Privacy Policy

We collect information you provide directly to us, including:

• Account information: name, business name, email address, phone number, billing details, and password
• Business data: POS transaction data, menu or service information, and business profile details
• Review data: customer reviews from Google, Yelp, and other platforms you connect
• Call logs: transcripts and recordings from calls routed through our AI Phone agent
• Usage data: how you interact with the platform, features used, and agent configuration choices
• Device & log data: IP address, browser type, operating system, and referring URLs

We use the information we collect to:

• Operate, maintain, and improve the Service and its AI Agents
• Process payments and manage your subscription
• Train AI models exclusively on your own business data to personalize agent behavior for your account
• Send transactional communications (receipts, alerts, setup instructions)
• Provide customer support and respond to your inquiries
• Conduct internal analytics to improve product performance
• Detect, investigate, and prevent fraudulent transactions or unauthorized access

We do not use your data to train general-purpose AI models or to benefit any account other than your own.

We do not sell, rent, or trade your personal information or your customers' data to third parties. We may share data with trusted service providers necessary to operate the Service, including:

• Stripe — payment processing; governed by Stripe's privacy policy
• Twilio — SMS delivery and call routing for our AI Phone agent
• Google — Google Business Profile integration and analytics
• AWS / Cloud infrastructure — secure hosting and data storage

All third-party processors are contractually bound to use your data only for providing services to BrandcastHQ and are subject to appropriate data protection agreements.

We may also disclose information if required by law, legal process, or to protect the rights, property, or safety of BrandcastHQ, our users, or the public.

BrandcastHQ's AI Agents read your business data — including POS data, customer contact lists, review histories, and call transcripts — to carry out automated tasks on your behalf. This processing is necessary to provide the core Service.

We are committed to privacy-by-design in our AI systems. Your business data is processed within isolated environments and is never used to train models that serve other customers. We maintain awareness of and work toward compliance with GDPR and CCPA requirements for AI-driven data processing.

We retain your data for as long as your account is active. If you cancel your account, we will retain your data for a period of 90 days to allow for account recovery. After 90 days, all personal data, business configurations, contact lists, AI agent histories, call logs, and content histories will be permanently deleted from our systems.

Billing and payment records are retained for 7 years as required by applicable financial regulations.

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: request a copy of the data we hold about you
• Portability: receive your data in a machine-readable format
• Correction: request that inaccurate or incomplete data be corrected
• Deletion: request that your personal data be erased (subject to legal retention obligations)
• Objection: object to certain types of processing

To exercise any of these rights, contact us at hello@brandcasthq.com. We will respond within 30 days.

We use cookies and similar technologies to operate the Service and understand how users interact with it. We use analytics cookies (e.g., for product usage tracking) only. We do not use advertising or tracking cookies, and we do not sell cookie data to advertisers.

You can disable cookies through your browser settings, but doing so may affect the functionality of the Service.

We take data security seriously. BrandcastHQ employs the following protections:

• 256-bit AES encryption for data at rest
• TLS 1.3 encryption for all data in transit
• Regular internal security reviews and third-party dependency scanning
• Security findings remediated on a risk-prioritized basis
• Role-based access controls limiting employee data access

No method of transmission over the internet is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security.

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from minors. If we become aware that a minor has provided personal data, we will take steps to delete that information promptly. If you believe we have inadvertently collected information from a minor, please contact us at hello@brandcasthq.com.

If you have questions, concerns, or requests related to this Privacy Policy, please contact:

BrandcastHQ LLC — Privacy Team
Email: hello@brandcasthq.com
Mailing address available on request to hello@brandcasthq.com.