Privacy Policy

BrandCrew helps marketing teams research brands, plan campaigns, create content, and publish across connected channels. To deliver that service, we collect information you provide, data generated by your use of the product, and limited technical information needed to operate the platform securely.

Each brand workspace in BrandCrew runs in isolation. We do not pool your brand data with other customers or use it to train shared models for other accounts.

We collect the following categories of information:

• Account details such as your name, email address, password hash, and organization membership.
• Brand profile data including website URLs, voice, audience, goals, competitors, and connected social accounts.
• Content you create, approve, schedule, or publish through the platform, including drafts, images, and campaign plans.
• Intelligence and monitoring data gathered from public sources on your behalf, such as mentions, articles, and sentiment signals.
• Consultation booking details such as your name, work email, brand, website, discussion notes, selected time, and time zone.
• Usage data such as feature interactions, agent runs, billing events, and support communications.
• Technical data including IP address, browser type, device information, and cookies required for authentication and security.

We use collected information to:

• Provide, maintain, and improve the BrandCrew platform and AI agent workflows.
• Run brand intelligence, monitoring, content generation, campaign planning, and publishing on your instructions.
• Authenticate users, prevent fraud, enforce plan limits, and protect account security.
• Process subscriptions, send transactional emails, and deliver product notifications such as report-ready alerts.
• Schedule founder consultations, prepare for the conversation, send meeting details, and follow up about your request.
• Respond to support requests and communicate about service changes.
• Analyze aggregated, de-identified usage patterns to improve reliability and product quality.

BrandCrew uses third-party AI providers to generate insights, recommendations, copy, and visuals. Prompts sent to those providers are scoped to your active brand workspace and the task you requested.

You remain responsible for reviewing AI-generated output before publishing. We recommend keeping approval workflows enabled when content will be posted publicly or sent to prospects.

If you choose to connect a Google account, BrandCrew accesses only the Google data and permissions needed to provide the Gmail and YouTube features you authorize. Connecting a Google account is optional, and Google data is not collected before you complete the Google authorization flow.

Depending on the Google services you connect, we may access:

• Basic Google account information, including your Google account identifier and email address, so we can identify and display the connected account.
• OAuth access tokens, refresh tokens, granted scopes, and token expiration information needed to maintain the connection. We do not receive or store your Google password.
• For Gmail, permission to send messages from the connected account when you direct BrandCrew to send approved content. BrandCrew does not request permission to read, modify, or delete messages in your Gmail mailbox.
• For YouTube, read-only access to connected channel identifiers and profile details, video identifiers, titles, descriptions, thumbnails, statistics, and audience comments used by BrandCrew analytics. BrandCrew does not request permission to upload, edit, or delete YouTube content.

We use Google user data only to provide visible features that you request:

• Connect and display the correct Gmail or YouTube account in your BrandCrew workspace.
• Send user-created, user-reviewed, or user-approved email from the connected Gmail account to recipients the sender is authorized to contact.
• Connect and verify a YouTube channel and retrieve authorized, read-only video performance metrics and audience comments for dashboards, sentiment analysis, themes, recommendations, and other user-facing campaign insights.
• Maintain the authorized connection, prevent abuse, troubleshoot failures, and comply with applicable legal obligations.

BrandCrew does not use Gmail to send purchased-list, scraped-list, cold, unsolicited, or otherwise prohibited commercial email. Users must have a lawful basis and any required recipient consent before sending email through the service. We may block or suspend email activity that appears abusive or non-compliant.

BrandCrew may process authorized YouTube comments, video metadata, performance data, and derived signals with contracted AI service providers solely to deliver visible, user-facing features such as sentiment classification, theme detection, recommendations, and personalized campaign insights for the requesting workspace. This processing occurs only as part of the Google-connected features the user authorizes.

We do not use Google user data to train or improve a generalized or shared AI or machine-learning model. We do not permit our service providers to use Google user data for their own advertising, data brokerage, or generalized model training. Gmail mailbox content is not read by BrandCrew, and Google OAuth credentials are never included in prompts sent to AI providers.

We do not sell Google user data or transfer it to advertising platforms, data brokers, information resellers, credit providers, or other unrelated third parties. We share Google user data only with infrastructure and processing providers acting on our behalf when necessary to provide a feature the user requested and consented to, to protect the service, or when required by law.

Our personnel do not access Google user data except when you provide explicit permission for support involving specific data, when access is necessary to investigate security or abuse, or when required by applicable law. Access is limited to authorized personnel and the minimum information necessary.

Google OAuth tokens and connected-account records are stored using access controls and encryption at rest. We retain them only while the Google connection is active and needed to provide the authorized features. Disconnecting a Google service removes the locally stored connector credentials and stops further collection through that connection. You can also revoke BrandCrew's access from your Google Account security settings.

Imported YouTube metadata, metrics, comments, and derived analytics may remain in the applicable workspace so the user can retain campaign history. A user can delete the associated content or workspace, close the account, or request deletion by contacting us. We delete or de-identify applicable Google user data within 30 days after a valid deletion request or after we can no longer verify authorization, unless a longer period is required by law, security, or fraud-prevention obligations. When an exception applies, we isolate the retained data and use it only for that required purpose.

BrandCrew's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is used only to provide or improve the user-facing features described in this policy and is not used for advertising, sale, surveillance, credit determination, or generalized AI or machine-learning model training.

We integrate with services you connect, such as social platforms, email providers, payment processors, analytics, and infrastructure vendors. Those services receive only the data needed to perform the integration you authorize.

When you connect an external account, its provider's own privacy policy also applies to data handled on their side.

Founder-call scheduling is provided through Cal.com. We send Cal.com the contact details, selected time, time zone, brand context, and discussion notes needed to create the meeting and invitation.

We use essential cookies and local storage to keep you signed in, remember preferences, and protect sessions. We may use analytics cookies to understand product performance. You can control non-essential cookies through your browser settings, though some features may not function without session cookies.

We retain account and brand data for as long as your subscription is active or as needed to provide the service. If you delete content, close a brand workspace, or cancel your account, we delete or anonymize associated data within a reasonable period, except where retention is required for legal, billing, or security purposes. Consultation booking records are retained only as long as needed to prepare for, deliver, and follow up on the call or meet applicable legal requirements.

We apply administrative, technical, and organizational safeguards designed to protect your data, including access controls, encrypted transport, and isolated brand workspaces. No online service can guarantee absolute security, so we encourage strong passwords and timely removal of unused integrations.

Depending on your location, you may have rights to access, correct, delete, or export personal data, and to object to or restrict certain processing. You can update much of your account and brand information directly in the product. For other requests, contact us using the details below.

BrandCrew may process and store information in countries other than where you reside. When we transfer data internationally, we use appropriate safeguards consistent with applicable law.

BrandCrew is intended for business users and is not directed to children under 16. We do not knowingly collect personal information from children.

We may update this Privacy Policy from time to time. When we make material changes, we will post the revised policy on this page and update the last updated date above.

Questions about privacy, data requests, billing, or general support can be sent to support@brandcrew.live. You can also visit our Contacts page.