Legal

Privacy policy

Controller: Nils Knäpper, Brand-Pipe, c/o Online-Impressum 10839, Europaring 90, 53757 Sankt Augustin, Germany. Contact: support@brand-pipe.com.

What we process

  • Videos and logos you submit. Downloaded from the URLs you provide, processed in memory on Google Cloud Run (region europe-west3, Frankfurt), and deleted from the worker immediately after the job.
  • Results. Stored on Cloudflare R2 with EU jurisdiction, reachable only through a signed link valid for one hour, and deleted automatically after 24 hours.
  • Free sign-up. For the free starter credits you enter your email address on api.brand-pipe.com/signup. We store it with a hash of its normalised form (so each mailbox gets the free credits once), the version of the terms you accepted and the time. The form is protected by Cloudflare Turnstile, which checks signals from your browser and your IP address to tell people from bots. Your IP address is also held in memory for one hour to limit sign-ups per network and is not stored.
  • API keys and usage. Key verification and credit counting are handled by Unkey. We store your email, your Polar customer id (after a purchase) and your credit balance next to your key.
  • Payments. Handled by Polar Software Inc. as merchant of record. We receive order events (customer id, email, product, amount) via webhook to credit your key. We never see card data.
  • Website and API traffic. www.brand-pipe.com and api.brand-pipe.com are delivered through Cloudflare. Cloudflare processes your IP address, the requested URL and browser headers to deliver the pages and to protect them (firewall, rate limiting, bot detection).
  • Support email. When you write to support@brand-pipe.com we process your address and whatever you tell us in order to answer. The message is forwarded by Cloudflare Email Routing to a mailbox hosted by Google.
  • Contact form. The contact form takes your email address, a name if you give one, and your message, and sends them to the same mailbox by email; nothing is stored on the website. Like the sign-up form it is protected by Cloudflare Turnstile, which checks signals from your browser and your IP address to tell people from bots.
  • Logs. Request metadata (timestamps, status codes, job ids, error messages) is kept in Google Cloud Logging for 30 days for operations and abuse prevention.

Legal basis

Performance of the contract (Art. 6(1)(b) GDPR) for sign-up, processing, storage, billing and support; legitimate interest (Art. 6(1)(f) GDPR) in a secure and working service for logging, abuse prevention, bot protection on the sign-up form and delivery through Cloudflare. You are not obliged to give us any data, but without an email address we cannot issue a key. We make no automated decisions with legal effect and do no profiling.

Personal data of other people inside the videos you submit is processed on your behalf under the data processing agreement; you are the controller for it.

How long we keep data

  • Source files: until the request or job ends. Results and job records: 24 hours.
  • Logs: 30 days. Sign-up IP address: one hour, in memory only.
  • Account data (email address, its hash, key, credit balance, accepted terms version and time, Polar customer id): for as long as your key exists. Credits do not expire, so we do not delete an account on our own; write to us and we delete it, together with any unused credits.
  • Support email: up to three years after the end of the year in which the conversation ended (limitation period for contractual claims).
  • Invoices and payment records are kept by Polar under its own legal duties.

Processors and recipients

  • Google Cloud EMEA Limited, Ireland: video processing, job queue and logs in Frankfurt.
  • Cloudflare, Inc., USA: result storage (R2, EU jurisdiction), delivery and protection of website and API, Turnstile, Web Analytics, Email Routing.
  • Unkey, Inc., USA: key verification, credit counting, rate limiting. Receives your email address, customer id and balance.
  • Polar Software, Inc., USA: sells the credits as merchant of record and is a controller of its own for the purchase; see Polar's privacy policy at checkout.
  • Google: hosts the mailbox that receives support email.

Data processing agreements are in place with Google Cloud, Cloudflare and Unkey under their standard terms. We do not sell data and share it with nobody else, unless a law obliges us to.

Transfers outside the EU

Videos and results stay in the EU. Cloudflare, Unkey, Polar and Google are US companies or have a US parent, so account data, support email and connection data can be accessed from the United States. These transfers rely on the adequacy decision for the EU-US Data Privacy Framework where the provider is certified, and otherwise on the EU standard contractual clauses. Ask us for a copy.

Your rights

Under the GDPR you have the right of access (Art. 15), to rectification (Art. 16), to erasure (Art. 17), to restriction of processing (Art. 18) and to data portability (Art. 20). Write to support@brand-pipe.com; there is no form and no fee. You may also lodge a complaint with a data protection supervisory authority, for example the one where you live.

Right to object (Art. 21 GDPR). Where we rely on legitimate interest (logs, abuse prevention, bot protection, website analytics, delivery through Cloudflare) you may object at any time on grounds relating to your particular situation. We then stop that processing unless we have compelling legitimate grounds for it.

Cookies and website analytics

This website sets no cookies. Visits are counted with Cloudflare Web Analytics, which works without cookies, without local storage and without fingerprinting: the beacon reports the page URL, referrer, browser type and rough load timing to Cloudflare, where the request IP address is used to derive the country and is not stored with the page view. We see aggregated counts only and cannot identify individual visitors. Legal basis is our legitimate interest in knowing whether the site is found and read (Art. 6(1)(f) GDPR).

If you close the notice at the bottom of the page, a single flag is kept in your browser's local storage so it stays closed. It contains nothing but that preference.