Privacy Policy

BrandShots is operated by Baruzo Tech. This policy explains what we collect, why, and what your rights are.

What we collect

When you sign in to BrandShots, we receive your name, email address, and profile picture from your Google account via OAuth. We never see or store your Google password.

When you generate creatives, we store the product images you upload, the brand kits you create (logo, palette, voice description), the briefs you submit, and the resulting AI-generated images. We retain these so you can find them in your library later.

We log standard request metadata (timestamp, IP address, user-agent) for security and debugging. Logs are kept for 30 days and then deleted.

We do not track you across other websites, and we do not sell or share your personal data with advertisers.

What we do with it

• Authenticate you when you sign in.
• Run the creative generation pipeline (analyzer, image model, copywriter).
• Store and serve your products, brand kits, and generated creatives back to you.
• Bill you against your credit balance.
• Respond to support requests.

We use a small number of subprocessors to make this work:

• Google Cloud Platform — application hosting, image storage, and the Vertex AI image model.
• MongoDB Atlas — application database.
• OpenAI — alternate image model when BrandShots routes through OpenAI.
• Replicate — background-removal model used during product upload.
• Dodo Payments — payment processing for paid plans.

Each subprocessor processes only what's needed to deliver its part of the service.

How we handle your inputs and AI outputs

The product images and prompts you submit are sent to the AI model providers above to generate outputs. We pass minimum information (the image itself and the composed prompt) and don't include identifying account information in the model request.

We do not use your uploaded images, brand kits, or generated outputs to train AI models — neither ours nor any third party's. The model providers we use (Google Vertex AI, OpenAI on the API tier, Replicate) operate under commercial terms that prohibit training on customer data.

Generated outputs are stored in our infrastructure and served back to you. We retain a non-exclusive license to display generated outputs only within your account so you can see them in your library. We do not display, share, or sell your outputs publicly.

Cookies and analytics

We use a single first-party cookie (or localStorage entry) to keep you signed in. We do not use third-party advertising cookies.

We use lightweight first-party analytics to count page views and conversion events. Analytics never identify individual users.

Your rights

You can:

• See all data we hold for you by signing in and visiting your library, brand kits, and settings.
• Edit or delete any product, brand kit, or generation at any time.
• Delete your entire account by emailing info@baruzotech.com — we'll wipe your data within 14 days.
• Export your generated images as PNGs anytime via the download button.

If you're in the EU, UK, or California, you have additional statutory rights (access, rectification, erasure, portability, objection). Email us and we'll honor them within the timelines required by GDPR / CCPA.

Children

BrandShots is not intended for users under 16. We don't knowingly collect data from minors. If you believe a minor has created an account, email us and we'll remove it.

Changes to this policy

We'll update this page when material things change and bump the effective date at the top. Substantial changes (e.g., new subprocessors handling personal data) will trigger an email notification to active users.

Contact

Questions, concerns, takedown requests, or rights requests: info@baruzotech.com. We aim to respond within one business day.