Privacy Policy
Last updated 15 September 2026.
Who we are
brand AI, trading as Brand Buddy AI at brandbuddyai.shop, is the seller and data controller responsible for the personal data described in this policy. Brand Buddy AI is a social media management service that plans, writes, designs and publishes social media content for a business.
Information you give us
Your name and email address, your business details (description, products and services, audience, goals, brand colours, logo, tone of voice), the content you create with us, and any pictures you upload.
Information we receive from connected social platforms
When you connect an account you sign in on the platform's own page. We never see or store your social media password. With your permission we receive and store: the identity of the Facebook Page, Instagram professional account, LinkedIn profile or Page, or X account you choose (name, id, profile picture and username); the access tokens needed to publish on your behalf; the posts we published for you and their platform post ids and links; and post performance figures such as impressions, reach, likes, comments, shares, saves and clicks. We request only the permissions needed to list your accounts and publish and measure your own posts. We do not read your private messages, your friends, or content that is not yours.
How we use it
To build your brand profile, plan and write content, generate branded images, publish at the times you choose, show you results, and keep your connections working. Business information you provide is sent to AI services to produce your plan, captions and images; it is not used to train public models. We do not sell your data and we do not share it with advertisers.
Our legal bases for processing
We process account, business, content and connected-account data to perform our contract with you and provide the service you request. We process security, fraud-prevention, service reliability and product improvement data for our legitimate interests in operating a safe and effective service. We process data where necessary to meet legal obligations, including accounting and tax requirements. Where the law requires consent, such as for optional marketing or non-essential cookies, you may withdraw that consent at any time without affecting earlier lawful processing.
Who we share it with
Service providers that make the product work: our hosting and database provider, our AI provider for generating text and images, and the social platforms you connect (Meta for Facebook and Instagram, LinkedIn, X). We also share the information needed to complete an order with Stripe, our payment processor. Stripe handles checkout, payment details, subscription administration and invoices under its own privacy terms. brand AI remains the seller of the service. Professional advisers and public authorities may receive data where legally required. Each recipient receives only what is needed for its specific purpose.
How long we keep it
Your business data and content stay while your account is open. Access tokens are kept only while the connection is active and are deleted the moment you disconnect the account. Performance figures are kept with the post they belong to. When you delete your account, everything is removed immediately as described below. Records we must keep for accounting are retained only as long as the law requires.
International transfers
Some service providers may process data outside your country. Where applicable, we use recognised legal safeguards such as adequacy decisions or standard contractual clauses for transfers from the UK or EEA.
Security
Access tokens and generated files are stored server-side only and are never exposed to the browser. Images and logos live in private storage and are only reachable through short-lived links created for you.
Your rights and how to delete your data
You can view, edit or delete your business, posts and images at any time. Disconnecting an account deletes its stored tokens. In Settings you can download everything we hold as a single file, and delete your account permanently — that removes your business, posts, images, connections and login. Full step-by-step instructions are on our data deletion page. Depending on where you live, you may also have rights to access, correct, erase, restrict or object to processing, receive a portable copy, withdraw consent, and complain to your local data protection authority. We respond to valid requests within the period required by applicable law, normally within one month under UK or EEA data protection law.
Cookies
We use essential storage and cookies to keep you signed in, protect your account and remember necessary preferences. If optional analytics or marketing cookies are introduced, we will request consent where required and provide a way to change that choice.
Children
Brand Buddy AI is for businesses and is not intended for anyone under 16.
Changes and contact
If this policy changes we will update the date above. For any privacy question, or to ask us to delete your data on your behalf, email privacy@brandbuddyai.shop.