Privacy Policy

1. What this policy covers

This policy describes information handled by the Branch website and shared AI workspace. It does not cover independent websites, AI providers, repositories, or media services you choose to connect or visit. Their policies apply to their own processing.

2. Information the service handles

• Account and profile information: your chosen name, username or account identifier, authentication records, and profile settings you provide.
• Workspace content: board titles, notes, prompts, AI responses, code, files, links, project plans, and context you add or generate.
• Collaboration information: team and board memberships, roles, invitations, edit activity, and temporary presence or cursor information used to show teammates working together.
• Connected-service information: account identifiers, permissions, selected models, repository metadata, and authorization tokens required for integrations you enable.
• Technical information: request and error information, service usage, browser or device details, and network information such as IP addresses processed when you connect to the service.

Information comes from you, collaborators who add or share it, connected services you authorize, and the operation of the website and its infrastructure.

3. Why information is used

Branch processes information to sign you in, save and synchronize work, enforce access permissions, show collaboration activity, generate AI responses, support integrations, troubleshoot problems, prevent abuse, and operate the service. Profile and browser preferences help keep your experience consistent.

4. Who can receive information

Collaborators: people with access to a board or workspace can see content allowed by their role. Sharing links and invitations can expand that audience. Review membership and link access before adding private information.

Infrastructure providers: the current service uses Cloudflare for hosting and request processing and Supabase for database and storage infrastructure. These providers process information needed to operate those services.

AI providers: AI features send relevant prompts, conversation history, selected files or connected context, and request metadata to OpenAI or an enabled provider connection. Attaching a source to a conversation can make it part of that request. Provider-specific retention and data-use terms apply; do not assume every connection has identical policies.

Other integrations: repositories, embedded videos, external images, and linked services may receive requests or information when you connect to or load them. Their operators may collect technical information independently.

Operational or legal access: authorized operators may access information when needed for support, security, service maintenance, or applicable legal obligations. We may disclose information when required by law or to protect users and the service.

5. Browser storage and tracking

Branch uses browser storage and session mechanisms for sign-in, workspace state, and preferences such as appearance, footer darkness, and onboarding. Clearing browser storage can reset these preferences or sign you out. The landing-page background and footer interactions run locally and do not themselves send tracking requests.

This version of the landing page does not include third-party advertising pixels. External services you open or embed can have their own cookies and tracking practices. Branch does not currently provide a separate response to a browser’s Do Not Track signal.

6. Retention and deletion

Workspace information is retained to provide the service and maintain shared work. Removing a card from a board can mark it as deleted without immediately erasing the underlying record. Deleting or archiving content in the interface should not be treated as a promise of immediate permanent deletion from every database, log, backup, or third-party system.

Some information may need to be kept for security, dispute resolution, or legal obligations. Copies held by collaborators and independent providers are outside Branch’s direct control. A fixed retention schedule and dedicated account-deletion request channel have not yet been finalized for this early-access release.

7. Your choices

You can edit available profile settings, manage content within your permissions, review board sharing, revoke supported sharing links, and disconnect supported integrations. Depending on where you live and which laws apply, you may have rights to access, correct, delete, or obtain a copy of personal information, or restrict certain processing. We may need to verify your identity and authority before acting on a request.

A public privacy inbox is not yet available. During early access, contact the Branch team through your existing invitation or direct conversation to raise a privacy question or request. Do not post sensitive information in public. We will add a verified contact method here when it is established.

8. Security and international processing

The service uses authentication and access controls to limit access to workspace information. No system can guarantee complete security. Avoid uploading secrets or information that the service is not appropriate to handle, and check permissions before sharing.

Service providers may process information in countries other than your own. Applicable protections and provider arrangements can differ by location; this policy does not promise storage in a particular country.

9. Children and updates

Branch is not designed for children under 13. If you believe a child has provided personal information without appropriate permission, raise this with the Branch team through the contact route described above. We will update this page as the product and its information practices change and provide additional notice where required.