Privacy Policy

Last updated: 27 July 2026

BrandPing.ai ("we", "us", "our") operates the BrandPing.ai website and mobile application (the "Service"). This Privacy Policy explains how we collect, use, and protect your information when you use our Service.

By using BrandPing.ai, you agree to the collection and use of information as described in this policy.

1. Information We Collect

We collect the following types of information:

• Account information: When you register, we collect your email address and any optional profile details you provide.
• Brand configuration data: The brand names, competitor names, and industry descriptions you enter to configure your monitoring.
• Usage data: Information about how you interact with the Service, including scan history and notification preferences.
• Device information: Your device type, operating system, and app version for technical support purposes.
• Analytics data: Aggregated, anonymised usage statistics that help us improve the Service.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service
• Run brand monitoring scans and deliver alerts
• Send you push notifications and email alerts you have opted into
• Respond to your support requests
• Improve and develop new features
• Comply with our legal obligations

We do not sell your personal data to third parties. We do not use your brand configuration data to train AI models or share it with competitors.

3. Third-Party Services

The Service integrates with the following third parties, each with their own privacy policies:

• Apple App Store / Google Play: For app distribution and in-app purchases
• OpenAI (ChatGPT), Anthropic (Claude), Google (Gemini), and Perplexity (Sonar): When you run a monitoring scan, the brand names, competitor names, and generated prompts associated with your configuration are transmitted to these providers' developer APIs (not their consumer chat products) in order to produce your monitoring results. We do not control how each provider processes this data beyond what is described in its own API terms. As of the date of this policy, each of these providers states that data submitted through its developer API is not used to train its models by default, unlike their consumer-facing chat products - but API terms can change, and we encourage you to review each provider's current terms for the most up-to-date information.
• Supabase: Our database and authentication provider. Supabase stores your account records, brand configuration data, and scan history on our behalf.
• Firebase Cloud Messaging: Delivers push notifications to your device. Firebase Cloud Messaging processes a device token and the notification content required to route alerts to you.
• Firebase Crashlytics: Collects crash and error reports, including device information and app state at the time of a crash, to help us diagnose and fix technical issues.
• Microsoft Clarity: Provides website and in-app analytics, including interaction and session behaviour data (such as clicks, scrolling, and navigation patterns), to help us understand and improve the Service.
• Google Analytics: Provides website analytics, including page views, traffic sources, device/browser information, and aggregated usage statistics, to help us understand how visitors use our website.
• RevenueCat: Manages subscription and entitlement state between the Service and the Apple App Store / Google Play. RevenueCat processes your subscription status, purchase history, and associated identifiers to determine which features you have access to.

4. Cookies and Tracking

Our website uses essential cookies required for the site to function (theme preferences, session management). We do not use advertising cookies or third-party tracking pixels without your explicit consent.

If you are located in the European Economic Area (EEA), United Kingdom, or another region with similar laws, we implement consent mechanisms in accordance with applicable data protection law before setting any non-essential cookies.

5. Your Rights (GDPR)

If you are located in the EEA or UK, you have the following rights under the General Data Protection Regulation (GDPR) and UK GDPR:

• Right of access (Art. 15): Request a copy of the personal data we hold about you
• Right to rectification (Art. 16): Request correction of inaccurate personal data
• Right to erasure (Art. 17): Request deletion of your personal data
• Right to restriction (Art. 18): Request that we limit the processing of your data
• Right to portability (Art. 20): Receive your data in a structured, machine-readable format
• Right to object (Art. 21): Object to processing based on legitimate interests

To exercise any of these rights, contact us at info@brandping.ai. We will respond within 30 days.

6. Your Rights (California Residents — CCPA/CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA):

• Right to know: Request disclosure of the categories and specific pieces of personal information we have collected about you, and the purposes for collection
• Right to delete: Request deletion of personal information we have collected from you, subject to certain exceptions
• Right to correct: Request correction of inaccurate personal information
• Right to opt out: Opt out of the "sale" or "sharing" of personal information — we do not sell or share your personal information as those terms are defined under the CCPA/CPRA
• Right to limit use of sensitive personal information: Direct us to limit use of sensitive personal information to what is necessary to provide the Service
• Right to non-discrimination: We will not discriminate against you for exercising any of these rights

To exercise any of these rights, contact us at info@brandping.ai. We will verify your request and respond within the timeframes required by law.

7. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete your personal data within 30 days, except where we are required by law to retain it longer.

Evidence Locker: Saved AI response snippets stored in your Evidence Locker are retained for as long as your account is active, so that you retain access to your saved evidence history. If you delete your account, Evidence Locker snippets are deleted within the same 30-day period as your other personal data, except where we are required by law to retain them longer.

8. Data Security

We implement industry-standard security measures including encryption in transit and at rest, access controls, and regular security reviews. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

9. International Data Transfers

If you are located outside our primary data region, your data may be transferred to and processed in other countries. We ensure appropriate safeguards are in place for any such transfers in compliance with applicable law.

10. Children's Privacy

The Service is not directed at children under 16. We do not knowingly collect personal data from children under 16. If you believe we have inadvertently collected such information, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the app. Your continued use of the Service after changes are posted constitutes acceptance of the updated policy.

12. Contact Us

For privacy questions or to exercise your rights, contact:

BrandPing.ai
info@brandping.ai