Privacy Policy

1. Who we are

Brandcell411 is an AI social content studio. This policy explains what personal data we collect when you use the Service, why we collect it, and the choices you have. It covers the Brandcell411 web app and the brandcell411.com website.

2. Information we collect

We collect the following categories of data:

• Account data — your email address, display name, and avatar, provided by you or by Google when you sign in with Google.
• Brand and workspace data — the website URLs you add, extracted brand kits (colors, fonts, logos, tone, audience), brand voices, knowledge-base entries, campaigns, drafts, posts, and generated images.
• Social connection data — the account identifier, handle, granted scopes, and status of each social account you connect, plus access and refresh tokens stored in encrypted form.
• Subscription data — your plan, trial and renewal dates, and subscription status. Card details are handled by our payment processor and are never stored by us.
• Usage data — generation events, quota counters, and audit records of significant actions such as brand edits and publishing.
• Technical data — standard server logs needed to operate and secure the Service.

3. How we use your information

We use personal data to:

• Provide the Service: extract brand kits, generate text and images, check topic redundancy, schedule and publish approved posts.
• Authenticate you and keep your workspace and connected accounts secure.
• Meter usage against your plan limits and bill your subscription.
• Diagnose errors, prevent abuse, and improve reliability.
• Send service messages about your account, trial, or subscription.

4. AI processing

Content you submit for generation — website text, brand kit fields, knowledge-base facts, briefs, and prompts — is sent to AI model providers through our AI gateway so the model can produce a draft or image. Only the data needed for the request is sent. We do not sell your content, and we do not use it to train our own models.

5. Third parties that process data for us

We share data only with service providers who process it on our behalf, under contract, for the purposes above:

• Our cloud backend provider for database, authentication, and file storage.
• AI model providers used for text and image generation via our AI gateway.
• Social platforms — X, LinkedIn, Facebook, Instagram, and Threads — which receive the content you approve for publishing and the OAuth requests you authorize.
• Google, when you choose to sign in with Google.
• Our payment processor, for subscription billing.

6. Connected social accounts

When you authorize a social account, we store the tokens needed to publish on your behalf. Tokens are encrypted at rest with AES-256-GCM and are only decrypted server-side when publishing or when a background job refreshes them and verifies the account is still authorized. Disconnecting an account from the brand's Connections tab removes those stored credentials.

7. Security

Access to your workspace data is enforced at the database level with row-level security so users can only reach brands they own or administer. Sensitive credentials are encrypted before storage, secrets are held in a server-side secret store, and privileged operations verify the caller's role before running. No system is perfectly secure, so please use a strong, unique password and report anything suspicious.

8. Data retention

We keep your account, brand, and content data for as long as your account is active. Version history for brand voices and knowledge-base entries is retained so you can roll back changes. When you delete a brand or your account, the associated data is deleted, except records we must keep for billing, tax, or legal purposes.

9. Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, to object to or restrict certain processing, and to withdraw consent. You can edit most data directly in the app; for anything else, contact us and we will respond within the time limits set by applicable law.

10. Cookies

We use only the cookies and local storage needed to keep you signed in and to remember interface preferences. We do not use third-party advertising cookies.

11. Children

Brandcell411 is a business tool and is not directed to children under 16. We do not knowingly collect personal data from children.

12. Changes and contact

We will update this policy as the Service changes and will note the new effective date at the top of the page. Privacy questions and requests can be sent to privacy@brandcell411.com.