Our Data Promise
The privacy policy in plain English. Every answer links to the section it comes from, so you can check it rather than take our word for it.
Last updated: 16 September 2026
What we never do
- We never sell your personal data.
- We never share it for anyone else's advertising.
- We never use your content to train AI models.
- We never send your email address, password or payment details to an AI provider.
- We never see your password — it is stored only as a salted hash.
The questions people actually ask
What do you actually collect?
Your email and password (stored only as a salted hash — nobody here can read it), the brands, domains and competitors you set up, the public pages we analyze, and the prompts we run with the answers that come back. Only your email and password are required to have an account; a brand name and domain are required for any analysis to run. Everything else is optional and only makes the output better.
Full detail: What we collect
What do you send to AI providers?
The prompt text, your brand and competitor names and domains, and relevant public page content — because measuring how assistants describe you means actually asking them. Your email address, password and payment details are never sent. Some analyses run on a model we host ourselves, and in that case nothing leaves our infrastructure.
Full detail: What we send to AI providers
Do you train AI models on my data?
We don't, and we don't sell your content. One provider we use may: when our self-hosted model is unavailable, analysis runs on DeepSeek, which may use what it receives to train its models. No other AI provider we use — OpenAI, Anthropic, Google, Perplexity or xAI — trains on your data. The AI Policy sets out exactly what leaves our systems, where it goes, and what each provider may do with it.
Full detail: Training
Does my data leave the EU?
Yes, when you use third-party AI providers. Most are based in the United States; those transfers rely on the European Commission's Standard Contractual Clauses, or the EU–US Data Privacy Framework where the provider is certified under it. DeepSeek, used only when our self-hosted model is unavailable, processes data in China. If you would rather nothing left the EEA, ask us and we will restrict your workspace to self-hosted models.
Full detail: International transfers
How long do you keep it?
Account data for as long as your account exists, and up to 30 days after it is deleted. Delete a brand or a prompt and its history goes with it. Free-report requests are kept 12 months. Server logs about 30 days, analytics no more than 24 months. Invoices are the exception: Bulgarian tax law requires roughly 10 years, and that overrides a deletion request for those records.
Full detail: How long we keep things
What are my rights?
If you are in the EEA or UK: get a copy of your data, have it corrected, have it deleted, restrict processing during a dispute, take it elsewhere in a machine-readable format, object to anything we base on legitimate interests, and withdraw consent at any time. Email us and we answer within one month. We may ask you to confirm who you are first, so we don't hand your data to someone else.
Full detail: Your rights
How do I delete my account?
Settings, at the bottom: Delete account. You confirm by typing your email address, and it removes your workspaces, brands, tracked prompts and their history, cancelling any live subscription as it goes. It cannot be undone, so export anything you want to keep first. You can also delete individual brands and prompts on their own at any time, and email us if you would rather we did it for you.
Full detail: Suspension and termination
Is anything decided about me automatically?
Scores, priorities and recommendations are generated automatically, and they decide what the product suggests to you — nothing more. No decision with legal or similarly significant effect is made about you by automated means, and you are always free to ignore a recommendation.
Full detail: Automated decisions
Still not sure?
Ask us. Write to contact@brandreco.com and a person will answer — a question about your data is not a support ticket to be deflected.
Muplex Technologies Ltd. · UIC 204266947 · VAT BG204266947 · Bulgaria
Questions about this page? contact@brandreco.com