Privacy Policy

Brainforest AI (“Brainforest”, “we”) makes ad creative for brands. This policy explains what we collect when you use brain-forest.ai, why, and who we share it with.

What we collect

• Account details: your email address and password (stored hashed by our auth provider).
• Brand information: the website you give us and what we read from it (product images, colors, fonts, copy), plus anything you type into onboarding.
• Files you upload: product photos and reference ads.
• What we make for you: generated ads, videos, edits and their history.
• Billing: handled by Stripe. We store your subscription status, never your card number.
• Ad performance (only if you connect an ad account): per-ad metrics such as spend, clicks and return on ad spend.
• Feedback you send us from inside the app, and basic server logs (IP address, request times) for security and debugging.

How we use it

• To research your brand and generate, check and improve your ads.
• To run your account, take payment and enforce plan limits.
• To fix problems and keep the service secure.

We don’t sell your data, and we don’t use it for advertising. Your brand materials are used to make your ads, not anyone else’s.

Who we share it with

Service providers that process data on our behalf, only as needed to run Brainforest:

• Supabase (database, file storage, sign-in) and Railway (hosting)
• OpenAI, Google (Gemini and Veo) and Anthropic (image, video and language models)
• Firecrawl (reading your website), Foreplay (public ad research) and Replicate (model hosting)
• Stripe (payments) and Meta (only when you connect an ad account)

The model providers above process your inputs through their business APIs, which by their terms don’t train their models on that data. We may also disclose information if the law requires it.

Retention and deletion

We keep your data while your account is open. Ask us to delete your account and we’ll remove your brands, uploads and generated ads within 30 days, except records we must keep for tax or legal reasons.

Your choices

You can ask for a copy of your data, a correction, or deletion at any time by emailing hello@hitch.co. Depending on where you live (for example California or the EU/UK) you may have additional rights; we honor those requests the same way.

Security

Data is encrypted in transit, access to each brand is limited to its owner, and production access is limited to the people who run the service. No system is perfectly secure; tell us right away if you think your account has been compromised.

Changes and contact

If we change this policy materially we’ll tell you by email or in the app. Questions: hello@hitch.co. Brainforest, Austin, Texas.