Privacy Policy
Last updated: 8 September 2026
Who we are
This Privacy Policy explains how Branda.social collects, uses and protects personal information when you use the Service. For privacy questions, and to exercise the rights set out below, you can reach us at branda.social.app@gmail.com.
Information we collect
Account data: name, email address, sign-in credentials, and language and display preferences. Content you provide: posts, text, images, video and brand names. Data from the social networks you connect: the connected account's details, post performance data, comments and incoming messages. Billing data: purchase history and subscription status. The payment instrument itself is held by our payment provider, not by us. Technical usage data: IP address, browser type and actions on the site, subject to your cookie consent.
Your content and AI services
This is the most important section of this policy, which is why it is spelled out. When you use the artificial intelligence features, the relevant content is sent to external providers in order to be processed. That includes the text you enter, the descriptions of images and video you request, and public comments from posts you asked to have analysed. The providers are: OpenAI - text and image generation, insights, and comment analysis. Vercel AI Gateway, and through it xAI - video generation. SociaVault - retrieving public comments from posts for sentiment analysis. Zernio (getlate.dev) - connecting to the social networks, publishing and scheduling posts, and collecting performance data. Meta (Facebook, Instagram and Threads) - the unified inbox connects directly to Meta's interface, so replies and messages you send from the inbox reach Meta directly rather than through Zernio. These providers receive the content solely in order to carry out the action you asked for. We do not sell personal information, and we do not pass information to third parties for their own advertising. If content you provide contains other people's personal information - for example in comments retrieved for analysis - it is your responsibility to make sure you have a lawful basis for passing it on.
Cookies and tracking technologies
The site uses cookies that are strictly necessary for it to work, which do not require consent, and measurement and advertising cookies, which do. Measurement and advertising cookies are loaded only after you have given explicit consent in the banner, and separately for each category. You can change your choice at any time. The tools in use are Google Tag Manager and Google Analytics for measurement, PostHog for product analytics, and the Meta Pixel and Google Ads for advertising.
How we use information
To provide, operate and improve the Service and to support customers. To manage subscriptions, billing, credits and security. To send operational messages about your account, such as email confirmation and password reset. To meet legal obligations and to enforce the Terms of Service.
Legal basis
We process personal information to perform our contract with you, on the basis of your consent where consent is required (for example for non-essential cookies), to comply with legal obligations, and for legitimate interests such as securing the Service and preventing abuse.
Sharing with third parties
In addition to the AI providers and social networks listed above, we rely on the following providers: Supabase - database and file storage and sign-in, on servers in the European Union. Vercel - application hosting, in the Frankfurt region. PayPal - payment processing. Resend - sending confirmation and password-reset messages, on servers in Ireland. Sentry - error reporting. Chatwoot - customer support. We will also share information where required by law or court order, or to protect our rights.
Data retention
We keep information for as long as it is needed to provide the Service and to meet legal obligations, including record-keeping duties for tax and accounting. Deleting an account deletes the data associated with it, including brands, posts and usage data. This cannot be undone.
Information security
We apply reasonable administrative, technical and organisational safeguards, including encryption in transit and access separation at the database level, to reduce the risk of unauthorised access. Even so, no security method guarantees complete protection.
International transfers
Information is held primarily on servers in the European Union. Some AI and payment providers operate outside the European Union, including in the United States. For such transfers we rely on those providers' transfer mechanisms, including standard contractual clauses.
Your rights
Subject to applicable law, you have the right to access the information we hold about you, to correct inaccurate information, to request its deletion, to object to or request restriction of processing, and to receive a copy of your information in an accessible format. You can change your cookie choices at any time from the site. Deleting your account yourself from within the app is not available at present. Until it is, write to us at branda.social.app@gmail.com and we will handle the request.
Changes to this policy
We may update this policy from time to time. We will publish the updated version and update the "Last updated" date. We will bring a material change to your attention.
Governing law, jurisdiction and contact
This policy is governed by the laws of the State of Israel. Any dispute relating to it will be subject to the exclusive jurisdiction of the competent courts in Tel Aviv-Jaffa. For privacy enquiries: branda.social.app@gmail.com.