Privacy Policy

Last updated: January 21, 2026

1. Introduction

BrandOS ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services at mybrandos.app ("the Service").

By using our Service, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Information You Provide

  • Account Information: Name, email address (optional), and profile information when you create an account
  • Brand Information: Brand names, colors, keywords, tone preferences, voice samples, and other brand-related content you submit
  • Content: Text, documents, and other materials you submit for analysis or generation
  • Communications: Messages you send to us, including support requests and feedback
  • Payment Information: Billing details processed securely through Stripe (we do not store full card numbers)

2.2 Information from X (Twitter)

When you connect your X account or use our X analysis features, we may collect:

  • Profile Information: Username, display name, profile picture, bio, follower/following counts
  • Tweets: Your public tweets, including text content and metadata
  • Engagement Metrics: Public metrics such as likes, retweets, replies, and impressions
  • Account Identifiers: X user ID for authentication and data association

Important: We only access data that you explicitly authorize through X's OAuth authentication process. We do not access your direct messages, private information, or data you have not authorized.

2.3 Automatically Collected Information

  • Usage Data: Pages visited, features used, actions taken, and time spent on the Service
  • Device Information: Browser type, operating system, device identifiers, and screen resolution
  • Log Data: IP address, access times, and referring URLs
  • Cookies: Session cookies and preferences (see Section 9)

3. How We Use Your Information

  • Service Delivery: To provide brand analysis, scoring, and content generation features
  • Brand DNA Creation: To generate and maintain your Brand DNA profile
  • X Analysis: To analyze your X presence and provide brand scoring and recommendations
  • AI Processing: To process your content through AI models for analysis and generation
  • Account Management: To create and manage your account
  • Communication: To send service updates, security alerts, and support messages
  • Improvement: To analyze usage patterns and improve our Service
  • Security: To detect and prevent fraud, abuse, and security threats
  • Legal Compliance: To comply with legal obligations

4. How We Use X (Twitter) Data

We use X data specifically and only for:

  • Authenticating your identity and maintaining your account
  • Analyzing your public profile and tweets to generate brand insights
  • Calculating your X Brand Score and providing recommendations
  • Generating content suggestions based on your brand voice
  • Providing platform-specific content adaptation

We do NOT use X data to:

  • Post content on your behalf without explicit consent
  • Follow, unfollow, like, or retweet on your behalf
  • Send direct messages
  • Sell or share your X data with third parties for advertising
  • Build profiles for targeted advertising

5. Data Sharing and Disclosure

We do not sell your personal information. We may share data with:

5.1 Service Providers

  • Supabase: Database hosting and authentication
  • Vercel: Website hosting and analytics
  • Anthropic (Claude): AI content analysis and generation
  • Google (Gemini): AI content generation
  • Stripe: Payment processing
  • Sentry: Error monitoring and performance tracking
  • Resend: Email delivery

5.2 Other Disclosures

  • Legal Requirements: When required by law, subpoena, or court order
  • Protection: To protect our rights, property, or safety, or that of our users
  • Business Transfers: In connection with a merger, acquisition, or sale of assets
  • With Consent: When you have given explicit consent to share

6. Data Retention

  • Account Data: Retained while your account is active and for up to 30 days after deletion
  • Brand Data: Retained while your account is active; deleted upon account deletion
  • X Data: Cached temporarily for performance; refreshed periodically and deleted upon account deletion or access revocation
  • Content History: Retained while your account is active for your reference
  • Log Data: Retained for up to 90 days for security and debugging

You can request deletion of your data at any time by contacting us or deleting your account.

7. Your Rights and Choices

You have the right to:

  • Access: Request a copy of your personal data
  • Correction: Request correction of inaccurate data
  • Deletion: Request deletion of your data
  • Export: Export your brand data in a portable format
  • Opt-out: Unsubscribe from marketing communications
  • Revoke X Access: Disconnect your X account at any time through your X settings at https://twitter.com/settings/connected_apps or through your BrandOS account settings

To exercise these rights, contact us at privacy@mybrandos.app

8. Data Security

We implement industry-standard security measures including:

  • Encryption of data in transit (TLS/SSL)
  • Encryption of sensitive data at rest
  • Secure authentication and session management
  • Regular security assessments
  • Access controls and monitoring

While we strive to protect your data, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

9. Cookies and Tracking

We use cookies and similar technologies for:

  • Essential Cookies: Required for authentication and core functionality
  • Analytics Cookies: To understand how users interact with our Service
  • Preference Cookies: To remember your settings and preferences

You can control cookies through your browser settings, but some features may not function properly without them.

10. International Data Transfers

Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers in compliance with applicable data protection laws.

11. Children's Privacy

Our Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we learn we have collected such information, we will delete it promptly.

12. California Privacy Rights (CCPA)

California residents have additional rights under the CCPA:

  • Right to know what personal information is collected
  • Right to know if personal information is sold or disclosed and to whom
  • Right to opt out of the sale of personal information (we do not sell your data)
  • Right to request deletion of personal information
  • Right to non-discrimination for exercising these rights

13. European Privacy Rights (GDPR)

If you are in the European Economic Area, you have additional rights under GDPR:

  • Right to access, rectify, and erase your data
  • Right to restrict or object to processing
  • Right to data portability
  • Right to withdraw consent
  • Right to lodge a complaint with a supervisory authority

Our legal basis for processing includes: consent, contract performance, legitimate interests, and legal obligations.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on the Service and updating the "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the updated policy.

15. Contact Us

For privacy-related questions, concerns, or to exercise your rights, contact us at:

Email: privacy@mybrandos.app

Website: https://mybrandos.app

← Back to Home