Privacy Policy
Last updated June 29, 2026
This privacy policy explains how we process personal data in connection with the BrushLedger service. We comply with the Swiss Federal Act on Data Protection (FADP). The controller for the processing is Marco Berger, Talgut 425, 3123 Belp, Schweiz (E-Mail: info@brushledger.com).
1. Controller
The controller responsible for processing personal data within the meaning of the FADP is:
Marco Berger, Talgut 425, 3123 Belp, Schweiz.
For data protection enquiries you can reach us at info@brushledger.com.
2. Principles
We process personal data in accordance with the principles of good faith, proportionality and purpose limitation. We collect only the data we need to operate the Service and perform the contract.
3. Data We Process
Account data: the email address and login information you provide when registering.
Content data: the content you enter such as artworks, projects, images, colours, materials, customers and exhibitions, including uploaded photos.
Profile and settings data: artist name, preferred language, currency and other preferences.
Payment data: billing information processed as part of a paid subscription (see Section 6); card details are stored exclusively with the payment service provider, not with us.
Technical data: data arising from use, such as IP address, time of access and technical log data to ensure secure operation.
4. Purpose of Processing
We process your data to provide and operate the Service, manage your account, bill the subscription, communicate with you, ensure security and meet our legal obligations.
5. Cookies and Local Storage
We do not use tracking or advertising cookies. Information required for operation (e.g. your login) is processed through technically necessary mechanisms.
Your language setting is stored locally in your browser (localStorage) so that the Service appears in your preferred language. This information does not leave your device.
6. Processors and Third-Party Services
To operate the Service we use carefully selected providers that process data on our behalf:
Hosting and infrastructure: Vercel Inc. (Hosting, USA) und Supabase Inc. (Datenbank/Auth).
Supabase (database, authentication and file storage): stores your account and content data as well as uploaded images.
Google Maps / Places (Google Ireland Ltd.): used for address search and map display. Inputs and location data are transmitted to Google.
Anthropic (Claude API): when you use the "Atelier Master", the texts and images submitted for that purpose are transmitted to Anthropic to generate the feedback.
Payment service provider: Stripe Payments Europe Ltd. (Irland) processes subscription payments and stores the payment data.
These providers may be based abroad (in particular the EU/EEA and the USA). Disclosure abroad takes place only where adequate data protection is ensured, for instance through recognised standard contractual clauses or adequate protection in the recipient country.
7. Retention
We retain personal data only for as long as necessary for the stated purposes or as required by law. After termination of the contract, your data is deleted or anonymised after a reasonable period, unless retention obligations apply.
8. Data Security
We take appropriate technical and organisational measures to protect your data against unauthorised access, loss or misuse, in particular through encrypted transmission and access controls. However, absolute security cannot be guaranteed for data transmission over the internet.
9. Your Rights
Within the scope of applicable law you have, in particular, the right to information about the data processed about you, as well as the right to rectification, deletion or release of your data.
You can delete your account yourself at any time in the settings under "Danger zone". This irreversibly removes your account and all associated content, profile and settings data and cancels any active subscription; statutory retention obligations (e.g. for billing data) remain reserved.
To exercise your rights, contact info@brushledger.com. We may request suitable proof to verify your identity.
You also have the right to lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC).
10. Changes to this Privacy Policy
We may amend this privacy policy at any time to reflect changes in the legal situation or in the Service. The version published on this page at the relevant time applies.