This Privacy Policy explains how Marketing Machine, LLC, doing business as BrandCTRL AI (“BrandCTRL,” “we,” “us,” or “our”), handles information when you visit brndctrl.ai, use the BrandCTRL application, or connect an advertising or marketing account to our services (collectively, the “Services”).

Information we collect

Depending on how you use the Services, we may collect:

Account and contact information, such as your name, business name, email address, role, and account credentials.
Business and campaign information, such as brand materials, audiences, offers, creative assets, campaign settings, advertising budgets, approvals, and instructions you provide.
Connected-platform data, including account, business portfolio, Page, ad account, campaign, ad set, ad, Pixel, and similar identifiers; permissions granted; advertising performance, spend, conversion, and delivery data; and access tokens used to operate the connection.
Communications, including support requests, feedback, wait-list submissions, and other messages you send us.
Usage and device information, such as IP address, browser and device type, pages or features used, timestamps, and security or diagnostic logs.

How we use information

We use information to:

provide, maintain, secure, troubleshoot, and improve the Services;
authenticate users and connect the third-party accounts they authorize;
create, update, deliver, monitor, report on, and optimize marketing campaigns at a customer’s direction;
show performance results, detect delivery issues, and recommend budget or campaign changes;
communicate about the Services, onboarding, support, security, and administrative matters;
prevent fraud, misuse, or violations of our terms; and
comply with law and enforce or protect legal rights.

Cookies and advertising

The Services use cookies and similar browser storage to keep you signed in, protect your session, and support the features you use. brndctrl.ai also uses Google Analytics, which sets cookies to measure how visitors use the site. We do not allow third parties to serve advertisements through the Services.

Meta Platform Data

If you connect Meta, we receive Meta Platform Data only for the business assets and permissions you approve. We use that data to manage ads and associated Page activity, retrieve advertising insights, provide reporting, and support campaign optimization for your business. We do not use Meta Platform Data to build profiles for unrelated advertising, and we do not sell it.

A connected Meta access token is treated as a credential, restricted to authorized systems and personnel, and used only to make requested or approved calls to Meta. You may disconnect Meta or request deletion as described in our Data Deletion Instructions.

Google user data

When you connect Google, we receive the account identity, permissions, and authorization credentials needed for the connection. The data we access depends on the features you authorize:

Marketing reporting: Google Analytics and Search Console property information and performance data, and YouTube channel information and analytics, to show your results and support your marketing work.
Business Profile management: the business locations, profiles, reviews, and performance information needed to manage the locations you authorize.
Documents and spreadsheets: the contents of Google Docs or Sheets links you provide in a request. We store a copy with your request and may process that content through our AI service providers to understand and carry out that request. We do not browse your account for unrelated files or edit the original files through this connection.
Owner sales mailbox: a separate connection lets the mailbox owner approve and send recipient-requested messages and reports. Optional inbox monitoring, when enabled through a separate read-only connection, checks related replies and delivery notices to record responses, honor stop requests, and detect delivery failures. It does not automatically reply to messages.

BrandCTRL AI uses YouTube API Services. When a channel owner connects a YouTube channel, we read the channel’s name and ID and its YouTube Analytics reports, such as views, watch time, and video performance, and store them to show the channel’s results over time. This connection cannot upload, edit, or delete videos or change channel settings. Use of YouTube is governed by the YouTube Terms of Service, and Google’s handling of your information is described in the Google Privacy Policy.

We use Google user data only to provide or improve the user-facing features described here. We may transfer it to hosting, storage, security, and AI service providers only as needed to provide those features and subject to the same use restrictions. We do not sell Google user data, use it to serve advertisements or build advertising profiles, or use it to train or improve generalized AI or machine learning models.

People may access Google user data only with your affirmative agreement for specific data, when needed for security or legal compliance, or when the data is aggregated and anonymized for internal operations. These Google-specific limits also apply to the disclosures described elsewhere in this policy.

BrandCTRL AI’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

You can disconnect Google or YouTube in the application at any time. You can also revoke BrandCTRL AI’s access through the Google security settings page, which lists your Google Account connections. You can request deletion of stored Google data by emailing privacy@brndctrl.ai.

How we disclose information

We may disclose information:

to hosting, database, security, analytics, communications, and other vendors that process it for us under appropriate obligations;
to Meta, Google, and other platforms when you direct us to connect an account or carry out an action;
to authorized members of your organization and service providers you designate;
when required by law or reasonably necessary to protect rights, safety, and the integrity of the Services; or
in connection with a financing, merger, acquisition, reorganization, or sale of assets, subject to customary safeguards.

We do not sell personal information for money.

Retention and deletion

We retain information for as long as needed to provide the Services, maintain legitimate business and security records, resolve disputes, and satisfy legal obligations. Disconnecting an account removes its stored connection credentials and stops future access through that connection. Previously imported files, reports, correspondence, and audit records may remain while needed for those purposes; disconnecting alone does not delete all historical records. You may request their deletion. We delete or de-identify data after a valid deletion request, except for limited records needed for legal or security purposes, minimal records needed to honor requests not to contact someone, and protected backups that age out under our backup practices.

Your choices and privacy rights

You may ask to access, correct, or delete information about you, or object to or restrict certain processing where applicable. You may also disconnect a third-party account to stop future access. We may need to verify your identity and authority before completing a request. Authorized agents may submit requests where permitted by law.

Security

We use administrative, technical, and organizational safeguards designed to protect information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Children

The Services are intended for businesses and are not directed to children under 13. We do not knowingly collect personal information from children under 13.

International use

BrandCTRL is based in the United States. If you use the Services from another country, information may be transferred to and processed in the United States and other countries where our providers operate.

Changes to this policy

We may update this policy as our Services or legal obligations change. We will post the updated version here and change the date above. We will provide additional notice when required by law.

Contact us

For privacy questions or requests, email privacy@brndctrl.ai.