Legal
Privacy policy
Who we are
Brand Protection Tools is run by Verity AI Ltd (company number 16116354, registered office 23 Plantagenet Drive, Rugby, England, CV22 6LB). For the personal data described here we're the controller under the UK GDPR and the Data Protection Act 2018. To ask us anything about your data, use the contact form and choose "My data and privacy".
What we collect and why
| Data | Why | Lawful basis |
|---|---|---|
| Account details: email, name, a hashed password, the team you belong to | To run your account and let you log in | Contract |
| Billing: your plan, subscription status and Stripe customer ID. Card details go to Stripe and never reach us. | To charge for the plan you chose and keep tax records | Contract; legal obligation for tax records |
| Brand details: brand names, trademark numbers, official store addresses, product titles, prices and photos | To search for copies of your products and avoid flagging your own listings | Contract |
| Findings: public listing details such as the listing address, title, price, seller name and seller ID, plus screenshots and archived copies captured as evidence | To show you possible copies and prepare the notices you choose to file | Contract with you; legitimate interests in enforcing your intellectual property rights |
| Free scan requests and messages: your email, name, company, store address, and what you tell us in your own words, plus the page you arrived on and the site that sent you | To run the scan you asked for, reply to you, and learn which pages help people | Steps before a contract; legitimate interests |
| Analytics: pages visited, device and approximate location, via Google Analytics | To see which pages help people | Consent. Only if you allow analytics in the cookie banner. |
| Server logs: IP address, browser and the request, kept by our host | Security and fixing faults | Legitimate interests |
Sellers who appear in findings
Findings can include the name a seller trades under on a public marketplace. We collect only what the listing shows publicly, use it only to help the rights holder decide whether to report that listing, and delete it when the customer deletes the finding or closes their account. If you're a seller and want to know what we hold about you, use the contact form.
Who processes data for us
- Vercel: hosting and server logs.
- Our database host: stores account, brand and findings data.
- Stripe: payments, invoices and tax.
- Google: analytics, only with your consent.
- Anthropic: an optional AI check on borderline findings. It receives listing details, never your password or card.
- Marketplace and search data providers: such as the Etsy Open API and a licensed search API. We send them search terms and images of your products, not your account details.
Some of these companies are in the United States. Where data leaves the UK we rely on the safeguards UK law allows, such as the UK International Data Transfer Addendum or the UK Extension to the EU-US Data Privacy Framework, whichever applies to that provider.
How long we keep it
- Account, brand and findings data: while your account is open, then deleted within 30 days of you closing it.
- Billing records: 6 years, because UK tax law requires it.
- Free scan requests and messages from people without an account: 12 months.
- Analytics data: no longer than 14 months, the longest Google Analytics keeps it on a standard account.
Your rights
You can ask for a copy of your data, ask us to correct or delete it, object to how we use it, ask us to restrict its use, or ask for it in a portable format. You can withdraw analytics consent at any time from "Cookie settings" in the footer. You can delete your account yourself from your account settings.
If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office at ico.org.uk. We'd like the chance to fix it first.
Changes
If we change this policy in a way that matters, we'll update the date at the top and tell account holders by email.