Privacy Policy

When you use Brand Lift, we may collect the following information:

• Account information — name, email address, and profile picture provided during sign-up or via third-party OAuth (Google, Facebook, etc.)
• Connected social accounts — OAuth tokens, platform user IDs, and page/channel metadata required to publish on your behalf
• Content you create — posts, media assets, brand profiles, and scheduling preferences
• Usage & device data — IP address, browser type, operating system, pages visited, and interaction timestamps
• Cookies — session tokens, authentication cookies, and optional analytics cookies

• Authenticate your identity and manage your account
• Publish, schedule, and manage posts on your connected social platforms
• Generate AI-powered content and virtual promoter avatars
• Send transactional notifications (post status, account alerts)
• Improve platform performance, fix bugs, and develop new features
• Comply with legal obligations and enforce our Terms of Service

We do not sell your personal data. We share information only in the following cases:

• Social platforms — to publish content you explicitly schedule (Instagram, Facebook, YouTube, TikTok)
• Infrastructure providers — hosting, storage, and database services that process data on our behalf under strict agreements
• AI services — content and prompts sent to AI providers (Google Gemini) to generate text or images; these providers have their own privacy policies
• Legal requirements — when required by law, court order, or to protect our rights

• All data is transmitted over HTTPS/TLS encryption
• OAuth tokens are stored encrypted at rest
• Access to production systems is restricted and audited
• While we take reasonable measures to protect your data, no system is 100% secure — we cannot guarantee absolute security

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Withdraw consent for optional data processing
• Export your data in a portable format

To exercise any of these rights, contact us at the email below. We will respond within 30 days.

We retain your data for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where retention is required by law. Anonymized analytics data may be retained indefinitely.

Our platform may contain links to external websites or services. We are not responsible for the privacy practices or content of those third parties. We encourage you to review their privacy policies before sharing any information.