brndmill

Privacy Policy

Last updated: July 31, 2026

This Privacy Policy explains how brndmill (“we”, “us”) collects, uses, and protects your information when you use our service. By creating an account, you agree to the practices described here.

1. Information we collect

  • Account information: name, email address, and profile image, managed through our authentication provider (Clerk).
  • Workspace configuration: the brand details, product context, and content pillars you provide to guide video generation.
  • Connected accounts: OAuth access tokens for YouTube, Instagram, and/or TikTok when you choose to connect them. Tokens are encrypted at rest and used only to publish content on your behalf.
  • Generated content: the scripts and rendered videos you create, stored to deliver the service to you.
  • Usage and billing data: plan tier, render counts, and Stripe-managed payment information.

2. How we use your information

  • To generate video scripts and render short-form videos.
  • To publish videos to the social accounts you connect, on your schedule.
  • To authenticate you and secure your account.
  • To process payments and enforce plan limits.
  • To provide support and improve the service.

3. Third-party services

We rely on the following providers, each governed by their own policies:

  • Clerk — authentication and identity.
  • Stripe — subscription billing.
  • DeepSeek / OpenAI-compatible LLMs — script text generation.
  • Pexels — stock background footage.
  • Cloudflare R2 — video and asset storage.
  • YouTube, Instagram, TikTok — publishing via OAuth, only after you connect an account.

4. Data retention

We retain your data for as long as your account is active. You may delete individual scripts, renders, or posts at any time. Deleting your workspace or account removes your associated content. Some data may be retained in backups for a limited period and then permanently deleted.

5. Your rights

Depending on your jurisdiction (e.g. GDPR, CCPA), you may have the right to access, correct, export, or delete your personal data. You can manage most of this directly from your workspace settings, or contact us at the email below.

6. Security

OAuth tokens are encrypted at rest, data is transmitted over HTTPS, and access to your resources is scoped per account. No security measure is absolute, but we apply industry-standard safeguards.

7. Contact

Questions about this policy? Email support@redweyl.com.