This page is not in force yet. It is published here so it can be read and corrected before it becomes the policy. Nothing on it is a commitment until it carries a date.
Privacy
What we keep, where it goes, and what you can do about it.
The short version
You talk to BrandRamen about your business. We keep what you say so you can come back to it, and we send it to an AI model so it can answer you. We picked the model provider on the condition that they do not train on it and do not keep it.
We do not sell what you tell us. We do not share it with other founders. If we ever want to use it for anything beyond building your brand, we will ask you first, and you can say no.
That is the whole promise. The rest of this page is the detail behind it.
Who we are
BrandRamen is a brand workshop for founders, run from Singapore. It is operated by Killjoy Design Pte. Ltd., a company registered in Singapore, which is the data controller for everything described on this page.
Registration number (UEN) 201935262Z. Registered address 25 Hillview Avenue #03-01, Glendale Park, Singapore 669558. Incorporated 21 October 2019.
Contact: letscook@brandramen.com
What we collect
Everything below is a real field in the product. Nothing here is a placeholder.
When you join the waitlist
Your email address
To tell you when BrandRamen opens
A short source label
To know which page you came from
The date you joined
To work through the list in order
That is all of it. No name, no company, no tracking pixel in the form. If you sign up twice the form gives you the same answer both times, so it can never be used to check whether an address is already on the list.
When you have an account
Your email address
It is how you sign in. There is no password
Your first name, if you give it
So the product can talk to you like a person
Your language preference
To show you the right version
When you use the workshop
Every message you send and every reply you get back
So you can leave and come back to the same conversation
Your brand's name and business type
To build the Brand on a Page
Phrases you used that sound like you
The workshop feeds your own words back into your voice, instead of inventing a voice for you
The confirmed output of each module
It is your Brand on a Page
Edits you make, including the previous wording
So a change can be undone, and so we can see what the product got wrong
Your workshop messages are your business thinking. We treat them that way.
Analytics, and cookies
We run no analytics and we set no tracking cookies. The only cookie is the one that keeps you signed in. There is no cookie banner on this site because there is nothing to consent to.
Where it goes: the AI model
The workshop is a conversation with an AI model. To answer you, your messages have to be sent to the company that runs it. That is the most important sentence on this page, so we are not going to bury it in a list of service providers.
We reach the model through OpenRouter, which routes the request to whichever company is hosting it. The default model is DeepSeek v4-pro. The backup, used only when the first one errors, is Anthropic’s Claude Sonnet.
The request carries two conditions. Do not train on it: hosts that collect prompts for training are excluded. Do not keep it: only hosts that operate zero data retention are allowed. If no host can meet both, the request fails and you see an error. It does not quietly go somewhere that would keep your words. That is a rule in the code, not a preference.
Our OpenRouter account is separately set up so that our own traffic is not used for training. Zero data retention is a contractual promise by companies we do not control. We enforce the routing condition, which is what we can enforce. We cannot audit their servers, and we are not going to claim more certainty than that.
Where it goes: everything else
Supabase
The database. Your account, brands, workshop messages, outputs. Singapore
Vercel
Runs the website and the app. Global edge network
Resend, sending through Amazon SES
Your sign-in code emails. Tokyo, Japan
Your sign-in emails are sent from noreply@contact.brandramen.io and pass through servers in Japan on the way to you. We are naming that because "we may transfer data internationally" tells you nothing, and this tells you something. We do not sell your personal data. We never have, and there is no arrangement under which anyone could buy it.
How you sign in
There is no password. You type your email address, we email you a six digit code, you type the code back. The code is checked in the app itself, so there is no link in the email to click.
This means your email address is not just contact detail, it is the key to your account. Anyone who can read your email can get into your BrandRamen account. Worth knowing.
Sharing a brand publicly
You can publish a Brand on a Page at its own web address. It is the one action that makes your work readable by strangers, so it is worth understanding.
Anyone holding that address can read that brand. No account, no sign in. The address contains a long random slug, so it cannot be guessed and it cannot be listed, and nobody can ask our system for a list of shared brands. But a link is a link: if it is forwarded, posted or indexed, whoever has it can read the page.
The public page shows the brand name, the business type and the confirmed module outputs. It does not show your email address, your name, your account, any of your workshop conversation, or any brand you have not confirmed.
To take it down, revoke the share link. Deleting the brand also takes the page offline immediately. Archiving a brand does not, and an archived brand with a live share link stays readable. That is deliberate, but it surprises people, so we are saying it here.
How long we keep things
A retention period is the answer to "how long do you keep this before you get rid of it?" We are publishing only the periods that are true today, rather than numbers that sound reassuring and that no code enforces.
Account and brands, while open
Kept until you delete them or close your account
Workshop messages
The same life as their brand. They are the brand
Waitlist entries
Until you join, or until you ask to come off
Sign-in emails and auth logs
Supabase's retention, not a period we chose
What "delete" currently means
This has to be said plainly, because most privacy policies are vague about it.
When you delete a brand, the product marks it deleted and hides it from every screen. The data stays in the database. It is not overwritten and it is not purged. It is a soft delete, which is what lets the product offer you an undo.
We are not going to describe that as deletion, because it is not. Removing your data properly on request is a product change we have not built yet. Until we have, if you want something actually gone, email us and we will do it by hand.
Your choices
See what we hold: ask, and we will tell you. Correct it: your name, your email, your language. Take your brand with you: you can download your Brand on a Page, and it is yours. Unshare: revoke any share link at any time. Come off the waitlist: one email does it. Close your account: see the honest note about deletion above.
Email letscook@brandramen.com. We reply within 30 days.
Finding patterns across brands
The product has fields on every founder record for consent to a future data product. None of it is switched on. Nothing has been aggregated, nothing has been analysed across founders, and no consent has been collected through it.
We are describing it here for one reason: the fields exist, so anyone reading about the database deserves to know what they are for. If we ever want to use what you built to find patterns across brands, we will ask you first, and you can say no without losing anything.
Which law applies
BrandRamen is run from Singapore, so Singapore's Personal Data Protection Act 2012 is the baseline. The product ships in Japanese and sends sign-in mail through Tokyo, so Japan's Act on the Protection of Personal Information is in play. If you are in the EU or the UK, the GDPR is likely to apply to you.
Whichever of those covers you, the things you can ask us for are in "Your choices" above, and the address is the same one.
Age
You must be 18 or older to use BrandRamen. It is a tool for people running a business. We do not knowingly collect personal data from anyone under 18, and if we learn that we have, we delete it.
If something goes wrong
If personal data is exposed, we will tell the people affected and the relevant regulator within the time the law requires. We will tell you what happened, what of yours was involved, and what we have done about it, in plain language. We would rather tell you something uncomfortable than tell you nothing.
Changes
If we change this page we will update it and change the date. If a change matters to you, we will email you rather than hoping you check.
Not yet in force
Back to BrandRamen