Privacy Policy

Account details. Your name, email address and profile image when you sign up, including through Google sign-in.

Connected social accounts. When you connect an account, we store the access tokens the network issues and basic account details (such as the account name, username and avatar) needed to publish and display it.

Content you create. The posts, captions, media and schedules you compose, and records of what was published.

Analytics.Aggregate metrics (reach, engagement, follower counts) retrieved from each network’s own insights APIs for the accounts you connect.

We use your data to operate the Service: to publish and schedule your posts, display your accounts and content, show analytics, notify you of failures or accounts that need reconnecting, and secure your workspace. We do not sell your personal data or your connected-account data.

Access tokens are used only to perform the actions you authorize on the connected account — publishing, uploading media, reading basic profile information and retrieving insights. Tokens are stored with restricted access and are removed when you disconnect the account or delete your account.

Data obtained from Meta, X, LinkedIn and TikTok is used solely to provide the Service to you and is handled in accordance with each platform’s developer requirements.

Your workspace data is visible to the members of your organization according to their role and project assignments. We use infrastructure and processing providers (for hosting, database, storage and, where configured, email delivery) that process data on our behalf under appropriate safeguards. We may disclose data if required by law.

We retain your data while your account is active. Deleting a post removes it from Brandefer (it does not remove content already published to a network). Disconnecting an account removes its stored tokens. Deleting your account removes your personal data and connected-account access, subject to any records we must keep for legal or security reasons.

You can disconnect any social account, delete content, and request deletion of your account. Depending on your location, you may have rights to access, correct or delete your personal data; contact us to exercise them.

We use row-level access controls, restricted service credentials and encryption in transit to protect your data. No system is perfectly secure, but we work to limit access to only what each feature needs.

We may update this policy; the “last updated” date reflects the latest version. For privacy questions or data requests, contact privacy@brandefer.com.