Privacy Policy

1. Introduction & Overview

Welcome to Brand on AI (“we”, “our”, or “us”), accessible at https://brandonai.cc. We operate an AI brand perception and reputation monitoring platform that enables businesses to audit how contemporary AI platforms (including ChatGPT, Claude, and Gemini) present and recommend their brands.

This policy explains what data the service handles, why it is used, and how to contact us about it.

2. Data Controller & Contact

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal information, you may contact our team at:

3. Information We Collect

We collect data needed to provide reports, accounts, and monitoring, as well as usage analytics:

• Audit Query Inputs: When you submit a brand name or organization identifier for an AI audit, that brand name is logged and processed to query AI model APIs and generate analytical reports.
• Account & Notifications: If you create an account, we store your email, verified alert address, saved reports, and monitoring choices. We use Resend to deliver sign-in codes and monitoring alerts.
• Usage analytics: Cloudflare Web Analytics, Google Analytics 4, and our own event records may process page views, referral and campaign information, browser or device data, and report actions. We mark our own test traffic separately.
• Abuse prevention: We hash network IP addresses to limit repeated report and sign-in requests. Short-lived request records are periodically removed.

4. How We Process Data & Third-Party AI Subprocessors

Your inputs are processed for the following dedicated purposes:

• Multi-Model Audit Generation: Submitted brand names are included in standardized prompts sent through our TokenFlow AI gateway to configured third-party model providers to retrieve model responses.
• Caching & Report Delivery: Completed reports are stored with a unique identifier to allow fast loading and sharable link generation.
• Essential Infrastructure: Our edge application and database storage are hosted on Cloudflare Workers and D1, providing global edge execution with automated DDoS mitigation.

We do not sell, rent, monetize, or trade your personal information or email addresses with external advertisers or data brokers.

5. Your Data Requests

Depending on your jurisdiction, you possess specific statutory rights regarding your personal information:

• Right of Access & Portability: You may request a copy of the personal information we hold about you.
• Right to Rectification: You may ask us to correct inaccurate or incomplete information.
• Right to Erasure (“Right to be Forgotten”): You may request deletion of your account information and saved report associations.
• Browser privacy signals: Our own optional browser event tracking checks Do Not Track (DNT) and Global Privacy Control (GPC) signals. An explicit report submission is still recorded to operate the service.

To exercise any of these rights, please email us at support@brandonai.cc. We will verify and handle requests according to applicable law.

6. Data Security & Retention

Account sessions use secure, HTTP-only cookies on HTTPS. Account information, report metadata, and raw model responses are stored in Cloudflare D1. Shared report links can be viewed by anyone who has the link. We retain reports for history and monitoring until our retention policy changes or a verified deletion request is processed.

7. Updates to this Policy

We may update this Privacy Policy from time to time to reflect changes in our technology, regulatory requirements, or service offerings. Significant revisions will be denoted by updating the “Last Updated” date at the top of this document.