Privacy Policy

Effective date: October 31, 2026 Last updated: October 31, 2026

Brandful, Inc. ("Brandful," "we," "us") provides brand strategy and marketing planning software for small businesses, marketing teams and agencies. This Privacy Policy explains what personal information we collect, how we use it, who we share it with and the choices you have. It applies to our website at bebrandful.com, our app at beta.bebrandful.com, our emails and any other place that links to this policy (together, the "Services").

If you have questions, email us at privacy@bebrandful.com.

1. The short version

• We collect the information you give us (like your name, email and details about your business), information about how you use the Services, and publicly available information about your business and the competitors you name.
• We use it to create your brand strategy, marketing plan and recommendations, run your account, send your weekly brand email and other service emails, send marketing emails you can opt out of, and improve the Services.
• We use trusted service providers, including AI providers, to do this. We don't sell your personal information, and we don't share it for cross-context behavioral advertising.
• You can access, correct, export or delete your information, and unsubscribe from marketing emails at any time.

2. Information we collect

Information you give us

• Account information: your name, email address, password (stored securely by our authentication provider) and, if you add them, teammates' names and emails.
• Business information: your business name, website, social media profiles, industry, location, audience, goals, budget, competitors and anything else you enter during onboarding or while using the Services.
• Content you create or edit: brand frameworks, marketing plans, tasks, goal progress and notes you save in the Services.
• Sign-up information: your email and website when you request a free brand snapshot or join our beta or mailing list.
• Payment information: when you subscribe, our payment processor, Stripe, collects your card details and billing information. We receive limited details such as your billing name, the last four digits of your card and your subscription status. We never see or store your full card number.
• Communications: messages you send us and your replies to our emails or surveys.

Information collected automatically

• Usage information: pages and features you use, tasks you complete, logins and similar activity. We use some of this to calculate your Momentum Score.
• Device and log information: IP address, browser type, device type, operating system, referring pages and dates and times of access.
• Cookies and similar technologies: we use cookies and local storage that are needed to keep you signed in and to make the Services work. We do not currently use advertising cookies.

Information from other sources

• Public information about your business and competitors: to build your analysis, we collect publicly available content from the websites and public social media profiles of your business and the competitors you name, such as page text, images, colors, fonts and public posts. This is business information, but it can include personal information, such as a business owner's name or photo that appears on a public website.
• Search results: we may use public search results to understand your market.

3. How we use information

We use personal information to:

1. Provide the Services: create and update your brand framework, competitive analysis, marketing plan, action items, weekly insights, Brand Strength Score, Momentum Score, competitor tracking and weekly emails.
2. Run your account: authenticate you, process payments, provide support and send service messages such as receipts, security alerts and changes to our terms.
3. Send marketing emails: such as announcements, offers and our blog or mailing-list updates. You can unsubscribe from marketing emails at any time using the link in any of them.
4. Improve the Services: understand how features are used, fix problems and develop new features. Where we use your content to improve our prompts or methods, we do so in a way that doesn't share your content with other customers.
5. Keep the Services safe: prevent fraud, spam and abuse, and enforce our Terms of Service.
6. Meet legal obligations: comply with laws, respond to lawful requests and protect our rights.

Service emails, including your weekly brand email

Some emails are part of the Services themselves, not marketing. These include your weekly brand email (with your Brand Strength and Momentum scores, your next steps, Competitor Watch and goal progress), as well as receipts, security alerts, account notices and changes to our terms. We send service emails to account holders as long as their account is active, because they're how we deliver the Services you signed up for. Unsubscribing from marketing emails doesn't stop service emails. To stop receiving them, you can cancel your subscription or delete your account.

How we use AI

The Services use artificial intelligence to analyze your business and generate recommendations. To do this, we send relevant information (such as your business details and public website content) to our AI provider, OpenAI, through its API. Under OpenAI's API terms, data sent through the API is not used to train OpenAI's models by default. AI-generated content can be inaccurate, so please review it before relying on it.

We do not use AI to make decisions that produce legal or similarly significant effects about you.

4. Legal bases for processing (EU, UK and similar laws)

If you're in the European Economic Area, the United Kingdom or Switzerland, we process your personal information on these legal bases:

• Contract: to provide the Services you signed up for, manage your account and process payments.
• Legitimate interests: to analyze public information about your business and competitors, improve and secure the Services, and send marketing emails to business customers where the law allows. We balance these interests against your rights.
• Consent: where required, for example for certain marketing emails or non-essential cookies. You can withdraw consent at any time.
• Legal obligation: to keep records and respond to lawful requests.

5. How we share information

We don't sell personal information. We share it only as described here:

• Service providers who process information on our behalf, under contracts that limit how they can use it:

• Your team: if you invite teammates or an agency to your account, they can see your brand information.
• Legal and safety reasons: if required by law, or to protect the rights, property or safety of Brandful, our users or others.
• Business transfers: if we're involved in a merger, acquisition, financing or sale of assets, your information may be transferred as part of that deal. We'll tell you if that happens.
• With your permission: in any other case where you ask us to or agree.

6. International transfers

Brandful is based in the United States, and our service providers may process information in the United States and other countries. If you're in the EEA, UK or Switzerland, we rely on appropriate safeguards for these transfers, such as the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, or a provider's certification under the EU-U.S. Data Privacy Framework and its UK and Swiss extensions.

7. How long we keep information

We keep personal information for as long as your account is active and as needed to provide the Services. If you delete your account, we delete or anonymize your personal information within 90 days, except where we need to keep it longer to meet legal, tax or accounting obligations, resolve disputes or enforce our agreements. Backups are overwritten on a regular schedule.

8. Your rights and choices

Depending on where you live, you may have the right to:

• Access the personal information we hold about you and get a copy of it
• Correct information that's inaccurate
• Delete your information
• Export your information in a portable format
• Object to or restrict certain processing, including processing based on legitimate interests
• Withdraw consent where we rely on it
• Opt out of marketing emails at any time, using the unsubscribe link (service emails, including the weekly brand email, continue while your account is active)

To make a request, email privacy@bebrandful.com. We'll respond within the time the law requires (usually 30 days for EU and UK requests, 45 days for California). We may need to verify your identity first. You can also use an authorized agent where the law allows.

If you're in the EEA or UK, you have the right to complain to your local data protection authority.

California residents

If you're a California resident, the California Consumer Privacy Act (CCPA) gives you the rights listed above, including the right to know what personal information we collect, use and disclose, and the right to delete and correct it. In the past 12 months, we have collected the categories of information described in Section 2 (identifiers, commercial information, internet activity, professional or business information and, from public sources, limited personal information), for the purposes in Section 3, and disclosed them to the service providers in Section 5. We do not sell or share personal information as those terms are defined under California law, and we don't use or disclose sensitive personal information for purposes that would require offering a right to limit. We won't discriminate against you for exercising your rights.

9. Security

We use reasonable technical and organizational measures to protect personal information, including encryption in transit, access controls and row-level security in our database. No system is completely secure, so we can't guarantee absolute security. If we learn of a data breach that affects your personal information, we'll notify you as required by law.

10. Children

The Services are built for businesses and aren't directed to children. We don't knowingly collect personal information from anyone under 16. If you believe a child has given us personal information, contact us and we'll delete it.

11. Information about others

When you name competitors or add teammates, you're giving us information about other people or businesses. Please only provide information you have the right to share. We collect only public information about competitors, and we use it solely to provide analysis to you.

12. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we'll notify you by email or in the Services before they take effect. The "Last updated" date at the top shows when it last changed.

13. Contact us

Brandful, Inc. Los Angeles, CA 90036 privacy@bebrandful.com