Privacy Policy

1. Overview

BrandFlow (“we”, “us”), operated by Luminior, is an AI-powered platform for generating on-brand social content. This policy explains what we collect, why, and how it’s used — including when you connect a third-party account like Canva.

2. Information we collect

• Account details: name, email, and password hash (or your Google account ID if you sign in with Google).
• Brand information you enter: brand voice, positioning, personas, products, and similar setup data.
• Content you generate or upload: prompts, generated posts/images/video, and files you provide for context.
• Basic usage data needed to operate the service (e.g. rate-limit counters, error logs).

3. How we use it

To generate content on your behalf, run the features you use (competitor analysis, customer insights, exports), keep your account secure, and improve the product. We do not sell your data.

4. Canva integration

Connecting Canva is optional and only happens when you click “Connect Canva” yourself. Here’s exactly what that does:

• You authorize BrandFlow via Canva’s own sign-in screen — we never see or store your Canva password.
• We request permission to read your brand templates and designs, and to create or edit design content — this is what lets BrandFlow autofill your generated text/images into a Canva Brand Template and export the result.
• Your Canva access token is stored only in a secure, encrypted cookie in your browser. It is never written to our database, and it’s deleted immediately when you disconnect (Account → Canva → Disconnect).
• When you export a design through BrandFlow, the resulting image is saved to your generation history in our storage, the same as any other generated content — Canva itself is not asked to retain anything extra on our behalf.
• Disconnecting in BrandFlow, or revoking access from your Canva account settings, immediately stops any further access.

Canva’s own handling of your data is governed by Canva’s Privacy Policy.

5. Other third-party services

We use a small set of providers to run the product: an AI model provider to generate content, an email provider for sign-in and notifications, and cloud storage/hosting for your data and generated files. Each only receives what it needs to perform its function.

6. Data retention & deletion

We keep your account and content for as long as your account is active. You can request deletion of your account and associated data at any time by emailing us — see contact below.

7. Your choices

• Disconnect Canva at any time from Account → Canva.
• Update or delete your brand data from within the app.
• Request an export or deletion of your account data by contacting us.

8. Children’s privacy

BrandFlow is not directed at children under 16, and we do not knowingly collect their data.

9. Changes to this policy

If we make material changes, we’ll update the date at the top of this page and, where appropriate, notify you directly.

10. Contact

Questions or requests: luminiorofficial@gmail.com