Privacy Policy

Index

1. Personal information we collect
2. Connected platform data
3. How we use your personal information
4. How we share your personal information
5. Your choices
6. Your rights
7. Security
8. Children
9. Changes to this Privacy Policy
10. How to contact us

1. Personal information we collect

Information you provide to us

• Account data your name and email address, collected when you sign up. We use a third-party authentication provider and do not store passwords directly.
• Brand data brand name, website URL, industry, and tagline you provide during onboarding.
• User-generated content brand content, captions, images, logos, and other material you create or upload through the Service.
• Communications data messages you send us through support or feedback channels.

Automatic data collection

We and our service providers may automatically collect:

• Device data operating system, browser type, IP address, and general location.
• Online activity data pages viewed, time spent on pages, and navigation paths.

2. Connected platform data

Brandora allows you to optionally connect third-party platforms. When you connect a platform, we access data on your behalf using read-only permissions. We do not modify your data on any connected platform.

All connected platform data is used solely to generate analytics, insights, and AI-powered content within the Service. You may disconnect any platform at any time from your Brandora account settings or directly from the platform itself. Upon disconnection, all synced data from that platform is deleted from our systems.

Shopify

• Product catalog (titles, descriptions, images, variants, pricing)
• Order history (order totals, line items, refunds, discounts)
• Customer information (name, email, phone, purchase history, marketing consent)
• Abandoned checkouts

Meta (Facebook & Instagram)

• Page and profile insights (reach, engagement, audience demographics)
• Post performance metrics (impressions, likes, comments, shares)
• Ad account data (campaign performance, spend, conversions)

Google (Analytics & Ads)

• Google Analytics data (website traffic, user behavior, conversions)
• Google Ads data (campaign performance, spend, click-through rates)

Our use of Google API data complies with the Google API Services User Data Policy, including Limited Use requirements.

Other platforms

We may support additional platforms such as LinkedIn, X (Twitter), and TikTok. In each case, we access only the data necessary to provide the Service.

3. How we use your personal information

• Provide, operate, and improve the Service.
• Establish and maintain your account.
• Generate analytics, insights, and AI-powered recommendations from your connected platforms.
• Communicate with you about the Service, updates, and support.
• Respond to your requests and feedback.
• Create aggregated or anonymized data for product improvement.
• Comply with applicable laws and protect our rights.

AI and LLM usage

Brandora uses third-party AI services (large language models) to generate content, insights, and recommendations. Only limited, contextual excerpts of your data are sent to these providers as needed to produce results. We never send full datasets, raw customer PII, or account credentials to any AI provider. We select LLM providers under policies that protect your content and do not use it to train their models.

Retention

We retain personal information for as long as your account is active or as needed to provide the Service. Data from connected platforms is deleted when you disconnect the integration. When your account is closed, we delete or anonymize your personal information, subject to any legal retention requirements.

4. How we share your personal information

We do not sell your personal information. We may share it with:

• Service providers third parties that provide hosting, AI/LLM services, authentication, and analytics on our behalf.
• Connected platforms only as needed to maintain your integrations (e.g., tokens sent to Shopify, Meta, or Google to fetch your data).
• Team members other users you invite to your brand workspace can access shared brand data.
• Authorities law enforcement or government authorities where required by law.
• Business transferees in connection with a merger, acquisition, or sale of assets.

5. Your choices

• Account information you may update your name and email through your account settings.
• Connected platforms you may connect or disconnect any third-party platform at any time from your Brandora settings.
• Marketing emails you may opt out of marketing communications by clicking the unsubscribe link in any email.
• Account deletion you may request deletion of your account and all associated data by contacting us.

6. Your rights

Depending on your location, you may have the following rights regarding your personal information:

• Access request a copy of the personal information we hold about you.
• Correction request that we correct inaccurate or incomplete personal information.
• Deletion request that we delete your personal information.
• Data portability request a copy of your data in a structured, machine-readable format.
• Restrict or object to processing request that we limit or stop processing your personal information.
• Withdraw consent where processing is based on consent, withdraw it at any time.

To exercise any of these rights, contact us at support@brandora.ai. We will respond within 30 days.

7. Security

We use industry-standard safeguards to protect your personal information, including encryption of sensitive credentials at rest. However, no system is completely secure, and we cannot guarantee absolute security.

8. Children

The Service is not intended for use by anyone under 18 years of age. If you believe we have collected personal information from a child, please contact us and we will take steps to delete it.

9. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the effective date at the top of this page. Your continued use of the Service after any changes constitutes acceptance of the updated policy.

10. How to contact us

If you have questions about this Privacy Policy, please contact us: