Privacy policy

Information we collect

• Your account. Your name, email address, and your workspace's name, logo and time zone. You sign in with a link we email you, or with Google where that is offered.
• What you put in. Your brand profile, campaigns, briefs, deal types, contract templates, contract documents you upload, notes, and the creators you save or rate.
• What connected services send. Data from the accounts you connect: Meta, your mailbox, Shopify, Stripe and Slack. Each is described below.
• Usage and log data. IP address, browser type and a record of requests, kept for security and troubleshooting.

How we use it

To run the service: finding and ranking creators for you, drafting messages for your approval, sending what you approve, preparing and recording contracts, charging you and paying creators, reporting results, and telling you when something needs you. We also use it to keep the service secure and to meet legal obligations. We do not sell personal information and we do not use it for advertising.

AI

Brandley's agents run on AI models from Anthropic. To do their work they are sent the relevant parts of your workspace: your brand profile and briefs, information about creators, and the email threads they draft replies to. Agents suggest and you decide: no agent sends an email, signs a contract, pays anyone or turns on an ad by itself. We do not use your data to train AI models, and under its commercial terms Anthropic does not train its models on it either.

Cookies

We use a cookie to keep you signed in, and your browser remembers your light or dark theme. We do not use advertising cookies or third-party analytics.

Instagram and Meta data

When you connect Meta, Brandley uses Meta's APIs on your behalf to search Instagram's creator marketplace, to read the posts and results of creators you work with, and, when someone on your team turns one on, to run a creator's post as a partnership ad from your ad account.

We read creator and post statistics from Meta when a page loads and do not keep them. What we store is your access tokens (encrypted), the IDs of your Facebook Page, Instagram account and ad account, and the creator usernames and post links you save to campaigns and contracts. We do not sell Meta data, use it for advertising, or use it to train AI models.

Disconnecting Meta in Connectors deletes the tokens and IDs right away. You can also remove Brandley from your Facebook Business Integrations settings. Our use of this data is subject to the Meta Platform Terms and Developer Policies.

Your mailbox

If you connect a mailbox, Brandley sends the outreach you approve from your own address and reads creators' replies so they appear in your workspace. We keep the messages in conversations with creators you contact through Brandley. We do not use mailbox data for advertising, sell it, or use it to train AI models. Disconnecting the mailbox in Connectors ends our access.

Shopify

If you connect a Shopify store, Brandley creates the creator discount codes and links you ask for, and reads the orders placed with them: the order number and date, amounts, refunds and the code used. We use this to credit sales to creators, work out commissions and report results to you. When a contract includes a gift, Brandley places a $0 order in your store with the creator's shipping address.

We do not store your customers' names, email addresses, postal addresses or phone numbers. Your store's access tokens are stored encrypted, and are deleted when you disconnect the store, or when Shopify asks us to after you uninstall the app. Shopify's own handling of data is covered by its privacy policy.

Payments

Stripe processes payments. Your card or bank details go to Stripe, not to us; we keep a record of each payment, its amount and its status. Creators set up payouts with Stripe directly, and Stripe collects the identity and bank details that requires. Stripe's handling of data is covered by its privacy policy.

If a brand contacted you through Brandley (creators)

Brands use Brandley to find creators, contact them, agree partnerships and pay for them. If a brand reached you through Brandley, or you applied to a brand's campaign on its Brandley brief page, this section is for you. You don't need a Brandley account. The brand decides why it contacts you and what it agrees with you; Brandley processes that information on the brand's behalf.

• What we hold. Your Instagram username and email address; if you apply to a campaign, what you wrote and the rate you asked for, and the IP address you applied from for a short while, to stop abuse of the form; the messages between you and the brand; the terms you agree; a record of your signature on a contract (your name, the time, and the IP address and browser you signed from); drafts you send for review; your shipping address and phone number if you are sent a gift; notes the brand's team adds; and a record of payments to you.
• Why. So the brand can reach you, keep track of the conversation, agree and record the partnership, send you product and pay you.
• Your choices. Tell the brand, or us, that you don't want to hear from it and that brand will not contact your address through Brandley again. To see, correct or delete what we hold about you, email privacy@brandley.ai from the address we contacted. We respond within 30 days.

Who we share it with

The members of your workspace; creators, for what you send them; and the service providers below, each of which processes data only to provide its service to us. We also disclose information when the law requires it or to protect our rights. If you connect your own AI agent to Brandley, it acts with your permissions and sees what you can see.

• Google Cloud: hosting, the database and file storage (Cloud Run, Cloud SQL, Cloud Storage). United States.
• Anthropic: the AI models behind Brandley's agents. United States.
• Stripe: charging brands and paying creators. United States.
• Resend: delivery of the emails Brandley itself sends: sign-in links, notifications, and contract, payout and draft links. United States.
• Unipile: the connection to a brand's own mailbox, so outreach is sent from it and creators' replies are read in it. Location as disclosed by the provider.
• Meta: creator discovery on Instagram, post and ad data, and partnership ads, through Meta's APIs. United States.
• Shopify: discount codes, links, orders and gift orders in a brand's connected store.
• Slack: notifications to the channels a brand chooses, when the brand connects Slack. United States.

How long we keep it, and deleting it

We keep your workspace's data while the workspace exists. When you ask us to delete a workspace we delete it and everything in it within 30 days. Signed contracts and payment records are kept only as long as tax and payment law requires. The steps are on our data deletion page.

Security

Data is encrypted in transit, and the access tokens for your connected services are encrypted before they are stored. No method of storage or transmission is completely secure, and we cannot guarantee absolute security. To report a vulnerability, email privacy@brandley.ai.

Your rights

Depending on where you live, you may have the right to see, correct, delete or receive a copy of your personal information, and to object to certain uses. California residents have these rights under the CCPA. We do not sell personal information or share it for cross-context behavioral advertising. To make a request, email privacy@brandley.ai. We respond to verified requests within 30 days.

Children

Brandley is for businesses and adults. It is not directed to anyone under 18, and we do not knowingly collect their information.

Changes and contact

We may update this policy. Material changes appear on this page with a new date. Questions: privacy@brandley.ai.