Security & privacy
Where your data lives, who processes it and what you decide yourself at any time – no small print.
Version: October 2026
- Servers in Germany (Hetzner)
- Built to the requirements of the GDPR
- DPA online
- No tracking cookies on client websites
- Fonts hosted locally
Hosted in Germany
Brand Dad runs on servers of Hetzner Online GmbH in Germany. The database and our clients' websites live there too.
- Data center in Germany (EU)
- Backups also at Hetzner
- Encrypted connections (HTTPS) on every page
To be clear: these services are added on top
For AI text and images we send only the content a task needs via OpenRouter to models from providers such as OpenAI, Anthropic or Google. Payments are handled by Paddle. The details are in the privacy policy.
Client websites without tracking cookies
Websites you build with Brand Dad set no tracking cookies and load no Google Analytics, pixels or third-party trackers. The built-in statistics count without cookies and without storing IP addresses, and respect “Do Not Track”.
- Visitor statistics without any cookies
- Google Maps as a link, not embedded
- Legal text template for your website included
Fonts hosted locally
Every font of the website, the app and client websites is served from our own servers. There are no requests to Google Fonts.
Data export and deletion
You can delete your account yourself at any time in the settings. Website statistics export as CSV. We send you a full copy of your data (Art. 15 and 20 GDPR) by email on request. Your domain belongs to you and can be moved.
Data processing agreement (DPA)
If you process your customers' data with Brand Dad, such as inquiries, bookings or reviews, our DPA under Art. 28 GDPR applies – including technical and organizational measures and the list of all sub-processors. It becomes part of the contract when you accept the Terms of Service; you can print it or save it as a PDF at any time.
You stay in control of the AI
Brand Dad writes suggestions. You decide what gets published in your name.
- Review replies: The AI writes a suggested reply. It only goes live when you click “Publish reply” and confirm. There are no automatic replies.
- Social media posts: Autopilot plans the month and writes drafts. Only what you approve gets published – one by one or several at once.
- Brand Dad assistant: The assistant cannot publish posts or review replies on its own. It shows you an approval card, and you make the click.
- SEO articles: New articles arrive as drafts for review by default. They are only published automatically if you switch that on yourself.
Works with your existing website
You don't have to rebuild anything. These modules run without a Brand Dad website:
- Google Maps & reviews – from Local: Ranking map, Google profile, profile protection and reviews run through your Google profile. You don't need a Brand Dad website for that.
- Social media – from Business: The social media planner connects your channels directly. It works without any website at all.
- SEO analysis of your domain: The site audit (from Website) checks any domain, including WordPress, Wix or Squarespace. Rank tracker, keyword research and domain check (Pro, Agency) work with your existing domain too.
- No rebuild needed: Enter your domain and connect your Google profile with Google sign-in. Your website stays where it is. SEO articles can be published straight to an existing WordPress site.