Who we are
BrandFleet (“we”, “us”) provides a multi-brand content studio: teams create brands, generate and schedule content, publish to connected channels, and measure performance from one workspace. BrandFleet is the data controller for the personal data described in this policy. Where your team uses BrandFleet on behalf of an organization, that organization controls the content and member data inside its workspace and we process it on their instructions.
Data we collect
- Account data. Your name, email address, password hash, and workspace membership. If you sign in with a third-party identity provider we receive your name, email, and avatar from that provider.
- Brand & content data. Brand profiles, voice guidelines, assets you upload, content you generate or write, schedules, and publishing targets you configure.
- Connected account data. When you connect a social or publishing account (e.g. Facebook, Instagram, YouTube, X, LinkedIn, TikTok, WordPress, Webflow, Shopify), we store the OAuth tokens the platform issues, the account/page/channel identifiers you select, and the metadata needed to publish and read analytics. We never see or store your passwords for those platforms.
- Analytics data. Post- and account-level performance metrics returned by platforms you have connected (impressions, reach, engagement, and similar aggregates).
- Billing data. Your plan, credit balance and usage history. Card details are handled by our payment processor and never touch our servers.
- Support data. Messages you send to support, including chat transcripts and the email address you provide for follow-up.
- Usage & log data. Standard server logs (IP address, browser, pages viewed, timestamps) used for security, debugging, and abuse prevention.
How we use data
- To provide the service: generating content, scheduling, publishing to your connected channels, and reporting analytics.
- To operate your account: authentication, team invitations, seat management, and billing.
- To keep the service safe: fraud and abuse prevention, rate limiting, and security monitoring.
- To support you: answering questions and resolving issues you raise.
- To improve BrandFleet: aggregate, de-identified usage analysis. We do not sell personal data, and we do not use your content or your audience’s data for advertising.
Connected social accounts
Social connections are scoped to the brand you attach them to and are used only to perform the actions you initiate or schedule: publishing posts and media, and reading the performance metrics of that account.
- Tokens are stored encrypted and are refreshed only to keep your connection alive.
- Scope is the minimum each platform requires for publishing and analytics; we never request permissions we do not use.
- Disconnecting a channel in Settings → Integrations deletes its tokens immediately. You can also revoke BrandFleet from the platform’s own security settings at any time.
BrandFleet’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. YouTube data is used solely to upload the videos you publish and to display your channel’s analytics to you.
AI processing
Content generation, the Studio Assistant, and support chat are powered by third-party AI models. When you run a generation, the relevant inputs (your prompt, brand guidelines, and context you provide) are sent to the model provider to produce the output. Our providers process this data to deliver the service and do not use it to train their models under the terms we have with them. Generated output belongs to your workspace.
Service providers
| Provider | Purpose |
|---|---|
| Supabase | Database, authentication, and file storage |
| Vercel | Application hosting and delivery |
| Anthropic | AI text generation (content, assistant, support) |
| Replicate | AI image and video rendering |
| Brevo | Transactional email (invitations, support escalation) |
| Connected platforms | Publishing and analytics for the channels you connect (Meta, Google/YouTube, X, LinkedIn, TikTok, WordPress, Webflow, Shopify) |
Each provider processes data only as needed to perform its function for us and is bound by its own security and privacy commitments.
When we share data
- Inside your workspace. Content, brands, and analytics are visible to the teammates in your organization according to their roles.
- With platforms you connect. When you publish, the content you chose to publish is sent to that platform under your connected account.
- With service providers listed above, to run the product.
- For legal reasons, if required by law or to protect the rights, safety, or integrity of BrandFleet and its users.
We do not sell or rent personal data to anyone.
Retention & deletion
We keep your data for as long as your account is active. Disconnecting a social channel deletes its tokens immediately. Deleting content removes it from your workspace. If you delete your account, we delete or de-identify your personal data within 30 days, except for records we must keep for legal, billing, or security purposes. Backups roll off on a fixed schedule.
Security
All traffic is encrypted in transit (TLS) and data is encrypted at rest. OAuth tokens and API keys are stored encrypted, access inside our systems is role-scoped and logged, and API access is authenticated with org-scoped keys that you can rotate or revoke at any time.
Your rights
Depending on where you live, you may have the right to access, correct, export, restrict, or delete your personal data, and to object to certain processing. You can exercise most of these directly in the product (Settings), or by contacting us at the address below. We respond to verified requests within the timelines your local law requires, and we will not discriminate against you for exercising your rights.
Children
BrandFleet is a business tool and is not directed at children. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided us personal data, contact us and we will delete it.
Changes to this policy
When we make material changes we will update the date at the top of this page and, where appropriate, notify you in the product or by email. Continued use of BrandFleet after a change takes effect means the updated policy applies.
Contact
Questions or requests about this policy: privacy@brandfleet.ai.