1. Controller and contact
Brannet Market is operated by Metanoia Hub, Tirana, Albania, the controller of personal information used to operate this service. Contact info@brannetmarket.com for privacy requests. This notice applies to the Marketplace, Creator Studio, Generative Studio, Agent, Branch, Apps Studio, My Files, Spaces, billing and support.
2. Information we collect or generate
- Accounts and sign-in: name, email, role, password hash, verification/reset/sign-in-code records, session tokens and authentication/security state. Google sign-in can provide a Google account identifier, verified email and profile name. We do not receive your Google password.
- Profiles and social features: avatar, bio, creator/display name, location or country details you supply, profile links, follows, saved items, Spaces, covers, visibility settings and published listings.
- Creator identity and payouts: legal name, identity type/number/document image or file, address, city, country, bank/account holder, payout bank country, payout method and relevant account identifiers such as IBAN, account number, SWIFT or local routing details; review status, reasons and submission history.
- Files and creation: uploaded originals and references, images, portraits, video, music, speech text/voice settings, generated outputs, app project files, linked media, file names/types/sizes, thumbnails, metadata, versions, folders, trash and canvas positions. Files can contain information about people other than the account holder.
- Agent and Branch: messages, attachments, conversation/context records and generated replies; workflow names, prompts, nodes, connections, collaborators, access roles, budgets, spend, project activity, portable archive contents and import/export state.
- Activity and operations: views, appearances, profile clicks, downloads/licence records, free Premium claims, saves, generation jobs/errors/provider references, content reports, moderation decisions, notifications/read status, support messages and admin activity summaries. Guest download limits use a keyed hash derived from the connection IP; servers also receive technical request information such as IP address and browser/device headers for delivery and security.
- Billing: selected plan/pack and cycle, processor customer/checkout/subscription/payment identifiers, payment/renewal/cancellation/refund/dispute status, order amounts/currency, creator earnings, payout requests, BRC balances and usage/refund ledger. Our site database does not store full card numbers or card security codes; payment processors collect payment credentials.
- Agreements and preferences: account identifier, agreement scope/version, accepted statements and their hash, action context and time; email preferences, language, local drafts, layout and other choices. Age/guardian declarations do not constitute independent age verification, and no date of birth is requested by the new agreement checkboxes.
3. Why we use information and the applicable bases
We process information necessary to provide the service you request: register/authenticate you, store and deliver files, run editors/AI/Branch collaboration, administer licences and quotas, fulfil billing, credit wallets and payouts, and provide support. Where applicable, this is necessary to perform our agreement or requested pre-contract steps. We also process information to meet legal/accounting obligations and for legitimate interests in security, abuse prevention, rights protection, service reliability, operational measurement and dispute handling, balanced against your rights.
Where processing relies on optional consent, such as optional marketing, we request it separately and you can withdraw it without losing unrelated core features. Agreeing to Terms or acknowledging this notice is not consent to every possible use of your information. Required reference/creator declarations record your asserted authority and service instructions; they do not replace a third party’s permission or any separate consent required by law.
4. AI providers, references and browser editors
For Generate Graphics, your brief and category-specific service instructions are processed by GPT Image 2.6 Sunburst and its SVG authoring workflow. We store the resulting SVG, category, job/settings and provider usage metadata alongside your private creation records. Publication/sharing follows the same choices as other generated content. To perform your request, we send the relevant prompt/text, reference content, settings and technical identifiers to the configured provider. Supported integrations include OpenAI, Google Gemini, Kling, MiniMax, ElevenLabs and fal; the provider used depends on the tool, configuration and routing/fallback. A fallback can send the inputs needed for the request to another configured provider. Those providers process information under their applicable terms and arrangements. We do not promise that all providers have identical retention, training or geographic practices. Ask us before submitting material that requires a particular processing restriction.
Unsplash search/import sends search requests and retrieves selected images, with source attribution where supported. Hosting/delivery services, including Hostinger and configured media services such as Cloudinary, may process uploaded files and previews. Apps Studio performs editing in your browser as supported; choosing cloud save, upload, sharing or Branch integration transmits the selected content to the service. Browser-only soundtrack rendering/extraction can create a new file which you then save to your account.
Do not upload identity documents as ordinary AI references, expose credentials in prompts or submit another person’s sensitive data without the necessary authority. Use the dedicated verification form for identity/payout review. A successful upload is not a determination that use of a portrait or voice is lawful.
5. Who can see content
Account files and chats are not automatically public. Authorized collaborators can access the Branch information made available to them. Public Marketplace listings, creator profiles, public Spaces and published Community media/Branch previews expose selected content, metadata and display identity. FREE published prompts are public; GOLD prompts are accessible to eligible Gold members. Public Branch previews limit private prompt/reference information, but a complete portable export may include private instructions and media; review it before sharing.
