Privacy Policy

Effective date: April 18, 2026

Who Operates VBB

Visual Brand Blueprint (“VBB”) is operated by GENAI UNPLUGGED LLC (Pennsylvania, USA), the sole operator and sole data controller for this product. This product-specific privacy policy supplements the GenAI Unplugged master Privacy Policy, which covers your broader privacy rights (including CCPA and GDPR), data-security practices, children’s privacy, and policy changes. In the event of a conflict between this product policy and the master Privacy Policy, the master Privacy Policy controls.

Co-Brand Note

VBB is promoted in collaboration with AI Meets Girlboss as a marketing/traffic partner only. AI Meets Girlboss does not receive your purchase data, intake answers, screenshots, Substack URL, scraped content, or Blueprint PDF. All customer data is held and processed solely by GENAI UNPLUGGED LLC and the processors listed below.

What We Collect, and Why

Purchase metadata(customer email, Gumroad order ID, tier, amount) — received from Gumroad's webhook. Used to issue your access email and match your intake to your order.
Access token(generated by us, one-time, 30-day expiry) — used to authenticate you when you click the access link or paste your email plus backup code.
Intake form answers(brand context, visual don’ts, references, Substack URL) — used as input to the AI analysis.
Uploaded screenshots— used as visual input to the AI analysis.
Scraped Substack page content— we fetch the public Substack URL you submit via standard HTTP; no user data is sent to Substack. Used as context for the AI analysis.
Generated Blueprint PDF— the deliverable we produce and email back to you. Stored for re-delivery and support.
Support correspondence— when you email support, we retain the thread for resolution and recordkeeping.

How We Use It

To grant you access to the intake form after purchase.
To generate your Blueprint via Google Gemini and deliver the PDF to your email.
To provide support, issue refunds, apply Light → Pro upgrade credits, and re-send your Blueprint if requested.
To meet our legal, tax, and accounting obligations. We do not sell your data, and we do not share it for advertising.

Third-Party Processors

The following processors handle VBB data on our behalf:

Processor	Purpose	Data sent	Retention
Gumroad	Payment processing & purchase webhook	Customer email, order ID, tier, amount, billing metadata	Per Gumroad's policy
Google Gemini (via Google Cloud)	AI analysis of your inputs	Intake form answers, scraped Substack content, uploaded screenshots	Per Google's Gemini API data-handling policy
Google Sheets (Workspace)	Storage for purchase tokens and intake form rows	Email, order ID, token, intake answers, Substack URL	Indefinite (deletable on request)
Google Drive (Workspace)	Storage for generated Blueprint PDFs	The PDF file itself	Indefinite (deletable on request)
Gmail (Workspace)	Transactional email delivery	Your email address; access link; Blueprint PDF attachment or link	Retained in our Gmail sent folder for support
Substack	URL scrape target only	Public HTTP request to your submitted Substack URL; no user data is sent to Substack	N/A (read-only fetch)
Oracle Cloud	Hosting for the VBB Next.js app, nginx, and process manager	Request logs, form payloads in transit	Standard infrastructure logs

Each processor acts under its own privacy policy in addition to ours.

Cookies & Sessions

VBB uses a single essential cookie, vbb_session, set after you authenticate with your access link or access code. It is HTTP-only, Secure, SameSite=Lax, and expires after 30 days. It is strictly necessary to keep you signed in while you complete the intake and does not require consent. VBB does not run analytics, advertising, or cross-site tracking cookies.

Retention

Access token: single-use; expires 30 days after issuance.
vbb_session cookie: 30 days.
Intake form data (Google Sheets): retained indefinitely so we can re-issue your Blueprint and provide support. Deletable on request.
Blueprint PDF (Google Drive): retained indefinitely for re-delivery. Deletable on request.
Purchase records: retained as required for tax and accounting purposes (generally several years).
Support email threads: retained as long as needed to resolve the inquiry and for recordkeeping.

To request deletion of your intake row, your Blueprint PDF, or any other VBB data we hold about you, email [email protected].

International Transfers

GENAI UNPLUGGED LLC is based in Pennsylvania, USA, and VBB is hosted in the United States. If you access VBB from outside the U.S., your data will be transferred to and processed in the U.S. and other countries where our processors (Google, Gumroad, Oracle Cloud) operate. See the master Privacy Policy for details on international transfers.

Your Rights

Your privacy rights — including access, correction, deletion, and, where applicable, rights under CCPA and GDPR — are set out in the master Privacy Policy. To exercise them for VBB data, email [email protected] with your Gumroad order ID so we can locate your records.

Conflict Clause

This product-specific policy sits on top of the master Privacy Policy. Anything not addressed here is governed by the master Privacy Policy. Where a provision here appears to conflict with the master Privacy Policy, the master Privacy Policy controls.

Effective Date

This product-specific privacy policy is effective April 18, 2026.