Privacy Policy

1. Who handles your information

Cchora Studio LTD operates Brandguide IO at KMA Centre, 5th Floor, Mara Road, Upperhill, Nairobi, Kenya. Contact hey@cchora.com for privacy questions or requests. This notice covers our website, account services, brand portals, payments and optional AI imports.

We determine how account, billing, support and security information is used to operate the service. Workspace owners decide which personal information they upload, whom to invite and what to publish. We process hosted workspace content to deliver those instructions; owners remain responsible for the authority to supply and share it. If an organisation manages your workspace, contact it about its content and permissions as well as contacting us.

2. Information we process

Account information includes your name, email address, brand or studio name, password hash, verification state, and optional phone and backup email. Security features use session records, verification challenges and, if enabled, protected authenticator credentials and recovery-code records. We do not store your readable password.

Workspace information includes brand names, guidelines, uploaded files and filenames, categories, invitations, member roles, review history, sharing settings, notifications and feature requests. Support information includes messages and details you choose to send us.

Billing information includes your plan, currency, amount, provider references, subscription status, payment history and receipt details. Checkout providers collect payment details on their own pages. We do not collect or store full card numbers or card security codes in the application.

Technical information may include IP addresses, browser or device information, request times, authentication events and operational logs used by the service and its hosting/security providers. Optional Analytics data is described in the Cookie Policy.

3. Why we use it

We use account and workspace information to provide the service you request, manage permissions and sharing, deliver files, process billing and respond to support requests. Contractual necessity is the basis where that processing is needed to deliver your subscription or requested service.

We use proportionate security, fraud-prevention and diagnostic information for legitimate service and security interests, and retain or disclose records where required by applicable law. Where consent is the basis, including optional analytics, you may withdraw it. Withdrawal does not undo processing that already occurred. We do not use your uploaded content to train our own AI models or sell it for advertising.

4. Providers and sharing

Hostinger supports hosting and transactional email infrastructure; Cloudflare R2 supports file storage, and Cloudflare Turnstile supports form security. PayPal, and Paystack where enabled, handle payment processing. OpenAI receives documents only for the optional import described below. CookieYes manages cookie consent preferences. Google Analytics is loaded only after the relevant cookie choice.

These providers receive information needed for their service and may also process security, billing or compliance information under their own terms. Authorised team members receive access according to workspace roles. Public portals and public sharing links expose the published content you choose to share; anyone with access may retain a copy.

We may disclose information when required by law, to respond to valid legal requests, resolve payment disputes, or protect people and the service. We limit disclosures to what is relevant to the purpose.

5. Optional AI processing of guidelines

When an eligible user confirms an AI import, the selected PDF, PPT or PPTX document and its filename are sent to OpenAI through its API to produce a draft of guidelines and colours. This can include any personal or confidential information inside the document. Remove unnecessary information and obtain the relevant permissions before uploading. You can use the portal without AI import.

The original import file is processed for that request and is not saved as a normal asset by the importer. We keep an import record and generated draft for review. Content you choose to apply becomes part of the saved brand guidelines. Review the draft before applying it; AI output is not guaranteed accurate.

We request that the API response is not saved as a stored response. This is not a promise of zero retention by OpenAI: its applicable security, abuse-monitoring and legal retention rules may still apply. See OpenAI’s privacy information. Do not use the import if you are not authorised to send the document to this provider.

6. Processing outside Kenya

Hosting, storage, email, payment, security and AI providers may process information outside Kenya. Provider locations and processing arrangements can vary. We are responsible for using a lawful transfer basis and applicable safeguards for our processing; this notice is not a blanket waiver of your rights. Contact us for information about the arrangements relevant to your data before uploading material with location restrictions.

7. Retention, cancellation and deletion

Account details and workspace content remain while your account is open. Cancelling a subscription stops renewal but does not delete this information. There is no automatic purge solely because paid access expires; you can request deletion or use the separate Delete account and data action.

Confirmed account deletion removes active profile and security records, revokes sessions and removes owned workspaces. It also removes your memberships without deleting another owner’s workspace. External file deletion is queued and retried when necessary; the files become inaccessible through the account before storage cleanup finishes.

Subscription references, transaction history and issued receipts remain for financial reconciliation, disputes, fraud prevention and applicable legal obligations. A receipt may retain the name and email recorded when it was issued even after the account is removed. These financial records do not have an automatic deletion date in the current service. Contact us for a retention or erasure review; we will explain any records that must remain and why.

Login and signup sessions expire within seven days. Recovery tokens and security challenges have shorter validity periods; expired records are cleaned by scheduled maintenance. Unapplied AI import records are eligible for cleanup after seven days and are removed when import history is next accessed; applied guidelines remain until edited or deleted. Hosting logs, backups and provider-held records can follow separate retention schedules and are not necessarily erased immediately by an account deletion request. Contact us for details or an erasure request covering those records.

8. Your choices and rights

You can update supported profile details, manage invitations and sharing, download files, and cancel subscriptions through your account. Use Cookie settings to reject or withdraw optional analytics. To request access, correction, objection, restriction, portability or erasure where applicable, contact hey@cchora.com. We may need proportionate verification before disclosing or changing information.

If we cannot fulfil all of a request, we will explain the reason, including any legal record-keeping requirements or effects on another person’s rights. You can raise a concern with Kenya’s Office of the Data Protection Commissioner or another competent authority.

9. Security, children and updates

We use access controls, protected credentials and secure transport to reduce risk, but no online service is risk-free. Protect your login and recovery codes, use the available security settings and keep copies of critical files. Notify hey@cchora.com if you suspect a security incident.

The service is intended for adult business users and is not directed at children. Do not upload children’s personal information without appropriate authority and safeguards. Contact us if you believe it has been supplied improperly.

We will update this notice when our processing changes. The date above identifies this version. Material new purposes that require consent will not rely solely on your earlier consent.