details and VAT number if you give one
GoogleOur business email, and marketing site analyticsAnything you email us; site analytics if you consent

What is sent to the AI providers

When you generate content, we send the relevant profile information as the brief: what the business does, how the brand speaks, and the audience you have chosen. When you generate an image, we send the image description, plus any brand asset you have explicitly selected as a reference.

Both providers are used through their business APIs. Under their business terms, information sent through the API is not used to train their models, and is retained only briefly for security and abuse monitoring.

Uploaded images are sent to OpenAI only when you select them as a reference for a specific generation. They are not sent otherwise.

We do not sell your information

We do not sell personal information, and we do not share it with advertisers.

We may disclose information if the law requires it, or to establish or defend a legal claim.


Where your information goes

Our database, file storage and hosting are provided by Supabase and Vercel.

Our AI providers, Anthropic and OpenAI, and our payment processor, Stripe, are based in the United States. That means some of your information is transferred outside the United Kingdom.

Where information leaves the UK, it is protected by appropriate safeguards, which in practice means the International Data Transfer Agreement or the UK Addendum to the European Commission's Standard Contractual Clauses, as provided for in each supplier's terms.


How long we keep it

While your account is open, we keep your account details and everything you create in BraVo, so that the service works.

If you cancel, your subscription ends at the end of the period you have paid for and your account becomes read only. Your information stays until you ask us to delete it.

If you ask us to delete your account, we remove your account, your profiles, your content, your uploaded and generated images, and your login. This is permanent and cannot be undone.

Some things necessarily survive deletion:

  • Stripe keeps its own record of you as a customer and of the payments you made. We are required to keep financial records for six years for tax purposes.
  • Backups held by our hosting and database providers persist for their own retention periods, after which they are overwritten.
  • Payment event records are kept for reconciliation. They contain no personal information beyond a reference.

Your rights

Under UK data protection law you have the right to:

  • Access the personal information we hold about you
  • Correct it if it is wrong
  • Delete it, in the circumstances the law provides for
  • Restrict or object to how we use it
  • Portability: receive it in a usable format, or have it sent elsewhere
  • Withdraw consent at any time where we relied on consent

To exercise any of these, email hello@brandedvoice.co.uk. We will respond within one month.

Much of this you can also do yourself: your profiles and content are editable and deletable from inside BraVo at any time.

If you are unhappy with how we have handled your information, you can complain to the Information Commissioner's Office at ico.org.uk, or by calling 0303 123 1113. We would rather you came to us first so we can put it right.


Security

We take the following measures:

  • All connections use HTTPS
  • Passwords are hashed and never stored in a readable form
  • Two-factor authentication is available on your account and we recommend it
  • Your data is separated from other customers' at the database level, enforced by the database itself rather than by application code
  • Uploaded and generated images are held in private storage and served through time-limited links, never public URLs
  • Card details never reach our systems

No system is perfectly secure, but we take these obligations seriously and will tell you without undue delay if a breach affects your information.


Content generated by AI

BraVo uses AI to help produce content. Two things follow that you should know.

Generated content can be wrong. You are responsible for checking anything you publish. We cover this in our Terms of Service.

Similar content may be produced for other users. AI systems can generate comparable output from comparable input, and we cannot guarantee that anything generated is unique.


Changes to this policy

If we change this policy, we will update the date at the top. If a change materially affects you, we will tell you by email or in the app.


Contact

Crunch Creative Design Ltd
BLOCK, 23 Melville Building, Plymouth PL1 3RP, United Kingdom
hello@brandedvoice.co.uk