Trust, security & privacy.

A plain-English summary of how Brand Deals protects your data and your money.

Per-user access control

Every record is protected by row-level security. You can only see your own deals, contracts, and mandates.

Encryption

TLS 1.3 in transit, AES-256 at rest. Database backups are encrypted at the storage layer.

Authentication

Email + password or Google sign-in. Service-role keys never leave the server.

Direct Debit

Bank mandates are handled by GoCardless — we never see or store bank credentials.

Audit logs

Sensitive admin actions are recorded in an immutable audit log visible only to operators.

Infrastructure

Edge-deployed on Cloudflare with a managed Postgres database. Region-pinned where required.

Data export & deletion

Email support and we'll export or delete your workspace data within 30 days.

Contact security

Report vulnerabilities to security@branddeals.app — we acknowledge within 2 business days.