Privacy Policy

1. Information We Collect

1.1 Information You Provide

• Account Information: Name, email address, phone number, organization details
• Profile Data: Avatar, preferences, settings, bio
• Content: Content you create, upload, and publish through our platform
• Communications: Messages you send to us or through our platform
• Payment Information: Payment details processed through secure third-party processors (we do not store full credit card numbers)

1.2 Information Collected Automatically

• Usage Data: How you interact with our Service, features used, pages visited
• Device Information: Browser type, operating system, device identifiers
• Log Data: IP address, access times, referring URLs
• Cookies: Session cookies, preference cookies, analytics cookies

1.3 Information from Third-Party Platforms

When you connect your social media accounts (Facebook, Instagram, YouTube, Twitter, LinkedIn, TikTok), we collect:

• Profile information (name, profile picture, username)
• Account connection status
• Post performance metrics (when you authorize us)
• Audience insights (aggregated, anonymized)

2. How We Use Your Information

2.1 Service Provision

• Provide, maintain, and improve the Service
• Process and fulfill your requests
• Create and manage your account
• Enable content creation and publishing
• Provide customer support

2.2 Personalization

• Customize your experience
• Provide relevant content recommendations
• Remember your preferences and settings

2.3 Communication

• Send service-related notifications
• Respond to your inquiries
• Send marketing communications (with your consent)
• Provide updates about new features

2.4 Analytics and Improvement

• Analyze usage patterns and trends
• Improve Service performance and features
• Conduct research and development
• Train AI models (with anonymization)

2.5 Security and Compliance

• Detect and prevent fraud and abuse
• Ensure security of our Service
• Comply with legal obligations
• Enforce our Terms of Service

3. How We Share Your Information

3.1 We DO NOT Sell Your Data

BrandCast Studio AI does not and will not sell your personal information to third parties.

3.2 Sharing with Your Consent

• Social Media Platforms: When you authorize us to post content to your connected accounts
• Team Members: Within your organization or team (as you configure)

3.3 Service Providers

We share data with trusted third-party service providers who assist us:

• Cloud hosting and storage (AWS, Azure, GCP)
• Payment processing (Stripe, PayPal)
• Email delivery (SendGrid, Mailgun)
• Analytics (Google Analytics, Mixpanel)
• Customer support (Zendesk, Intercom)

These providers are contractually obligated to protect your data and use it only for specified purposes.

3.4 Legal Requirements

We may disclose information if required by law or to:

• Comply with legal processes (subpoenas, court orders)
• Enforce our Terms of Service
• Protect rights, property, or safety
• Investigate fraud or security issues

3.5 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

4. Data Security

4.1 Security Measures

• Encryption: TLS/SSL for data in transit, AES-256 for data at rest
• Access Controls: Role-based access, multi-factor authentication
• Infrastructure: Secure cloud hosting with industry-leading providers
• Monitoring: 24/7 security monitoring and intrusion detection
• Audits: Regular security audits and penetration testing
• Training: Employee security awareness training

4.2 Incident Response

In the event of a data breach, we will:

• Investigate and contain the breach
• Notify affected users within 72 hours
• Report to regulatory authorities as required
• Take corrective actions to prevent recurrence

5. Your Rights and Choices

5.1 Access and Portability

• Request a copy of your personal data
• Export your data in machine-readable format

5.2 Correction and Update

• Update your account information at any time
• Request correction of inaccurate data

5.3 Deletion

• Delete your account through account settings
• Request deletion of specific data
• Data will be deleted within 30 days (subject to legal retention requirements)

5.4 Opt-Out

• Unsubscribe from marketing emails (link in every email)
• Disable cookies through browser settings
• Disconnect social media accounts

5.5 Object and Restrict

• Object to certain data processing activities
• Request restriction of processing

5.6 Withdraw Consent

• Withdraw consent for data processing at any time
• Note: May affect Service availability

6. Data Retention

We retain your data for as long as necessary to:

• Provide the Service
• Comply with legal obligations
• Resolve disputes
• Enforce agreements

Retention Periods:

• Active accounts: Data retained while account is active
• Deleted accounts: Data deleted within 30 days (except where legal retention required)
• Backups: Backup data retained for up to 90 days
• Analytics: Aggregated, anonymized data may be retained indefinitely
• Legal holds: Data may be retained longer if required by law

7. International Data Transfers

BrandCast Studio AI operates globally. Your data may be transferred to and processed in countries other than your own. We ensure appropriate appropriate safeguards:

• EU-US Data Privacy Framework: For transfers from EU to US
• Standard Contractual Clauses: EU-approved data transfer agreements
• Adequacy Decisions: Transfers to countries with adequate protection

8. Children's Privacy

Our Service is not intended for children under 13 (or 16 in the EU). We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately and we will delete it.

9. Cookies and Tracking

9.1 Types of Cookies

• Essential Cookies: Required for Service operation
• Preference Cookies: Remember your settings and choices
• Analytics Cookies: Help us understand usage patterns
• Marketing Cookies: Used for targeted advertising (with consent)

9.2 Cookie Management

You can control cookies through:

• Browser settings (block, delete, or accept)
• Our cookie consent banner
• Privacy settings in your account

Note: Disabling essential cookies may affect Service functionality.

10. Third-Party Links

Our Service may contain links to third-party websites and services. We are not responsible for their privacy practices. We encourage you to review their privacy policies.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Posting the updated policy with a new "Last Updated" date
• Sending an email notification
• Displaying a prominent notice in the Service

Changes become effective 30 days after notice. Continued use of the Service after changes constitutes acceptance.

12. Regional Privacy Rights

12.1 GDPR (European Union)

If you are in the EU, you have additional rights under GDPR:

• Right to be informed
• Right of access
• Right to rectification
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object
• Rights related to automated decision-making

12.2 CCPA (California)

If you are a California resident, you have rights under CCPA:

• Right to know what personal information is collected
• Right to know if personal information is sold or shared
• Right to opt-out of sale (we don't sell data)
• Right to deletion
• Right to non-discrimination

12.3 Other Regions

We respect privacy rights in all regions and comply with applicable local laws including PIPEDA (Canada), LGPD (Brazil), and others.

13. Contact Us

14. Verification and Requests

To exercise your privacy rights, contact us using the information above. We will verify your identity before processing requests. Verification may require:

• Account login credentials
• Email confirmation
• Additional identifying information

We will respond to verified requests within:

• 30 days (standard)
• 45 days (complex requests)
• 72 hours (breach notifications)