My Digital Store

Privacy Policy

Last updated: June 2026

1. Who We Are

Brandcast (“we”, “us”, “our”) is operated by David Cooke and is accessible at brandcast.madethis.app. We are committed to protecting your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

For questions about this policy or your data, contact us at team@brandcast.madethis.app.

2. Data We Collect

We collect the following categories of personal data:

  • Account information: Your name, email address, and password (stored as a secure hash) when you register.
  • Voice recordings: Audio files you record or upload for transcription and content generation. These are processed and may be stored temporarily during generation.
  • Social account OAuth tokens: When you connect a social media account (LinkedIn, Facebook, Instagram, Threads, TikTok, YouTube, Bluesky, Medium), we store the OAuth access tokens required to publish on your behalf.
  • Content data: Posts, drafts, and scheduled content you create within the platform.
  • Usage data: Information about how you use the Service, including pages visited, features used, and timestamps, collected to improve the platform.
  • Billing information: Payment is handled by our payment processor — we do not store your full card details.

3. How We Use Your Data

We use your personal data to:

  • Provide, operate, and improve the Brandcast Service.
  • Transcribe your voice recordings and generate content using AI tools.
  • Publish content to connected social media platforms on your behalf.
  • Send you service-related communications (account notices, billing updates).
  • Detect and prevent fraud, abuse, or security incidents.
  • Comply with legal obligations and enforce our Terms of Service.

Our lawful basis for processing is primarily contract performance (processing necessary to provide the Service you subscribed to) and, where applicable, legitimate interests (e.g. improving the platform and preventing misuse).

4. Data Storage

Your data is stored on Convex, a cloud database platform. Convex stores data in infrastructure that may be located in the United States or other regions. Where data is transferred outside the UK or European Economic Area, appropriate safeguards (such as Standard Contractual Clauses) are in place.

We retain your data for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete or anonymise your personal data within 30 days, unless we are required to retain it by law.

5. Third-Party Services

We share data with the following third parties as necessary to provide the Service:

  • OpenAI: Voice recordings and text are sent to OpenAI’s APIs for transcription and AI content generation. OpenAI processes this data in accordance with their Privacy Policy.
  • Social media platforms: When you publish content, data is sent to the relevant platform (LinkedIn, Meta, TikTok, Google/YouTube, Bluesky, Medium) via their official APIs. Each platform’s own privacy policy governs their use of your data.
  • Payment processor: Payments are processed by our payment partner (MadeThis platform). We receive confirmation of payment but not your full card details.

We do not sell your personal data to third parties.

6. Cookies

We use essential session cookies to keep you logged in while you use Brandcast. These cookies are strictly necessary for the Service to function and do not track you across other websites.

We do not use advertising or analytics tracking cookies. You can configure your browser to block cookies, but doing so may prevent you from logging in or using the Service.

7. Your Rights (GDPR)

Under UK GDPR you have the following rights regarding your personal data:

  • Access: Request a copy of the personal data we hold about you.
  • Rectification: Ask us to correct inaccurate or incomplete data.
  • Erasure: Request deletion of your personal data (“right to be forgotten”).
  • Data portability: Request an export of your data in a machine-readable format.
  • Restriction: Ask us to restrict processing of your data in certain circumstances.
  • Objection: Object to processing based on legitimate interests.

To exercise any of these rights, email us at team@brandcast.madethis.app. We will respond within 30 days. You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) at ico.org.uk.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice within the Service. The “last updated” date at the top of this page reflects when the policy was last revised.

9. Contact

If you have any questions or concerns about this Privacy Policy or how we handle your data, please contact us at team@brandcast.madethis.app.