DBD BRAND STUDIO
Privacy Policy
Effective September 15, 2026
Our commitment
DBD does not sell, rent, or trade personal information. We do not use your brand, customer, or creative information to train a public generative model. We process information only to provide the features you choose, secure the service, meet legal obligations, and improve DBD in aggregated or de-identified form where permitted.
What we collect
We collect account details such as your name, email address, password-derived authentication data, workspace membership, and credit-purchase records. DBD also processes the brand answers, assets, media, prompts, generated work, connected-platform details, and activity needed for the features you use. Payment-card information is handled by Stripe, not stored by DBD.
Where information is stored
DBD is local-first: most work remains on the computer where it is created. Creating an account stores your login, business membership and billing records in access-controlled Cloudflare storage. Your business content stays local until its owner activates Enterprise and explicitly moves that business to the cloud; authorized teammates can then use the shared brand on different computers. Images, fonts, and professional logo sources that you choose to sync are stored in private cloud object storage. Provider credentials are kept in operating-system protected storage on the authorizing computer. Temporary managed media used for social delivery is automatically limited to seven days. DBD does not use that temporary handoff as a permanent media archive.
How information is shared
We share only what is necessary with service providers that perform requested services: Cloudflare for account and workspace infrastructure, Google for managed generative requests, Stripe for payments, and a social platform when you explicitly connect or publish to it. Those providers process information under their own terms and privacy policies. We do not share information for advertising or sell it to data brokers.
Generative and connected services
When you choose managed synthesis, research, transcription, or image creation, the selected material is sent to the relevant generative service to produce that result. Generated output can be inaccurate, incomplete, or unsuitable. You remain responsible for reviewing it before use. When you connect a social account, DBD uses the access granted by that platform only to perform the connection, delivery, or reporting action you choose.
Security, retention, and incidents
We use reasonable administrative, technical, and access controls designed to protect information, but no service can promise absolute security. We retain information for as long as needed to provide the service, meet legal obligations, resolve disputes, and enforce agreements. If a security incident affects personal information, we will investigate, take reasonable response measures, and provide notice when required by applicable law.
Your choices
You may update account information, disconnect social accounts, remove local work, leave a shared workspace, or request account deletion. Some records may be retained where required for legal, security, fraud-prevention, accounting, or audit reasons. For access, correction, deletion, or privacy questions, contact hello@agencystudio.cc.
Recraft visual production
When you request a Recraft generation or editing tool, DBD sends Recraft only the creative direction and selected source images, style references, or editor masks needed to perform that request. Recraft processes that material under its own terms and privacy policy. Returned provider URLs are temporary handoffs; DBD imports the selected result into the local project rather than treating the provider URL as your permanent library.