Last updated: May 30, 2026
This Privacy Policy explains what information Brand Surface (“we,” “us”) collects when you use brandsurface.xyz, how we use it, and the choices you have. By using the service you agree to this policy.
1. Who we are
Brand Surface is operated by Marvin Nakaai, an individual based in Brussels, Belgium. Marvin Nakaai is the data controller for the purposes of the EU General Data Protection Regulation (GDPR). You can reach us at hello@brandsurface.xyz.
2. Information we collect
When you use Brand Surface, we collect:
- Account and session info: your email address, company name, and company stage (pre-seed, seed, etc.).
- Discovery content: the answers you provide during the discovery conversation, the resulting brand strategy document, and the Hiring Compass artifact.
- Technical data: standard server logs (IP address, user agent, timestamps) collected by our hosting provider for security and performance.
We do not knowingly collect any other personal information. We do not use third-party advertising or marketing trackers.
3. How we use it
- To run the discovery conversation and generate your strategy document.
- To send you the strategy document and related emails (delivery, support).
- To improve the product, using anonymized and aggregated patterns only.
- To respond to your questions and requests.
We do not sell your information. We do not share it for advertising. We do not train large language models on your content.
4. Sub-processors
We rely on the following categories of service providers to operate Brand Surface. Each processes only the data needed for its role:
- Application hosting provider — runs the website and serves the application.
- Database provider — stores your session, strategy document, and account data.
- AI model provider — powers the discovery conversation and generates the synthesis.
- Document hosting provider — hosts your strategy document as a private page.
- Email delivery provider — sends transactional emails (your strategy, notifications, support replies).
- Payment processor — handles payment if you purchase the service.
On reasonable request we will share the current list of named providers. Email hello@brandsurface.xyz.
5. How long we keep your data
We keep your strategy document and session data for as long as your account exists, so the private link continues to work. You can request deletion at any time (see section 7). Server logs are retained by our hosting provider per their standard retention windows.
6. International transfers
Our service providers may store and process data in the United States and other countries. Where required by law, those providers maintain appropriate safeguards (such as Standard Contractual Clauses for EU/UK transfers).
7. Your rights
Depending on where you live, you may have the right to:
- Access the personal information we hold about you.
- Correct inaccurate information.
- Request deletion of your data.
- Export your data in a portable format.
- Object to or restrict certain processing.
To exercise any of these rights, email hello@brandsurface.xyz. We respond within 30 days.
8. Cookies
Brand Surface uses browser storage (localStorage) to preserve your in-progress discovery session if your browser closes or refreshes. This is not a tracking cookie; nothing is sent to us. We do not use third-party analytics or advertising cookies.
9. Children
Brand Surface is not intended for anyone under 18. We do not knowingly collect information from children. If you believe a child has provided us information, email us and we will delete it.
10. Changes to this policy
We may update this policy. If we make material changes, we will update the date at the top and, where appropriate, notify you by email.
11. Contact
Questions about this policy or your data: hello@brandsurface.xyz.