Privacy Policy
Brushfactory ("Brushfactory," "we," "our," or "us") is committed to protecting your privacy. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you access or use our website and conversion tools (collectively, the "Service"). By using the Service, you consent to the practices described in this Policy.
1. Information we collect
We collect the following categories of information in connection with your use of the Service:
- Account information. When you create an account, we collect your email address and a password, which is stored in hashed form. If provided, we also collect a display or studio name.
- Usage data. We collect basic operational metrics, such as the number of conversions performed, in order to enforce plan limits and maintain the performance and integrity of the Service. We do not log the contents of uploaded files.
- Payment information. If you subscribe to a paid plan, payment card details are collected and processed directly by our third-party payment processor. We do not receive or store full payment card numbers; we retain only limited transaction records necessary for billing.
- Communications. If you contact us for support or elect to receive product communications, we retain the associated correspondence and preferences.
2. Handling of uploaded files
When you upload a brush file (including, for example, .sut, .abr, .brush, .kpp, or .procreate files) or a reference image to the Service:
- The file is processed solely for the purpose of performing the requested format conversion or brush generation.
- Uploaded files and their generated outputs are deleted from our servers promptly upon completion or failure of the conversion process and are not retained thereafter.
- We do not use uploaded files, brushes, or images to develop or train machine-learning models.
- Files are transmitted over an encrypted connection and are not disclosed to other users.
3. Use of information
We use the information we collect to operate, maintain, and secure your account and the Service; to perform and improve the conversion functionality; to enforce plan and usage limits; to process payments; to respond to support requests; and, where you have opted in, to send product communications. We do not use your information for third-party advertising, and we do not sell your personal information.
4. Disclosure to third parties
We engage a limited number of third-party service providers to operate the Service, which may include cloud hosting, database, email, and payment processing providers. We disclose only the information necessary for these providers to perform their functions on our behalf, and we require them to protect it. We may also disclose information where required to comply with applicable law, legal process, or enforceable governmental request, or to protect the rights, property, or safety of Brushfactory, our users, or others. We do not sell personal information to advertisers or data brokers.
6. Data retention
Uploaded files are deleted promptly following conversion, as described in Section 2. Account information is retained for as long as your account remains active. Following account deletion, we remove your personal information within thirty (30) days, except where retention is required to comply with legal, tax, or accounting obligations.
7. Your rights
You may access, correct, export, or delete your personal information at any time. Depending on your jurisdiction, you may have additional rights under applicable data protection laws, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA/CPRA), such as the right to request access to, correction of, or deletion of your personal information, and the right to object to certain processing. To exercise these rights, contact us at hello@brushfactory.co. We will not discriminate against you for exercising any of these rights.
8. Security
We implement administrative, technical, and organizational measures designed to protect personal information, including encryption in transit, hashed password storage, and access controls. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. In the event of a data breach affecting your personal information, we will provide notice as required by applicable law.
9. Children's privacy
The Service is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If we become aware that we have collected such information, we will delete it. If you believe a child has provided us with personal information, please contact us.
10. International users
The Service is operated from the United States. If you access the Service from outside the United States, you understand that your information may be transferred to, stored in, and processed in the United States, where data protection laws may differ from those in your jurisdiction.
11. Changes to this Policy
We may update this Privacy Policy from time to time. If we make material changes, we will revise the Effective Date above and, where appropriate, provide notice by email or through the Service. Your continued use of the Service after an updated Policy takes effect constitutes your acceptance of the revised Policy.
12. Contact information
If you have questions or requests regarding this Privacy Policy, or if you wish to access, correct, or delete your personal information, please contact us at hello@brushfactory.co. We will respond within a reasonable timeframe and as required by applicable law.