Privacy Policy

This Privacy Policy describes how Brandflows (“Brandflows,” “we,” “us,” or “our”) collects, uses, and shares information when you use our websites, applications, and related services (collectively, the “Services”) at brandflows.ai and associated domains.

Last updated: April 2026

1. Information we collect

Account information

When you register or communicate with us, we may collect identifiers and contact details such as your name and email address, authentication data, billing identifiers (if applicable), and preferences you provide in your profile or support requests.

Brand project data

The Services are designed to help you develop brand strategy. We process content you submit or generate through the platform, including brand names, strategic inputs, positioning, naming territories, creative briefs, notes, uploads, and other materials associated with your projects (“Project Data”).

Usage and analytics

We collect usage analytics about how you interact with the Services, such as pages or screens viewed, features used, approximate location derived from IP address, device and browser type, referring URLs, and timestamps. We also use standard web analytics technologies (for example, cookies or similar technologies) to understand traffic, performance, and product improvement opportunities, consistent with your choices and applicable law.

2. Artificial intelligence and third-party models

Brandflows is an AI-assisted brand strategy platform. To provide core functionality, user input and Project Data may be transmitted to large language models and other AI systems operated by us or by third-party providers for processing (for example, generation, scoring, summarization, or formatting of outputs).

We do not use your brand project data to train third-party or proprietary AI models. AI processing is performed to deliver the Services you request, in accordance with our agreements with providers and this Policy. Providers may process data under their own terms and safeguards; we select and configure providers to support confidentiality and security for customer content where commercially reasonable.

3. How we use information

We use the information above to:

Provide, operate, maintain, and improve the Services;
Authenticate users, process transactions, and communicate about your account;
Monitor usage, troubleshoot issues, detect abuse or fraud, and protect security;
Comply with legal obligations and enforce our terms; and
Send service-related messages and, where permitted, marketing (you may opt out of marketing as described in those communications).

4. Sharing of information

We may share information with:

Service providers who assist us (for example, hosting, analytics, payment processing, email delivery, customer support, and AI inference), subject to contractual obligations;
Professional advisors where necessary (for example, lawyers or accountants);
Authorities when required by law or to protect rights, safety, and integrity; and
A successor in a merger, acquisition, financing, or sale of assets, with notice as required by law.

We do not sell your personal information as “sale” is commonly defined in U.S. state privacy laws.

5. Retention

We retain information for as long as needed to provide the Services, comply with law, resolve disputes, and enforce agreements. Retention periods may vary by data type and legal requirements.

6. Security

We implement administrative, technical, and organizational measures designed to protect information. No method of transmission or storage is completely secure; we cannot guarantee absolute security.

7. Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, or export certain personal information, or to object to or restrict certain processing. You may also have the right to lodge a complaint with a supervisory authority. To exercise applicable rights, contact us using the email below. We may need to verify your request before responding.

8. International transfers

If you access the Services from outside the United States, your information may be processed in the United States or other countries where we or our providers operate, which may have different data protection laws than your jurisdiction.

9. Children

The Services are not directed to children under 16 (or the age required in your jurisdiction). We do not knowingly collect personal information from children. If you believe we have collected such information, contact us and we will take appropriate steps to delete it.

10. Changes to this policy

We may update this Privacy Policy from time to time. We will post the revised version on this page and update the “Last updated” date. Where required, we will provide additional notice or obtain consent.

11. Contact

For general questions about Brandflows, please start with our Contact Us page. Privacy-specific requests: privacy@brandflows.ai