Privacy
This notice explains what Brandeno by Bridivo processes. The controller is ABDULELLAH ABDULAZIZ ALSAHEEL ESTABLISHMENT (Unified National Number 7054292532), 7488 King Abdullah Road, Riyadh, Saudi Arabia. Contact: support@bridivo.com.
What we process
- Account details: name, email address, password hash, language and two-step verification secrets (encrypted).
- Workspace content: brand knowledge, documents you paste, drafts, approvals, schedules, messages and reports you create. When you connect a social account, this also includes authorized profile identifiers, encrypted authorization credentials and permitted account content or metrics.
- Technical data: session and security events, request logs, IP prefix and user agent, kept for security and operations.
- Billing data: plan, subscription status, credit purchases and usage, payment and store transaction identifiers, and encrypted purchase-verification credentials when store billing is configured. Card details are entered with the payment provider or app store; Brandeno does not receive or store card numbers or CVCs.
Why we process it
To provide and secure the service, to send account and service email, to process payments and keep accounting records, to support you and to improve the product. We do not sell personal data and we do not use it for advertising.
Who processes it
Application servers, background workers and the recovery-journal database run on DigitalOcean in Frankfurt (EU); the primary database runs on Neon in the same region; Cloudflare provides the edge, DNS, tunnel and the object storage (R2) that holds media, exports and the recovery witness; Resend delivers email. Moyasar processes website payments; Apple and Google process their respective app-store purchases when enabled. Connected social networks receive the authorized account requests and content required for the features you use. Supplier roles and applicable terms differ; this list is not a claim that every integration is enabled or that every supplier acts only on our instructions. We may disclose data where the law requires it.
AI processing
The text-model supplier selected for Brandeno is Google’s Gemini API (Google LLC). What is sent to it is the brief you write, the approved brand facts the draft may use and the draft under review; your password, payment data, social credentials and private notes marked internal are never sent. Under Google’s paid API terms (read on 31 October 2026) Google does not use prompts or responses to improve its products and logs them for a limited period only to detect abuse; the data may be processed in any country where Google maintains facilities. Whether this deployment currently sends requests to the supplier is stated next:
The AI model, request destination and retention/training profile are undeclared.
Do not enter personal or confidential content until the AI processing destination and data policy are confirmed.
Where and for how long
The application and databases are hosted in Frankfurt (EU). Media, exports and the recovery witness are stored on Cloudflare R2, whose physical storage location is not guaranteed. Email and payment suppliers process data in their own regions. We keep account and workspace data while your account exists. Backups are kept for 30 days. Financial records (invoices, receipts and the credit ledger) are kept for 10 years, as Saudi commercial and tax law requires. Security and request logs are kept for a limited period for security and operations and are then deleted. When you disconnect a social account, its authorization credential is revoked and destroyed at once; the account identifiers stay in your workspace’s audit history. When your account is deleted, its content is deleted and the records we must keep by law are retained for the legal period only.
Your choices
You can access and correct your account data in Settings, and you can contact us to request access, correction or deletion, or to object to processing. You can withdraw consent where processing relies on it. We answer within 30 days.
Security
We use encryption in transit, hashed passwords, encrypted secrets, access controls and audit records; our vulnerability-reporting policy is at /security. No system is perfectly secure; tell us promptly about a suspected incident.
Cookies
We use a session cookie and a language cookie. There are no advertising trackers.
Children
The service is for people aged 18 and over.