Privacy Policy

What data we collect

• Account information covers your name, email address, and authentication credentials.
• Brand profiles: business names, logos, brand colours, voice settings, and other brand configuration you provide.
• Social platform tokens: OAuth access tokens for connected social accounts (Facebook, Instagram, LinkedIn, X, YouTube).
• Content: posts, drafts, images, and other content you create or upload.
• Usage data: analytics on how you interact with BrandAndGo, including pages visited, features used, and performance metrics.

How we use your data

• Providing the service: managing your brand profiles, publishing content to connected platforms, and tracking competitor activity.
• AI content generation: your brand profile data is used to generate on-brand content suggestions. We do not use your content to train AI models.
• Analytics: understanding how the platform is used so we can improve it.

Data storage

All your data is stored and hosted in Australia, on Google Cloud Platform and Firebase in the australia-southeast1 (Sydney) region, and data at rest never leaves Australia. Social platform tokens are encrypted at rest using Cloud KMS.

Some AI-powered features send your inputs to specialist AI providers that may process them overseas (currently the United States) under contractual data-protection agreements consistent with Australian Privacy Principle 8 (cross-border disclosure). Those providers process your inputs only to deliver the feature and do not use your data to train their models.

Third-party services

We use the following third-party services:

• Stripe: payment processing for subscription billing. Stripe handles your payment details directly; we do not store credit card numbers.
• SendGrid: sending transactional emails (e.g. invitations, notifications).
• Social platform APIs: Facebook, Instagram, LinkedIn, X, and YouTube for content publishing and analytics retrieval.
• AI providers (Anthropic, Google Vertex AI): where you use an AI-powered feature, your inputs are sent to these providers to generate the result (text via Anthropic, image generation via Google Vertex AI). They may process inputs overseas (currently the United States) under data-protection agreements and do not train on your data.

Data retention

We retain your data for as long as your account is active. If you cancel your account, we will delete your data within 30 days of your request. Backups may be retained for up to 90 days for disaster recovery purposes before being permanently deleted.

Your rights

You have the right to:

• Access your personal data and download a copy.
• Correct any inaccurate information.
• Delete your account and all associated data.

To exercise any of these rights, email us at our contact form.

Cookies

BrandAndGo uses a minimal set of cookies:

• Firebase Authentication: session cookies to keep you signed in.
• Google Analytics (GA4): anonymous usage analytics to help us understand how the platform is used. You can opt out using your browser settings or a GA opt-out extension.

Contact

If you have questions about this privacy policy or how we handle your data, contact us at our contact form.