Privacy Policy

The short version

• What we collect: content you provide, payment and purchase information, communications, identifiers, usage information, and device and technical information.
• Why: to run our services and your account, fix bugs and improve our services, process payments and keep financial records, comply with the law, enforce our terms and protect our rights, answer your questions, keep our services secure, and understand how our sites are used.
• Who we share it with: service providers that help us run Brandname Maker.
• Selling and sharing: we do not sell your personal information or share it for targeted advertising.
• Your rights: depending on where you live, you can access, correct, delete, or export your information, and opt out of certain uses. Email kevin@brandnamemaker.com.

Who we are

Brandname Maker is operated by Brandname Maker LLC, a limited liability company ("we", "us", "our"). We are responsible for your personal information as described in this policy (the "controller" under data protection law).

This policy covers our websites, apps, and services that link to it, and the people who use them: site visitors, customers, and anyone who contacts us. We refer to all of them as "you". It does not cover other companies' websites or services, even if we link to them.

Questions? Email kevin@brandnamemaker.com or see Contact us.

Information we collect

Our guiding principle is to collect only what we need. Here is what that means in practice:

Content you provide

• What: the product description, audience and preferences you send us to generate names or headlines.
• Where it comes from: directly from you.
• What we use it for: to run our services and your account and fix bugs and improve our services.

Payment and purchase information

• What: card payments handled by Stripe (we never see the full card number), and for stablecoin payments your wallet address and transaction ID, which are also public on the blockchain.
• Where it comes from: directly from you, from our service providers, or from public sources.
• What we use it for: to process payments and keep financial records, comply with the law, and enforce our terms and protect our rights.

Communications

• What: feedback you send through our feedback endpoint, and any contact address you include.
• Where it comes from: directly from you.
• What we use it for: to answer your questions and fix bugs and improve our services.

Identifiers

• What: your IP address and payment or job reference IDs.
• Where it comes from: automatically from your device and browser.
• What we use it for: to run our services and your account, keep our services secure, and enforce our terms and protect our rights.

Usage information

• What: pages you visit, features you use, links you click, the site that referred you, and the date and time of your visit.
• Where it comes from: automatically from your device and browser.
• What we use it for: to understand how our sites are used and fix bugs and improve our services.

Device and technical information

• What: IP address, browser type and version, operating system, device type, language settings, and error or crash reports.
• Where it comes from: automatically from your device and browser.
• What we use it for: to keep our services secure and understand how our sites are used.

Some information is required to provide the service; we mark it as required on our forms. If you do not provide it, we cannot create your account or complete your request. Everything else is optional.

How we use information

We use personal information to:

• Provide and operate our services, including your account and anything you buy.
• Fix bugs, monitor performance, and develop new features.
• Process payments, issue refunds, and keep financial records.
• Comply with legal obligations, such as tax and accounting rules and valid requests from authorities.
• Enforce our terms and protect our rights, our users, and the public.
• Answer your questions and provide customer support.
• Keep our services secure and prevent fraud, abuse, and spam.
• Understand how our websites and apps are used so we can improve them.

We do not use your information to make decisions about you based solely on automated processing that have legal or similarly significant effects.

We may also create aggregated or de-identified information that can no longer identify you, and use it for any purpose, such as understanding trends. We keep de-identified information in that form and do not try to re-identify it.

Legal bases (EEA, UK and Switzerland)

If you are in the European Economic Area, the United Kingdom, or Switzerland, we must have a legal basis for each way we use your personal information. These are ours:

• Contract: We need the information to provide a service you have asked for, or to take steps you request before entering into a contract.
• Legitimate interests: We have a legitimate interest that is not outweighed by your rights and interests. You can object to this processing.
• Legal obligation: The law requires us to process it, for example to keep tax records.

Where we rely on consent, you can withdraw it at any time, for example by unsubscribing from emails or changing your cookie settings. Where we rely on legitimate interests, you can object, and we will stop unless we have compelling grounds to continue.

How we share information

We share personal information only as described here.

Service providers

We use other companies to help us run our services, such as hosting, payments, email, and support. They may use your information only to provide their services to us, under contracts that require them to protect it.

Other disclosures

• At your direction. When you ask us to, for example by connecting another service to your account.
• To follow the law. When we are required to by a valid legal process such as a subpoena, court order, or warrant. Unless the law or an emergency prevents it, we will try to tell you before we disclose your information.
• To protect people and our services. When we believe in good faith that it is needed to prevent fraud, abuse, or harm, or to enforce our terms.
• If our business changes hands. If we are involved in a merger, acquisition, or sale of assets, personal information may be transferred. We will notify you before your information becomes subject to a different privacy policy.
• Professional advisers. Lawyers, accountants, and auditors, under duties of confidentiality, and tax authorities when billing records are audited.

