Privacy Policy

Last updated: 10 July 2026

The Shadow Legacy, operated by Vanja Stojanović, is the data controller for the Living Brand Portal. Contact hello@theshadowlegacy.com with privacy questions or requests.

Data we process

• Account and authentication email addresses.
• Client reviewer email addresses. When a reviewer verifies their email, the Portal explicitly creates a reviewer account for current and future reviews.
• Uploaded brand assets, documents, intake responses, and extracted brand information.
• AI generation traces, prompts, outputs, model metadata, approvals, edits, rejections, and related audit events.
• Encrypted OAuth access and refresh tokens for connected social platforms and Figma.
• Operational security, error, and performance logs.

Why we process it

We process data to provide and secure the Portal, manage accounts and workspaces, generate and review brand materials, operate requested integrations, support users, and meet legal obligations.

Processors

We use Supabase, Vercel, Anthropic, OpenAI, fal.ai, Trigger.dev, Sentry, and PostHog as service providers where their relevant features are enabled. Some providers may process data outside the EEA under their applicable transfer safeguards.

Retention and security

We retain data while an account or client engagement is active and as needed for security, backups, disputes, and legal compliance. Access is workspace-scoped; sensitive integration tokens are encrypted.

Your rights

People in the EEA may request access, correction, deletion, restriction, portability, or object to processing, and may complain to their data-protection authority. Email hello@theshadowlegacy.com. We may need to verify your identity.

Cookies and analytics

The Portal uses essential authentication and interface-preference cookies. PostHog is not currently initialized in the application, so no PostHog analytics cookies or client-side tracking run. If analytics is enabled later, this policy and the consent mechanism will be reviewed first.

Changes

We may update this policy and will publish the revised date here.