Anyone who receives an enabled share link may access its content. Public or linked content can be copied or downloaded; revoking a link or unpublishing does not remove copies others already made. Admins and authorized reviewers may access information needed for identity/asset review, support, security, payouts and service operation. Site-wide admin notifications can identify actors, asset titles, operational events and outcomes; the notification system excludes private prompts and private Space names from those summaries. Ordinary users’ notifications remain scoped to their account.
6. Other recipients and international handling
We disclose information needed to our hosting/storage, AI/media, payment, transactional email and security providers. Dodo Payments processes supported checkout/subscription transactions; Resend is used for transactional email, and Google for optional Google sign-in. Payment providers may have independent legal/accounting responsibilities. We may disclose information to payout providers/banks, professional advisers, authorities or rights claimants when necessary and lawful, for example for a dispute, fraud investigation or legal obligation. We do not give creators buyers’ full payment credentials through a listing.
Providers and recipients may process information outside Albania and your country. We assess applicable transfer requirements and use the safeguards required for the relevant transfer, such as recognized adequacy arrangements or contractual safeguards where applicable. Contact us for information about the recipients and safeguards relevant to your data. Do not assume an account plan provides country-restricted storage or processing.
7. Cookies, browser storage and communications
We use session/browser storage and, where applicable, cookies for authentication, secure Apps Studio access, preferences, local drafts, cached data, saved layout/canvas state and necessary functionality. Some editing workflows also use browser file/cache storage. Clearing storage can sign you out or remove locally saved work. Site operational analytics record events such as views, downloads, saves and generation status to operate the service and creator/admin dashboards. This notice does not authorize optional advertising or cross-site tracking; any optional technologies requiring consent must be offered separately.
Service email and in-app notifications cover verification, security, orders, subscriptions, credits, generation, review and payouts. Optional marketing preferences are separate; use available preference/unsubscribe controls. We may still send necessary security, transactional or legal notices.
8. Retention, deletion and security
We retain active account content as needed to provide requested features and keep records needed for billing, tax/accounting, fraud prevention, rights/licence proof, legal claims and dispute handling. Actual periods vary by record and legal duty; there is no single retention period for all data. Agent chats currently have a rolling 30-day expiry refreshed by activity, with cleanup performed by the service; saved outputs, transaction records and exported copies can have different retention. Identity documents and payout details are sensitive and should be retained only as needed for their verification, payout and lawful recordkeeping purposes. We review retention when accounts/content are deleted or when you make a request.
Trash is recoverable until permanently removed through supported controls. Deleting a file/account, removing a public listing and cancelling a paid plan are separate actions. Deletion does not instantly erase backups, independent provider records, legally required transaction/licence evidence or third-party copies of published/shared content. Contact us for the status and applicable retention of a specific record. Security controls include access restrictions, authentication and protected media access where supported; no online system can guarantee absolute security.
9. Your rights and requests
Depending on applicable law, you may request access, correction, deletion, restriction, portability or object to certain processing, and withdraw optional consent prospectively. Use account settings where available or contact info@brannetmarket.com. We may verify your identity proportionately, protect other people’s rights and retain records where legally justified. Do not send a full identity document in an initial ordinary support message unless a secure and necessary verification method has been arranged. We respond within applicable legal time limits.
You may complain to the Albanian Commissioner for the Right to Information and Protection of Personal Data and, where applicable, your local supervisory authority. You do not have to give up that right to use our support process.
10. Young users
The service is for people aged 13 or older. Under-18 users need appropriate parent/guardian approval and involvement. Where the applicable law requires verified parental consent for a particular processing activity, a declaration alone does not provide it: that activity must not proceed without the required authorization. We do not intentionally offer under-13 accounts. If you believe a child under 13 has provided information or an authorization is missing, contact us so we can investigate and restrict/delete the information as appropriate.
11. Updates
We update this notice as features, recipients and practices change. The date and version above identify this revision. Material changes receive additional notice where required; a new version may require renewed feature acknowledgements.
Graphics reference processing
Bragen Graphics 1.0 can process up to three reference images selected from your uploads, My Files or Unsplash. When you generate, authorized reference images are sent to OpenAI for visual analysis. The resulting description guides SVG generation. Reference file identifiers and processing usage may be retained with the creation; the service does not intentionally publish the analysis or private reference files as part of a gallery listing. Imported/uploaded images are stored in My Files → References under the ordinary retention controls.
SVG logo references
Patterns and Brandbook process an SVG logo selected voluntarily from uploads or My Files. We validate its static vector markup and may prepare a raster preview for visual analysis. Authorized logo markup or a visual description is processed by OpenAI to guide generation. Uploaded logos and previews remain in your private Studio storage unless you separately share or publish content, subject to the ordinary retention and deletion rules.