Privacy Policy

1. Introduction

Welcome to BrandTitan. We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service. Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the service.

2. Our Roles: Controller and Processor

[LEGAL ENTITY NAME] ("BrandTitan") acts in two roles, and this policy treats them differently.

• As a controller we decide how and why we use information about our own customers and website visitors: account details, billing, support requests, and usage of our service and site. Sections 3, 5, 6 and 16 describe that use.
• As a processor (service provider) we hold the personal information of our customers' own contacts, leads, and customers: names, emails, phone numbers, messages, call recordings, form answers, and similar. Our customer decides what is collected and why; we process it only to provide the service and on their instructions, under our Data Processing Addendum. If you are a contact of one of our customers, that business is the one responsible for your information and the best place to direct a request (see Section 10).

3. Information We Collect

We collect information that you provide directly to us, as well as information automatically collected when you use our service:

3.1 Information You Provide

• Account information (name, email address, company name)
• Profile information and preferences
• Content you create, upload, or share through our service
• Payment information (processed securely through third-party providers)
• Communication data when you contact us

3.2 Automatically Collected Information

• Device information and identifiers
• Log data (IP address, browser type, access times)
• Usage data and analytics
• Cookies and similar tracking technologies

4. Categories of Data We Process

4.1 Our customers' account data (we are the controller)

• Identifiers and contact details: name, email address, phone number, company name
• Billing information: plan, invoices, and payment status (card details are held by our payment provider, not by us)
• Brand profile and content you create, upload, or generate
• Connected-account credentials and tokens for platforms you link (Google, Meta, TikTok and others)
• Usage, device, log, and security data (IP address, browser, access times)

4.2 Customer Data held for our customers (we are the processor)

• Contact records: names, emails, phone numbers, addresses, companies, notes, tags, and deal history
• Lead and form submissions, including any answers and files the person provides
• Messages: emails, text messages, and social messages sent and received through the service
• Call data: call logs, and recordings and transcripts where the customer uses call recording
• Advertising and analytics data from platforms the customer connects, and conversion events the customer chooses to send back to them

We do not intentionally collect payment card numbers, government identifiers, or health data, and customers should not upload them.

5. How We Use Your Information

We use the information we collect for various purposes, including:

• To provide, maintain, and improve our service
• To process transactions and send related information
• To send you technical notices, updates, and support messages
• To respond to your comments, questions, and requests
• To monitor and analyze usage patterns and trends
• To detect, prevent, and address technical issues and security threats
• To personalize your experience and provide content tailored to your interests

6. Information Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

• Service Providers (sub-processors): With the vendors who host, secure, and run the service for us, listed with their purpose and the data they handle on our Sub-processors page
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• Legal Requirements: When required by law or to protect our rights
• Consent: With your explicit consent for other purposes

7. AI Processing Disclosure

BrandTitan uses third-party AI providers, including Anthropic and OpenAI for text and reasoning and Kie.ai for image and video generation. When you use an AI feature, the inputs for that task (for example your brand details, a prompt, page text, or a message you ask us to draft a reply to) are sent to the provider to generate the result. These providers process that content under their own commercial or API terms. [COUNSEL / JAMES: confirm each provider's no-training and retention terms before this sentence is relied on.] AI output can be wrong; see our Terms of Service.

8. Retention

• Account data: kept while your account is active, then deleted or de-identified within [90] days of closure, except records we must keep for tax, legal, or security reasons.
• Customer Data: kept for as long as the customer keeps it in their workspace; returned or deleted at the customer's direction or when their account ends (see the DPA).
• Connected-platform data: deleted as described in Sections 13 to 15 and in our Data Deletion Instructions.
• Backups: deleted data ages out of backups on their normal cycle.

[COUNSEL / JAMES: confirm retention periods; the product does not yet enforce a per-category retention schedule.]

9. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

10. Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information:

• Right to access your personal information
• Right to rectify inaccurate information
• Right to request deletion of your information
• Right to restrict processing of your information
• Right to data portability
• Right to object to processing
• Right to withdraw consent

Your own account data: contact us at privacy@brandtitan.app. If you are a contact of one of our customers: the business you dealt with controls your information, so send your request to them; if you send it to us, we will pass it to the customer and assist them in responding, and will not respond on their behalf. We verify requests before acting. See our Security page for how we protect data.

For step-by-step instructions on deleting data we have received from connected platforms (including Google, Meta, TikTok, X, and LinkedIn), please see our Data Deletion Instructions.

11. International Transfers

BrandTitan and its sub-processors are based in or operate from the United States, so information may be transferred to and processed in the United States. [COUNSEL: insert transfer mechanism, for example the EU-U.S. Data Privacy Framework status of each sub-processor and/or Standard Contractual Clauses, and UK addendum, if EU/UK personal data is in scope.]

12. California Notice

We do not sell or share personal information as those terms are defined under California law, and we do not use Customer Data for advertising of our own. In the last 12 months we have collected the categories described in Section 4 for the business purposes described in Section 5. California residents may request to know, access, correct, or delete their personal information, and not to be discriminated against for doing so; see Section 10. For Customer Data we act as the customer's service provider and will refer requests to the customer. Authorized agents may submit requests at privacy@brandtitan.app.

[COUNSEL: confirm the California statements, including whether the customers' conversion-feedback features to Meta/Google constitute "sharing" by the customer.]

