Privacy Policy

• Account information. When you sign up, our authentication provider (Clerk) stores your name, email, and login details.
• Your brand profile. Anything you enter to ground the AI: brand name, core message, audience, voice notes, stories, and similar.
• Your scans. The website URLs you submit, the pages we read, and the scores and results we generate, saved to your account so you can see history.
• Waitlist and contact. If you join a list or email us, we keep that message and address.
• Basic technical data. Standard logs and request data needed to run and secure the app.

When you run a scan, we fetch the publicly available pages of the website you submit, the same pages anyone can visit. We do not log into anything, and we do not access private, gated, or password-protected content. You should only submit sites you own or are authorized to analyze, or sites that are already public.

• To run the service: scan your brand, score it, and generate fix-prompts grounded in your profile.
• To save your history so you can track your score over time.
• To process your subscription and support your account.
• To keep the service secure and to improve how it works.

We do not sell your personal information, and we do not use it for third-party advertising.

To produce your scores and prompts, we send the content of the pages you scan, along with your brand profile, to our AI provider (Anthropic) for analysis. Results are directional guidance meant to equip you. A low-confidence read is flagged as directional, not handed to you as a verdict, and we never publish anything on your behalf.

We share data only with the providers that make the service run, and only as needed:

• Clerk for authentication and billing.
• Stripe (through Clerk) to process payments. We never see or store your full card details.
• Supabase for the database that stores your profile and scans.
• Anthropic for the AI that scores your brand and writes prompts.
• Firecrawl to read the public pages you submit.
• Vercel for hosting.

Each provider handles data under its own terms and security practices.

We use the essential cookies our authentication provider needs to keep you signed in and secure. We do not run advertising or cross-site tracking cookies.

We keep your account, profile, and scan history while your account is active so your history stays useful. If you downgrade, your history is retained but locked, and it returns when you re-subscribe. You can ask us to delete your account and data at any time.

You can access, correct, or delete your personal information. Email us and we’ll help. Depending on where you live, you may have additional rights under laws like GDPR or CCPA, and we honor those requests.

We protect your data with encryption in transit and access controls, and we rely on established providers for storage and auth. No method of transmission or storage is ever 100 percent secure, so we can’t promise perfect security, but we take it seriously.

The service is for adults and is not directed to anyone under 18. We don’t knowingly collect data from children.

We operate from the United States, and your information is processed there. By using the service, you understand your data is handled in the US.

We may update this policy as the service grows. We’ll change the date above, and for material changes we’ll give you clear notice.

Questions about privacy? Email hello@humanpoweredbrand.com.