Data and security
Your brand's data is yours. Full stop.
AiNDREA reads the public market so you do not have to share anything to start. When you connect your own systems, these rules apply.
Generated imageOwnership
What we promise.
- Everything you upload, your Brand Graph and your Record belong to you. Export it in full, in open formats, any time. Deleted within 90 days of closing your account, or within 30 days of a confirmed delete request.
- No training on your content without your opt-in. The default is off. Your artwork is never used in another brand's work.
- Each brand's data is sealed by the database itself, not just the application, with roles set per brand.
- Staff access is logged and visible to your data admin. Staff never answer a call on your behalf.
- Connections are read-only. When you turn on publishing, AiNDREA creates drafts only. Revoke any connection at any time.
- No shopper personal data. Sales connections bring in SKUs, units, prices and dates, never names, emails or addresses.
- Generated work is disclosed. Every generated asset carries its content credentials.
- Free report subscribers: double opt-in, one-click unsubscribe, and your email kept apart from brand data.
Integrations
Works with what you run.
| Integration | When |
|---|---|
| Shopify, file import | On the free plan, Mon 14 Dec |
| Google Analytics 4, Microsoft single sign-on, Slack | From Mon 18 Jan 2027 |
| Microsoft Teams, Airtable | On request |
| Meta, Klaviyo | With Make and Sell, Opens category by category, after Decide |
| ERP, POS and PLM | On request |
How it is built
Security, in plain words.
Isolation
One brand, one vault
Each brand's data is separated by the database itself, not only by the application. A query from one brand cannot return another brand's rows.
Access
Roles and logs
Owner, Admin, Member and Viewer roles, set per brand. Every staff access is logged and visible to your data admin.
Connections
Read-only by default
Store and analytics connections read data and nothing else. Publishing, when you turn it on, creates drafts only.
Shoppers
No personal data
Sales connections bring in products, units, prices and dates. Never shopper names, emails or addresses.
Models
No training by default
Your content is never used to train models without your opt-in, and never used in another brand's work.
Exit
Leave with everything
Export your Brand Graph, Record and uploads in open formats at any time. Deleted within 90 days of closing your account, or within 30 days of a confirmed delete request.
Reviews
For your security team.
We are an early-stage company and say so. We have not completed a SOC 2 audit. We will answer your security questionnaire and walk your team through the architecture.
| Request | Available |
|---|---|
| Security questionnaire | Yes, on request |
| Data processing agreement | Yes, on request |
| Architecture walkthrough | Yes, with engineering |
| Single sign-on | Microsoft, from Mon 18 Jan 2027 |
| SOC 2 report | Not yet |
Where is our data stored?
AiNDREA runs in data centers in the United States, with product images in Germany. Our list of subprocessors is available on request.
Can AiNDREA staff see our data?
Only when needed to support you, and every access is logged and visible to your data admin. Staff never answer a call on your behalf.
What happens if we cancel?
You can export everything first. When you close your account, you can export your data for 30 days, and we finish deleting it within 90 days of closing. Ask us to delete it now and we delete it within 30 days of confirming your request.
Do you sell data?
No. We never sell your brand's data, and public market numbers report categories, never brands.