Trust

What you're trusting us with, honestly.

You are handing us your brand and your customers' attention. This page says what happens to both. Everything on it is true today - we would rather leave a section out than publish one we cannot stand behind.

1 · Your brand data

Per-brand isolation, not just per-tenant.

Your brand is its own boundary

Each Brand DNA scopes its own assets, prompts, and outputs. There is no shared library between accounts, and no cross-account reads when we render your ads.

No training on customer content

Brandflux does not feed customer uploads, website data, or generated outputs back into shared model training. Generation runs scoped to your account.

In-transit encryption

All Brandflux endpoints are HTTPS-only with TLS 1.2+ enforced. HSTS headers prevent downgrade attempts.

At-rest encryption

Customer assets and generated outputs are stored at rest with provider-managed encryption.

2 · Service status

Published, not described.

Current and historical availability is on the public status page. It is the same page we watch, not a summary written for this one.

3 · Responsible disclosure

Found something? Tell us first.

Email [email protected] with a description and reproduction steps. We acknowledge within one business day, keep you posted while we fix, and credit you in our changelog if you would like the attribution.

Security FAQ

The questions owners actually ask.

Is my brand data isolated from other customers?

Yes. Each Brand DNA scopes its own assets, prompts, and outputs. There is no shared library between accounts and no cross-account reads when we render your video ads. Brand isolation is a first-class boundary in the product.

Do you train models on customer content?

No. We train no AI model of our own on customer content (uploads, generated ads, brand assets), and we do not opt it into training our AI providers’ models.

Do you learn from my ad results?

Yes, as our Terms describe. Each brand learns from its own ads. We also combine ad results, such as views, clicks and spend, across many businesses with the business removed, and use a pattern only once at least 10 businesses are behind it. Your brand assets and ads never go into another business’s ad. To opt out of being counted across businesses, email [email protected].

Who owns the ads I make?

You do. They are yours to run commercially. We do not resell your ads and we do not reuse your brand assets for anyone else.

Where is data stored?

On managed cloud infrastructure, encrypted in transit and at rest by the provider. If you need the specific providers named for a procurement or DPIA question, email [email protected] and we will send the current list.

How do I report an ad that shows someone without their consent?

Email [email protected] with the video or a link to it. We reply within 24 hours, any day of the week, and take down our copies of the ad while we look into it. Our acceptable use policy does not allow ads that show a real person without their consent.

Your brand data stays yours.

Free to start. Build your brand and preview an ad before you pay a cent. No credit card to sign up; you only pay when you export.