Privacy Policy

How Nitti AI AB handles information collected through Braaand.

Protecting your privacy is important to us. Accordingly, we're providing this Privacy Policy to explain how Nitti AI AB (“Nitti AI,” “we,” “us,” or “our”) collects, uses, shares, and protects information when you use Braaand, our collaborative design and brand platform, including our website, platform, applications, and related services, collectively referred to as the “Services.”

Braaand is a product provided by Nitti AI AB. This Privacy Policy applies to Braaand and does not apply to third-party websites, services, or applications that we do not control, even if they are accessible through our Services.

If you use Braaand through an organisation, such as your employer, client, or team, that organisation may control certain data associated with your account and workspace.

Information We Collect

We collect information that you provide directly to us, information generated when you use the Services, and information processed through our service providers.

This may include your name, email address, profile information, organisation, login information, workspace membership, project activity, comments, files, design assets, technical logs, IP address, device information, browser information, support requests, and other information you choose to provide through the Services.

If you purchase a paid plan, we and our payment processor also collect billing information needed to complete and manage the transaction. This may include billing name, billing address, country, tax identifiers where required, the last four digits and brand of the card used, subscription status, plan history, and invoices. Full card numbers and security codes are handled directly by our payment processor and are not stored by Braaand.

When you or your organisation use AI features, we record metadata about each call, such as the model used, token counts, the AI credits charged, and the brand or workspace the call was made on behalf of. This usage data is used to operate the AI features, calculate billing, and prevent abuse.

Braaand may also process content that you or your organisation upload, create, edit, or share through the Services, including brand assets, design files, images, text, comments, project data, and related metadata.

How We Use Information

We use information to provide, operate, maintain, secure, and improve the Services. This includes creating and managing accounts, authenticating users, enabling collaboration, storing and displaying customer content, providing support, communicating with users, analysing product performance, preventing abuse, and complying with legal obligations.

We may also use information to send administrative messages, product updates, security notices, and other communications related to the Services.

Where required by law, we rely on appropriate legal bases for processing personal data, including performance of contract, legitimate interests, legal obligations, and consent.

Customer Content

You and your organisation retain ownership of the content you upload, create, or store in Braaand. We do not claim ownership over your customer content.

We access customer content only as necessary to provide, secure, support, troubleshoot, improve, or maintain the Services, comply with applicable law, enforce our terms, or follow the instructions of the relevant customer organisation.

Sharing of Information

We do not sell personal data.

We may share information with service providers that help us deliver the Services, including hosting, authentication, database infrastructure, payment processing, AI model providers, security, analytics, support, and related operational functions.

We may also share information with the organisation that manages your workspace, with authorities where required by law, or in connection with a merger, acquisition, financing, restructuring, or sale of assets.

Subprocessors

To support delivery of the Services, Nitti AI may use third-party subprocessors that process personal data or customer content on our behalf.

Our current key subprocessors for Braaand include:

  • Vercel Inc. — application hosting, serverless compute, and content delivery.
  • Neon, Inc. — managed Postgres database hosting.
  • Vercel Blob — object storage for uploaded brand assets, renders, and previews.
  • Clerk, Inc. — user authentication, session management, organisation membership, and billing orchestration.
  • Stripe, Inc. — payment processing for subscriptions and any future paid features. Card details are entered into Stripe directly and are not stored by Braaand.
  • OpenAI, L.L.C. — large language and vision models used by the AI features. Prompts, inputs and outputs may be transmitted to OpenAI to generate responses.

We may update our subprocessors from time to time. Where required by law or contract, we will provide appropriate notice of material changes.

International Transfers

Nitti AI is based in Sweden, but some service providers may process information outside Sweden, the EU, or the EEA. Where this occurs, we use appropriate safeguards, such as standard contractual clauses, adequacy decisions, or other lawful transfer mechanisms.

Data Retention

We retain information for as long as necessary to provide the Services, comply with legal obligations, resolve disputes, enforce agreements, maintain security, and support legitimate business purposes.

Customer content is generally retained for as long as the relevant account, workspace, or subscription remains active, unless deleted earlier by the customer or required to be retained by law.

Security

We take reasonable technical and organisational measures to protect information against unauthorised access, loss, misuse, alteration, or disclosure.

These measures may include access controls, encryption, logging, monitoring, backups, and restrictions on employee and service provider access. However, no online service can be guaranteed to be completely secure.

Your Rights

Depending on where you are located and how your personal data is processed, you may have rights to access, correct, delete, restrict, object to, or receive a copy of your personal data. You may also have the right to withdraw consent where processing is based on consent.

If you use Braaand through an organisation, certain requests may need to be handled by that organisation as the controller of your workspace data.

You may also have the right to lodge a complaint with the Swedish Authority for Privacy Protection, Integritetsskyddsmyndigheten, or another competent data protection authority.

Cookies

We may use cookies and similar technologies to operate the Services, authenticate users, remember preferences, improve performance, analyse usage, and support security.

Where required by law, we will ask for consent before using non-essential cookies.

Children

The Services are intended for professional and business use and are not directed to children. We do not knowingly collect personal data from children.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will provide notice through the Services, by email, or by other appropriate means.

Contact

If you have questions about this Privacy Policy or how Braaand handles personal data, please contact Nitti AI AB through the contact information provided on our website.