Selling and sharing personal information

We do not sell personal information and we do not share it for cross-context behavioral (targeted) advertising, as those terms are defined by US state privacy laws, and we have not done so in the past 12 months.

We do not knowingly sell or share the personal information of anyone under 16. We do not disclose personal information to third parties for their own direct marketing purposes.

How long we keep information

We keep personal information only as long as we need it for the purposes in this policy, then delete it or make it anonymous. How long depends on why we collected it and on your choices:

• Content you provide: For as long as your account is active or until you delete the content, then removed from backups within 90 days.
• Payment and purchase information: Transaction records are kept for as long as tax and accounting laws require (generally up to 7 years).
• Communications: Up to 3 years after our last interaction, so we have a history if you contact us again.
• Identifiers: Until you close your account or we no longer need it for the purposes above, then deleted within 90 days unless the law requires us to keep it.
• Usage information: Up to 25 months, in aggregated or de-identified form where possible.
• Device and technical information: Server and error logs are kept for up to 90 days unless needed longer to investigate a security issue.

We may keep information longer when the law requires it, to resolve disputes, or to enforce our agreements. Deleted information may remain in encrypted backups for a short time until they are overwritten.

How we protect information

We use reasonable technical and organizational measures to protect personal information, including:

• Information is encrypted in transit using TLS (HTTPS).
• Card details are handled by our payment processor and never stored on our servers.
• Access to personal information is limited to people and providers who need it.
• We keep our systems updated and monitor them for misuse.

No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a data breach affects you, we will notify you and the authorities as the law requires.

International transfers

We are based in the United States and store information there. Some service providers process it in other countries, as listed in How we share information.

When we transfer personal information from the EEA, the UK, or Switzerland to a country without an adequacy decision, we use legal safeguards: the EU-U.S. Data Privacy Framework (and its UK and Swiss extensions) where the recipient is certified, or Standard Contractual Clauses approved by the European Commission (with the UK Addendum where needed). You can ask us for a copy of these safeguards by emailing kevin@brandnamemaker.com.

Cookies and similar technologies

We use strictly necessary cookies and similar technologies such as local storage. Our Cookie Policy lists each one, who sets it, and how long it lasts.

You can change your choices at any time in Cookie settings. You can also block or delete cookies in your browser settings, though parts of the site may then not work.

Your privacy rights

We apply the same privacy rights to everyone where we reasonably can, wherever you live. You can update much of your information yourself in your account settings. For anything else, contact us using the options in How to exercise your rights.

Rights in the EEA, UK and Switzerland

You have the right to:

• Access your personal information and get a copy of it.
• Correct information that is inaccurate or incomplete.
• Erase your information in certain cases ("right to be forgotten").
• Restrict how we use your information in certain cases.
• Data portability: receive information you gave us in a machine-readable format, or have it sent to another company.
• Object to processing based on legitimate interests, and to direct marketing at any time.
• Withdraw consent at any time, where we rely on consent.
• Not be subject to decisions based solely on automated processing that significantly affect you.
• Complain to a data protection authority (see Contact us and complaints).

We respond within one month. If a request is complex, we may extend this by up to two more months and will tell you why.

US state privacy rights

California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, Nevada, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia have consumer privacy laws. Depending on your state, you have the right to:

• Confirm whether we process your personal data and get a copy of it.
• Know the categories of personal information we collect, where it comes from, why we use it, and who we disclose it to.
• Correct inaccurate personal data.
• Delete personal data we have collected from or about you.
• Get your data in a portable, easy-to-use format.
• Opt out of the sale of your personal data.
• Opt out of targeted advertising (called "sharing" for cross-context behavioral advertising in California).
• Opt out of profiling that leads to decisions with legal or similarly significant effects about you.
• Control how we use sensitive data. Depending on your state, we need your consent first, or you can limit or opt out of its use.
• Get a list of the specific third parties we have disclosed your personal data to.
• Question the result of a profiling decision, learn why it was made, and have it reconsidered.
• Appeal if we decline to act on your request.
• Not be treated differently for exercising your rights.

Some of these laws apply only to larger businesses. We honor these requests from all US residents, whether or not your state's law applies to us.

The table shows the rights in each state and where to complain if you are unhappy with how we handled your request.

