Brandonn — Privacy Policy

Effective Date: 3 July 2026 

Legal Entity: Brandonn, Inc. and its affiliates (“Brandonn,” “we,” “us,” or “our”).

This Privacy Policy explains how we collect, use, share, and protect information when you use the Brandonn mobile application and related services (collectively, the “Services”). By creating an account or using the Services, you agree to this Policy. If you do not agree, do not use the Services.

You must be at least eighteen (18) years old to use the Services (see “Children’s Privacy”).

1. Information We Collect

1.1 Information you provide

• Account and profile information: your first and last name, email address, phone number, and password.
• Business information: details about your business that you provide so we can generate content for you — business name, address, city, state/province, ZIP/postal code, services, brand voice and style, and similar marketing inputs.
• Content you upload: your business logo, photos, and other media you add to your media library, and any text you enter.
• Communications: information you provide when you contact support or submit a form.
• Connected social accounts: when you connect a Facebook or Instagram account, we receive account information and authorization (access tokens) needed to publish on your behalf. Access tokens are stored encrypted and are never shared back to the app or any third party (see “Security”).
• Sign-in with Google, Apple, or Facebook: if you choose to register or sign in using a third-party identity provider, we receive basic profile information from that provider — such as your name and email address — to create and authenticate your account. We never receive your password for that account, and we use the information only to operate your Brandonn account.

1.2 Information collected automatically

• Device and usage data: device type, operating system and version, app version, and in-app activity (such as features used and actions taken).
• App installation identifier: a random identifier we generate for your app installation to detect sign-ins from new devices and alert you to them. This is not a hardware identifier and not an advertising identifier (we do not collect the IDFA or Android Advertising ID).
• Diagnostics: crash reports and performance data, so we can detect and fix problems.

1.3 Information we do NOT collect

• We do not access your device’s GPS location. When you enter a business address, suggestions are provided by an address-autocomplete service based only on the text you type.
• We do not collect payment card data. All subscription payments are processed by Stripe on Stripe-hosted pages; card details never pass through or get stored by Brandonn.
• We do not collect biometric data. If you enable Face ID / Touch ID, the biometric check is performed entirely by your device.

2. How We Use Information

We use the information we collect to:

• Provide, operate, and maintain the Services, including generating and scheduling posts and publishing them to your connected accounts;
• Create content tailored to your business (your inputs are assembled to prompt our AI providers — see Section 4);
• Authenticate you, secure your account, and detect sign-ins from new devices;
• Process your subscription and manage billing through our payment processor;
• Provide customer support and respond to your requests;
• Monitor, analyze, and improve the Services, including diagnosing crashes and understanding feature usage;
• Detect, prevent, and address fraud, abuse, security, and technical issues;
• Comply with legal obligations and enforce our Terms.

Legal bases (where applicable, e.g., for EEA/UK users): performance of our contract with you, your consent, our legitimate business interests, and compliance with legal obligations.

3. Mobile Application

When you use the Brandonn mobile app, the following apply in addition to the rest of this Policy:

• Camera and photo library: the app requests access to your camera and photo library so you can upload your business logo and add images to your media library. We use this access only for that purpose and do not otherwise access your photos. You can change these permissions in your device settings at any time.
• Push notifications: with your permission, we send notifications about your posts and account activity. You can disable them in your device settings.
• Secure on-device storage: your login session is stored in your device’s secure keychain provided by the operating system.
• Mobile analytics and diagnostics: we use PostHog to understand how the app is used and Sentry to detect crashes and errors. This data is associated with your account identifier and is used only to operate and improve the Services. We do not use it for advertising and do not track you across other companies’ apps or websites.
• No advertising identifiers or cross-app tracking: the app does not collect the device advertising identifier (IDFA / AAID) and does not use third-party advertising or cross-app tracking technologies.

4. AI Processing of Your Content

To generate posts and to operate the Services, we assemble the business information and inputs you provide and send them to our AI service providers (currently OpenAI, Google, and Anthropic) to produce or process content such as captions and images. Any of these providers may be used to process text and/or images, and the providers we use may change over time. We retain the final generated content (post text and images) and your inputs as needed to provide the Services. We do not sell your content. Our providers process this data on our behalf to perform the requested processing; their use of data is governed by their agreements with us. For details on the rights you grant in your content, see our Terms of Service.

