← Back to Brand Standard

Privacy

Last updated 12 October 2026

Brand Standard holds your brand, not your customers. This page says exactly what we collect, where it sits, and who else can touch it.

Who we are

Brand Standard is built and run by Becoming Design Office Ltd., a design studio in Victoria, British Columbia. We are the organisation responsible for the information described here.

What we collect

Your account

Your name and email address, and which brand hubs you have access to. Your password is handled by our authentication provider and stored only as a salted hash — we never see it and cannot recover it.

What you put in your hub

The brand material you or your designer upload: logo files, colour values, typeface specimens and links, photography, guideline documents, and the written sections of your guide. This is your material. We hold it so your team can reach it.

A record of changes

When something in a hub is uploaded, edited, or when someone's access changes, we record what happened, who did it, and when. This is so the people responsible for a brand can see how it got to its current state.

If you contact us

The form on our homepage collects your name, email, organisation, and whatever you write. It goes to our inbox so we can reply. Nothing more.

Visit counts

We count visits to this site with Vercel Web Analytics. It records which page was viewed, the site or link the visit came from (including any utm_ tags on a link we sent), the visitor's country, and their browser and device type. It uses no cookies and does not follow you from one site to another or build a profile of you. We do not use it to identify individual people.

We also keep our own daily tally of visits: a count per day of how many visits came from each source (a link's utm_source tag, the name of the site that linked here, or "direct"). It stores nothing else about you — no cookies, no IP address, no device details.

What we do not collect

No advertising or marketing trackers. No tracking pixels. No profiling, no behavioural tracking, and nothing is sold or shared for anyone else's marketing.

Cookies

This marketing site sets no cookies at all.

The application at brandstandard.ca/app sets sign-in cookies (from our authentication provider) that keep you signed in for up to 400 days, or until you sign out. A long session may be split across more than one cookie, and signing in by email link adds a short-lived helper cookie. They are strictly necessary for the service to function — without them you could not stay logged in.

Because there is nothing optional to accept, there is no cookie banner. A consent prompt where the only answer is "yes, keep me logged in" would be theatre rather than a choice.

Where it is stored

Your data is held in Canada — specifically Montreal, in the AWS ca-central-1 region, through our database and storage provider. Data is encrypted in transit; the site and application are served over HTTPS only.

Who else touches it

We use a small number of service providers to run Brand Standard. They process data on our instructions and for no other purpose.

ProviderWhat forWhere
SupabaseDatabase, sign-in, and file storageCanada (Montreal)
VercelServing the site and applicationGlobal edge network
ResendSending invitations and contact-form emailUnited States
Google FontsServing the typefaces used on this site (your browser fetches them from Google, which sees your IP address and browser)United States
AnthropicReading and tagging brand material — see belowUnited States

How we use Anthropic

Brand Standard uses Anthropic's Claude to do the sorting and reading that would otherwise be done by hand. Four features send your material to Anthropic's API, and they run automatically, including from a scheduled job that runs daily, without anyone pressing a button each time:

Everything these features produce can be entered or changed by hand. There is not yet a setting in the application that turns them off for a single hub. If you would prefer your material never be sent to an AI provider, tell us before you add it and we will make arrangements with you directly.

How long we keep it

For as long as your brand hub is active. When a hub is deleted, its records and its uploaded files are removed from our database and storage. If you want your material removed before then, ask us and we will do it.

Your rights

Under Canadian privacy law (PIPEDA) you can ask us what we hold about you, ask us to correct it, ask for a copy, or ask us to delete it. Write to us and we will respond within thirty days. We will not charge you for it and we will not make the service worse for you because you asked.

Security, stated plainly

Access to a hub is restricted to people invited to it, and every request is checked on our servers rather than merely hidden in the interface. One client cannot reach another's brand. Passwords are hashed by our authentication provider. Connections are encrypted.

We do not hold SOC 2, ISO 27001, or any comparable certification, and we will not imply otherwise. If your organisation requires one, tell us early and we will have an honest conversation about it rather than a vague one.

Changes

If we change this policy we will update the date at the top. If a change materially affects how your information is handled, we will tell the people responsible for the affected hubs directly rather than expecting anyone to re-read this page.

Contact

Email ross@brandstandard.ca, or use the form on our homepage. Both reach a person.