13. Google API Services and YouTube

13.1 Google User Data We Access and Why

When you connect a Google account to Brand Titan, we access the following Google user data solely to provide the features you request:

• Google Ads campaign data and metrics — to power your analytics dashboard and conversion measurement
• Google Ads campaign management — when you approve a change in Brand Titan, we make that change in your own Google Ads account: pausing or resuming a campaign, adjusting a campaign's budget, or replacing an ad's text with the new version you approved (the old ad is paused, not deleted). Nothing changes until an owner or admin in your workspace approves it, and every change is logged.
• Google Ads conversion feedback (Data Manager API) — when you turn on won-deal feedback and a lead becomes a customer in your Brand Titan CRM, we send that conversion to your own Google Ads account: the customer's email address and phone number, hashed with SHA-256 before they leave our servers, the Google ad click ID when the customer came from a Google ad, plus the deal value and date. This happens only for the Google Ads account and conversion action you selected and only when your consent settings allow it, so Google Ads can measure and optimize for real customers.
• Excluding existing customers (Customer Match) — when you turn this on, we upload your existing customers' contact details (email address and phone number), hashed with SHA-256 before they leave our servers, to your own Google Ads account so your ads are not shown to people who are already your customers.
• YouTube channel information and video publishing — to display your connected channels and publish videos on your behalf when you request it
• Google Search Console site data — to verify domain ownership and report on your site's search performance
• Google Business Profile management (when available) — to manage your business listing on your behalf

13.2 Limited Use Disclosure

Brand Titan's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We only use Google user data to provide or improve the user-facing features described above
• We never sell Google user data
• We never use Google user data for advertising or profiling purposes unrelated to the feature you are using
• We never transfer Google user data to third parties except as necessary to provide the feature, with your consent, or for legal or security reasons

13.3 YouTube API Services

Brand Titan uses YouTube API Services. By using Brand Titan's YouTube features, you agree to be bound by the YouTube Terms of Service. Google's handling of your information is described in the Google Privacy Policy.

13.4 Retention, Revocation, and Deletion

You can disconnect a Google service from Brand Titan at any time in Settings → Company → Social. We then delete the campaigns, ads and analytics we synced from it and the login we stored for your workspace, and delete any remaining stored access tokens within 30 days. Depending on how the service was connected, we may also revoke Brand Titan's access at Google; to be certain it is revoked, also remove Brand Titan in your Google account security settings. To request full deletion of your account and all associated data, see our Data Deletion Instructions.

14. Meta (Facebook and Instagram)

14.1 Meta Data We Access and Why

When you connect your Meta ad account, Facebook Page, or Instagram account through Facebook Login, we access: your ad account's campaigns, ad sets, ads and their performance (spend, impressions, reach, clicks, leads and conversions), to show you which ads bring customers; leads submitted through your own Lead Ads forms, delivered into your Brand Titan contacts so you can follow up; and, for a connected Facebook Page or Instagram account, the content, comments and messages needed for the publishing and inbox features you use. When you turn on won-deal feedback, we send each new customer to your own Meta pixel: their email, phone and name hashed with SHA-256, plus the deal value and date, so Meta can find more people like them. When you turn on excluding existing customers, we upload your existing customers' email addresses and phone numbers, hashed with SHA-256, to a custom audience in your own Meta ad account so your ads are not shown to people who are already your customers.

14.2 How Changes to Your Ads Work

Brand Titan changes your Meta ads only after an owner or admin in your workspace approves the change — pausing or resuming a campaign, ad set or ad, changing a daily budget, or creating an ad from your own Page post or from an ad you already run. New ads are always created paused, every change is logged, and you can undo it.

14.3 What We Never Do

We never sell Meta data, never use it to target or profile people for anyone else, and never share one business's data with another. Within Brand Titan, it is visible only to members of your workspace.

14.4 Retention, Revocation, and Deletion

You can disconnect Meta in Settings → Company → Social at any time. We then delete the Meta campaigns, ads and analytics we synced, and delete the stored access tokens within 30 days. Your daily ad spend history, the record of changes you approved, and the leads, messages and comments already delivered to your contacts and inbox stay with your workspace as your own records until you ask us to delete them. You can also remove Brand Titan in your Facebook settings (Settings & privacy → Settings → Apps and websites, or Business integrations), or follow our Data Deletion Instructions.

15. TikTok

15.1 TikTok Data We Access and Why

When you connect a TikTok account to Brand Titan through TikTok's Login Kit, we receive and store the account's TikTok user ID (open_id), display name, username, and profile picture — so you can see which account is connected — together with the access token TikTok issues so that Brand Titan can post to that account when you ask it to. Before each post we query TikTok for the account's current posting options (the audiences it allows, whether comments, duets, or stitches are turned off, and the maximum video length) to build the posting screen; this information is used for that screen and is not stored.

15.2 How Posting to TikTok Works

• Only the owner of a TikTok account can connect it, by signing in to TikTok and approving the request
• A video goes to TikTok only after a person in your workspace reviews the post, chooses who can view it, and confirms it — nothing is posted without that step
• Brand Titan does not add its own watermark or branding to the videos it posts
• We do not read your TikTok comments, followers, messages, or any other TikTok user's data
• We never sell TikTok data or use it for advertising or profiling

15.3 Retention, Revocation, and Deletion

You can disconnect your TikTok account from Brand Titan at any time in Settings → Company → Social. When you disconnect, we stop using the account and delete the stored access token and the TikTok data we have stored within 30 days. To revoke Brand Titan's access at TikTok itself, remove it from inside TikTok (Settings and privacy → Security and permissions → Manage app permissions). TikTok's own handling of your information is described in the TikTok Privacy Policy. To request full deletion of your account and all associated data, see our Data Deletion Instructions.

16. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our service and store certain information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our service.

17. Children's Privacy

Our service is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

18. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.

19. Contact Us

If you have any questions about this Privacy Policy, please contact us at:

Email: privacy@brandtitan.app
Address: RED77, 925 E Juniper Cir, Hyde Park, UT 84318