GDPR compliance
BrandOps is committed to respecting the rights of data subjects under the General Data Protection Regulation. This page explains how we process personal data and what rights you have.
Your data rights
Right to erasure
You can request deletion of your personal data. We will remove it from active systems within 30 days and from backups within 90 days.
Right to access
You can request a copy of the personal data we hold about you. We will provide it in a machine-readable format.
Right to rectification
If any data is inaccurate, contact us and we will correct it promptly.
Right to object
You can object to certain processing, such as marketing emails, at any time.
How we process data
Lawful basis
We process personal data based on:
- Contract: to provide the BrandOps workspace to users.
- Legitimate interest: to improve our product and respond to inquiries.
- Consent: for optional marketing communications and non-essential analytics.
Data we collect
We collect only what we need:
- Name and email from the contact and early-access forms.
- Usage analytics to understand how visitors interact with the site.
- Server-side credentials that you configure to enable generation features.
Processors and sub-processors
We rely on trusted providers to host and operate BrandOps:
- Vercel: website hosting and serverless functions.
- Google Workspace / Google Sheets: contact-form submissions and lead tracking.
- OpenAI: content generation when you provide an API key.
- Firecrawl: research retrieval when you provide an API key.
- Resend: test newsletter delivery when configured.
Exercise your rights
To access, correct, delete, or export your data, contact us with your request.
Contact us