Privacy Policy

1. Information We Collect

When you create an account, we collect your email address and password (stored securely using industry-standard hashing). If you sign in with Google, we receive your name, email, and profile picture from Google.

When you use BrandMash campaigns, we collect IP addresses and user agent strings from voters ("mashers") to prevent duplicate votes. This data is associated with campaign sessions, not user accounts.

2. How We Use Your Information

We use your information to:

• Provide and maintain your account
• Process payments through Stripe
• Prevent abuse and duplicate voting
• Send transactional emails (receipts, account notifications)

3. Payment Processing

Payments are processed by Stripe. We do not store your credit card information. Stripe's privacy policy applies to payment data: stripe.com/privacy.

4. Data Sharing

We do not sell your personal information. We share data only with service providers necessary to operate BrandMash (Stripe for payments, Cloudflare for hosting, OpenAI for AI name generation).

5. Data Retention

Your account data is retained as long as your account is active. Campaign and voting data is retained as long as the campaign exists. You may delete your account by contacting us.

6. Contact

For privacy questions, contact us at privacy@brandmash.app.