Trust, security & privacy.
A plain-English summary of how Brand Deals protects your data and your money.
Per-user access control
Every record is protected by row-level security. You can only see your own deals, contracts, and mandates.
Encryption
TLS 1.3 in transit, AES-256 at rest. Database backups are encrypted at the storage layer.
Authentication
Email + password or Google sign-in. Service-role keys never leave the server.
Direct Debit
Bank mandates are handled by GoCardless — we never see or store bank credentials.
Audit logs
Sensitive admin actions are recorded in an immutable audit log visible only to operators.
Infrastructure
Edge-deployed on Cloudflare with a managed Postgres database. Region-pinned where required.
Data export & deletion
Email support and we'll export or delete your workspace data within 30 days.
Contact security
Report vulnerabilities to security@branddeals.app — we acknowledge within 2 business days.