5. How We Share Information

We do not sell your personal information. We share information only as described here:

5.1 Service providers (sub-processors)

We use trusted third parties to operate the Services, who process data only on our instructions. Current categories and providers:

This list may change as the Services evolve; we will keep it current.

5.2 Connected platforms

When you publish, we transmit your post content to the social platforms you have connected (Facebook / Instagram), subject to their terms and privacy policies.

5.3 Legal, safety, and business transfers

We may share information: to comply with applicable law or valid legal process (such as a subpoena, warrant, or court order); to protect the rights, property, or safety of Brandonn, our users, or others; with our affiliates; and in connection with a merger, acquisition, financing, or sale of assets.

5.4 With your direction

We share information with third parties when you direct us to do so. Because such sharing may be irreversible, we require clear verification of your identity before acting on any such request, to prevent unauthorized or fraudulent requests.

6. Cookies and Tracking Technologies (Website)

Our marketing website at brandonn.us uses cookies, pixel tags, and similar tracking technologies, including some provided by third parties (collectively, “Technologies”). They fall into the following categories:

• Necessary / essential — required for the site to function, to identify irregular behavior, prevent fraud, and improve security.
• Performance and analytics — to understand how visitors use the site and to compile aggregated statistics.
• Functionality — to remember your preferences and provide a more personal experience.
• Advertising / targeting — first- or third-party Technologies used to deliver content and ads more relevant to your interests, on our site and on third-party properties, based on your browsing activity.

The third-party Technologies currently used on our website include:

Most browsers let you erase or block cookies, or notify you when one is set; if you disable certain cookies, parts of the website may not function properly. We do not currently respond to “Do Not Track” (DNT) signals.

The Brandonn mobile app does not use advertising or cross-app tracking technologies, does not collect the device advertising identifier (IDFA / AAID), and does not use the Meta Pixel or the website analytics cookies listed above. In-app analytics are limited to PostHog and Sentry, as described in Section 3.

7. Data Retention

We retain personal information for as long as needed to provide the Services and for legitimate business or legal purposes, including complying with legal obligations, resolving disputes, and enforcing our agreements. If you delete your account, we delete or de-identify your personal information within a reasonable period, except where retention is required by law. Inactive accounts may be retained for a limited period to allow reactivation.

8. Your Rights and Choices

Depending on where you live, you may have the right to:

• Access, correct, or delete your personal information;
• Request confirmation of whether we process your information and obtain a copy in a structured, commonly used, machine-readable format (portability);
• Object to or restrict certain processing, and withdraw consent where processing is based on consent;
• Opt out of marketing emails using the “unsubscribe” link or by contacting us (you cannot opt out of essential service communications).

You can exercise these rights, including deleting your account, in the app or by contacting us at the address below. To protect your account, we may ask you for additional information to verify your identity before acting on a request. We will respond as required by applicable law. We do not discriminate against you for exercising your rights.

9. Security

We use industry-standard administrative, technical, and physical safeguards to protect your information. Social access tokens are encrypted at rest, card data is handled solely by our PCI-compliant payment processor, and session tokens are stored in your device’s secure keychain. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Children’s Privacy

The Services are intended for users who are at least eighteen (18) years old. We do not knowingly collect personal information from anyone under 18. If we learn we have collected such information, we will delete it. We may request proof of age.

11. International Data Transfers

We are based in the United States and operate in the United States and Israel. Your information may be stored and processed in these and other countries where we or our service providers operate. Where required, we use appropriate safeguards for international transfers. By using the Services, you consent to these transfers.

12. Changes to This Policy

We may update this Policy from time to time. For material changes, we will provide notice (for example, by email or in-app notice) before they take effect, or as otherwise required by law. The “Effective Date” above reflects the latest revision. Your continued use of the Services after an update means you accept the revised Policy.

13. Contact Us

Brandonn, Inc. Privacy / data requests: privacy@brandonn.us General support: support@brandonn.us

This Policy is governed by the laws of the State of New York, U.S.A., without regard to conflict-of-laws principles, and any disputes will be subject to the courts located in New York, NY.

This Policy was written in English and may be translated for your convenience. If a translated version conflicts with the English version, the English version prevails.

Privacy Policy – previous version