Some states have extra protections for young people:

• California: We will not sell or share the personal information of consumers we know are under 16 without opt-in consent (from a parent or guardian if under 13).
• Colorado: Heightened protections apply to consumers we know are under 18 (since October 1, 2025).
• Connecticut: We will not sell the personal data of, or use it for targeted advertising about, consumers we know are under 18.
• Delaware: We will not sell the personal data of, or use it for targeted advertising about, consumers we know are 13 to 17 without their consent.
• Maryland: We will not sell the personal data of, or use it for targeted advertising about, consumers we know or should know are under 18. Maryland also bans the sale of sensitive data.
• Montana: Heightened protections apply to consumers we know are under 18.
• New Hampshire: We will not sell the personal data of, or use it for targeted advertising about, consumers we know are 13 to 15 without their consent.
• New Jersey: We will not sell the personal data of, use it for targeted advertising about, or profile consumers we know are 13 to 16 without their consent.
• Oregon: Since January 1, 2026, we will not sell the personal data of consumers we know are under 16, or anyone's precise geolocation data.

California

Under the California Consumer Privacy Act (CCPA), California residents may ask us to tell them the categories and specific pieces of personal information we have collected about them, the categories of sources, why we collected it, and the categories of third parties we disclosed it to. You can also ask us to delete or correct it, and opt out of its sale or sharing.

We will not discriminate against you for exercising your rights, for example by denying you service or charging a different price.

We do not offer financial incentives in exchange for personal information.

Shine the Light. California Civil Code § 1798.83 lets California residents ask which personal information we disclosed to third parties for their own direct marketing. We do not make such disclosures.

We may not meet the thresholds that make the CCPA apply to us, but we honor these rights anyway.

How to exercise your rights

To make a request, email us at kevin@brandnamemaker.com. Tell us what you are asking for and which state or country you live in.

To opt out of cookies used for analytics or advertising, use Cookie settings.

We act on requests to opt out of the sale or sharing of your information, or of targeted advertising, within 15 business days. For other requests, we confirm receipt within 10 business days and respond within 45 days. If we need more time, we will tell you why within that period and may take up to 45 more days where the law allows.

Verifying your request

To protect you, we need to confirm that a request to access, correct, or delete information comes from you before we act on it. We usually do this by matching information you give us with what we already have, such as asking you to confirm from the email address on your account. For sensitive requests, we may ask for more. We use this information only to verify your request.

You do not need to verify your identity to opt out of the sale or sharing of your information or of targeted advertising, though we may ask for enough information to find your records.

Authorized agents

You can ask someone else (an "authorized agent") to make a request for you. We will need proof that you gave them signed permission, and we may ask you to confirm your identity with us directly, unless they hold a power of attorney.

Appeals

If we decline to act on your request, you can appeal by replying to our decision or emailing kevin@brandnamemaker.com with "Appeal" in the subject line. We will respond in writing within the time your state's law requires (45 or 60 days) and explain our reasons. If we deny your appeal, you can contact your state's regulator, listed in the table above.

Global Privacy Control and Do Not Track

Global Privacy Control (GPC) is a browser setting that tells websites you do not want your personal information sold or shared. When our site receives a GPC signal, we treat it as a request to opt out of the sale and sharing of your personal information and of targeted advertising for that browser, and we turn off the cookies and tools that would do so. If you are signed in, we also apply it to your account where we can.

Do Not Track (DNT) is an older browser setting with no agreed standard for how websites should respond, so we do not respond to it. We do honor GPC.

Children's privacy

Our services are not directed to children under 13, and you must be at least 13 to use them. We do not knowingly collect personal information from children under 13. If you believe a child has given us personal information, contact us at kevin@brandnamemaker.com and we will delete it.

In the EEA and UK, where we rely on consent, children below the age of digital consent in their country (13 to 16, depending on the country) need a parent or guardian to consent for them.

Notice at collection (California)

This notice describes the personal information we collect from California residents, why, and how long we keep it. We collect it from the sources described in Information we collect.

We do not sell or share sensitive personal information.

Contact us and complaints

If you have questions about this policy or your information, or want to make a request, contact us:

If you are in the EEA, UK, or Switzerland, you can also complain to a data protection authority. We would appreciate the chance to address your concerns first.

• European Economic Area: your local data protection authority
• United Kingdom: the Information Commissioner's Office (ICO)
• Switzerland: the Federal Data Protection and Information Commissioner (FDPIC)

If you need this policy in a different format, for example because of a disability, contact us at kevin@brandnamemaker.com.

Changes to this policy

We may update this policy to reflect changes in the law or in our practices. When we do, we will change the "Last updated" date and version at the top. If the changes are significant, we will also tell you in advance, for example by email or a notice on our site.