The short version
- Your brand is never used to train AI models, ours or anyone else’s.
- A brandpad is private to the people you invite. A published guide is public unless you password-protect it.
- AI tools you connect only see the brandpads you give them, and you can disconnect them at any time.
- You can export or delete your data whenever you like.
- A Data Processing Agreement is yours for the asking.
Who can see your brand
Only the people you invite can open a brandpad, and each person’s role sets what they can change. That goes for partners, agencies and freelancers too: invite them to view or to edit.
When you publish a brand guide, anyone with its address can read it. On Brand and Pro you can put a password on it, and on any plan you can unpublish it at any time.
Signing in and paying
You sign in with your email address and a password, a sign-in link sent to your email, or your Google account. Turn on two-factor authentication in Settings, and every sign-in also asks for a code from your phone.
If you pay for a plan, Stripe handles the card. We never see or store your full card number.
AI and your brand
Never used for training
Nothing in your brandpad is used to train AI models: not Stipl’s, and not those of the AI providers we work with.
Stipl’s own AI features
When you ask Stipl to draft a strategy, tag your photos or make a post, the parts of your brand that task needs are sent to an AI provider to do it. Those providers work for us under contract and only process your data to run the feature.
AI tools you connect
Stipl for AI lets tools like Claude, ChatGPT and Cursor read your brand over MCP. They only see the workspace you give them access to, they can only read, and only once you connect them. What those tools do with it is covered by their own terms. You can disconnect a tool at any time.
Who runs Stipl with us
A small number of service providers help us run Stipl: hosting, email delivery, payments and the AI features above. They process your data only to provide their service to us, under contracts that require them to protect it. Who they are, and where they keep your data, is on the privacy page.
Export and delete
You can ask for a copy of your data, or export your brand, at any time. When you delete your account, we delete your content from Stipl, and from our backups as they cycle out. We keep billing records only for as long as tax law requires.
GDPR and a DPA
If you need a Data Processing Agreement for your organisation or your clients, email privacy@stipl.studio and we’ll send one.
You can ask us to see, correct, export or delete your data, or to limit how we use it, and we’ll reply within 30 days. The privacy page has the full detail.
Enterprise and self-hosting
Enterprise plans can run Stipl on your own infrastructure, with custom quotas and service levels agreed with you. Talk to us about what your security team needs.
This website
stipl.studio has no analytics or advertising trackers and serves its own fonts. A logo you load into the demo or the drift games stays in your browser and is never uploaded to us.
Report a problem
If you think you’ve found a security issue, email hello@stipl.studio with what you found and how to reproduce it. Please give us a chance to fix it before telling anyone else. We’ll reply as soon as we can.