Privacy Policy

Last updated: November 9, 2026

This policy explains what personal data we collect when you use the Brand in second website (brandinsecond.com) and the Brand in second extension for Adobe Illustrator, why we collect it, who we share it with, and how you can have it deleted.

Who we are

Brand in second is made and sold by Fares Souissi, an individual based in Tunisia (“we”, “us”). We decide how your data is used. For any question or request about your data, write to contact@brandinsecond.com.

This policy covers:

• the website, its store and your account on it;
• the extension, in its full edition (Brand in second) and its free edition (Brand in second Lite), wherever you got it, including the Adobe Marketplace (Adobe Exchange).

In short

• To use the extension, you sign in with your email address and a 6-digit code we email you.
• The extension sends us a hashed identifier of your computer, its name and system, and the versions of Illustrator and of the extension. We use them to apply the free plan’s limits and the device limit of licenses.
• Your artwork, documents and file names never leave your computer.
• We do not sell your data and we do not use it for advertising.
• You can ask us at any time for a copy of your data or for its deletion.

What we collect and why

Your account

When you sign in from the extension, we email you a 6-digit code. We store the code only as a one-way hash, with a hash of your email address. It works for 15 minutes and for 5 tries, and we delete it once it is used or expired.

The first time you enter a valid code, we create your customer account on the website with your email address. You can also create an account or sign in on the website itself. We use your account to give you your free plan, your trial and your licenses, and to answer your requests.

Orders and payments

When you buy Pro, the store records what you enter at checkout (name, email address, phone number, billing address and country), what you bought, the amount and the payment method you chose. We do not take card payments: you pay by D17, postal account or bank transfer. If you send us a proof of payment by email, we use it only to find your payment.

The store also records how you arrived on the website before ordering (for example the website or campaign that sent you, and the type of device you used), using WooCommerce’s order attribution cookies. This helps us understand which pages lead to sales.

Licenses and devices

Each account has a license key: a free key for Brand in second Lite, and a Pro key if you buy Pro. We store the key encrypted, with your email address and, for Pro, your order.

When the extension signs in, activates a license or checks it, it sends us:

• a device identifier: a one-way hash (SHA-256) of your computer’s system identifier. The original identifier never leaves your computer. If it cannot be read, the extension uses a random identifier stored on your computer instead;
• your computer’s name and operating system (for example “Windows 10.0.26300 (x64)”);
• the versions of Illustrator and of the extension.

We store this for each device, with the date it was first and last seen. We use it to apply the device limit of licenses, to show your devices in My Account so you can deactivate one, and to help you when something does not work.

Free plan limits and trial

Brand in second Lite has a lifetime number of free generations for some tools. Our server counts your generations twice: for your account and for your device (by its hashed identifier only). The higher count applies. This is why reinstalling the extension or making a new account does not reset the free plan. When a generation fails, the extension tells our server and the generation is counted back.

To allow one Pro trial per person, we keep a one-way hash of the email address used for each trial.

Security records

To protect the service against abuse, we limit how many requests can come from one IP address or one license key. For this, we store a hash of the IP address (never the address itself) with a request count, for at most one day.

We keep a log of license events (for example an activation, a deactivation or a revoked key) with the last 4 characters of the key and the device name. We delete each entry after 90 days.

Like most websites, our hosting provider’s servers also keep standard technical logs (IP address, date, page requested, browser) for a limited time, for security and troubleshooting.

Emails we send

We send you the emails the service needs: sign-in codes, order confirmations and payment instructions, and your license key once your payment is confirmed. We do not send newsletters or marketing emails. If we start one, we will ask you first.

Website analytics and cookies

• WordPress and WooCommerce set the cookies the website needs: to keep you signed in, to remember your cart, and to record how you arrived for your order (order attribution, see above).
• Microsoft Clarity shows us how visitors use our pages: clicks, scrolling, mouse movements, recordings of sessions on the website, and your type of browser and device. It uses cookies (such as _clck and _clsk). Microsoft processes this data under its own privacy statement: https://privacy.microsoft.com/privacystatement
• Google Tag Manager loads tools on our pages. When it loads, Google receives your IP address and browser details. Google processes them under its own privacy policy: https://policies.google.com/privacy

You can block or delete cookies in your browser settings. The website still works, but you may have to sign in again and your cart may be emptied.

What the extension does not collect

• It never sends your artwork, your Illustrator documents, their content or their names.
• It contains no analytics or advertising tool.
• It connects only to our server, to sign in, to check your license and before each limited generation. Help pages are included in the extension.

The extension keeps some data on your computer: in its own data folder, your device identifier (when it had to create a random one), your sign-in state and license, and your settings; in a “Brand In Second” folder in your Documents, the history of your brand guidelines. Uninstalling the extension and deleting these folders removes them.

Why we may use your data (legal bases)

• To provide the service you asked for (contract): your account, sign-in, free plan, trial, licenses, orders and support.
• To meet our legal obligations: keeping order and payment records for accounting and tax.
• For our legitimate interests: keeping the service secure, preventing abuse of the free plan, the trial and licenses, and understanding how our website is used so we can improve it.
• With your consent, where the law of your country requires it, for example for some cookies. You can withdraw it at any time.

Who we share your data with

We do not sell your data. We share it only with:

• our hosting provider, which runs the website and our server;
• the email service that delivers our emails;
• Microsoft (Clarity) and Google (Tag Manager), for the website as described above;
• authorities, when the law requires it.

If you install Brand in second Lite from the Adobe Marketplace, Adobe processes your Adobe data under its own privacy policy. The extension does not read your Adobe account, and it does not need Adobe to share it with us.

Where your data is processed

We are based in Tunisia. Your data may be processed in Tunisia and in the countries where our hosting provider, Microsoft and Google operate, which may be outside your country. Where the law requires it, we rely on these providers’ safeguards for such transfers.

How long we keep your data

Data	How long
Sign-in codes	Until used, or 15 minutes
Account, license keys and devices	Until you ask us to delete your account
Free plan counters and trial record	Kept after your account is deleted, without your email address or name, so the free plan cannot be reset
License event log	90 days
IP address hashes (abuse protection)	One day at most
Orders and payment records	As long as accounting and tax law requires (up to 10 years)
A Pro key you bought	Kept after your account is deleted, detached from you, as a record of the sale

Your rights

You can ask us to:

• give you a copy of your data, in a format you can reuse;
• correct it;
• delete it, or close your account;
• stop or limit some uses of it, or withdraw your consent.

Write to contact@brandinsecond.com from the email address of your account. We answer within 30 days.

When you ask us to delete your data, or close your account, we do it without delay: we delete your account and your email address and remove your device names. We keep only what the table above says we keep after deletion.

If you are not satisfied with our answer, you can complain to the Tunisian data protection authority (Instance Nationale de Protection des Données Personnelles, INPDP) or to the data protection authority of your country.

Children

The website and the extension are not meant for children under 16, and we do not knowingly collect their data.

Security

The website and our server use encrypted connections (HTTPS). Sign-in codes are stored only as hashes, license keys are stored encrypted, and our server signs its answers so the extension can check that they come from us.

Changes to this policy

When we change this policy, we update the date at the top. If a change matters for how we use your data, we tell you by email before it applies.

Contact

Fares Souissi, Tunisia. Email: contact@brandinsecond.com