Privacy policy

• Account details: your name, work email, organization, role, and a securely hashed password.
• What you put into Born: files, brand knowledge, briefs, quotes, comments, review marks, results - and any personal data inside them, such as a contact name in a brief.
• Activity: what happened on a project and who did it (the activity log), admin actions such as inviting someone (the audit log), and how much AI each organization used.
• Technical data: error reports with private details stripped, and cookie-free, anonymous page-view counts. To stop abuse of the sign-up and walkthrough forms we count requests per visitor using a scrambled form of the internet address - the address itself isn't stored.
• If you book a walkthrough: the name, email, company and note you send us.

• To provide Born under our agreement with your organization (contract).
• To keep it secure, fix errors and prevent abuse (legitimate interest).
• To send emails Born needs to send - invitations, password resets, notifications you can switch off in Settings or with the link in each email (contract and legitimate interest).
• To answer a walkthrough request (your request, and legitimate interest).

We don't sell personal data, use it for advertising, or let AI providers train on it.

A small number of service providers, each for one job - listed with what they receive and where on the outside services page. Some are in the United States; transfers there are covered by the EU's standard contractual clauses or an equivalent safeguard. Inside Born, agencies see only what a brand shares with them.

• Your content and account: for as long as your organization uses Born, then deleted within 30 days of the account ending.
• Audit and activity logs: as long as the organization's account - they're the record of who did what.
• Error reports: up to 90 days. Abuse-prevention counts: only as long as the limit needs them (an hour at most), then cleared.
• Walkthrough requests: up to 12 months, unless you become a customer.

You can ask to see, correct, delete or receive a copy of your personal data, or object to how we use it. A brand admin can download everything the organization holds in Born from Settings at any time. Email [privacy@useborn.io] and we'll answer within a month. You can also complain to your data protection authority.

Data is encrypted in transit and at rest. Each organization's data is kept apart by the database itself, and that separation is checked by automated tests on every change. Access to production systems is limited to the people who run Born.

If this policy changes in a way that matters, we'll tell admins by email before it applies. Contact: [Company legal name], [Registered address], [Country] · [privacy@useborn.io].