Privacy Policy

Introduction

Access to Tools Inc. d/b/a Brand.ai ("Brand.ai," "we," "us," or "our") respects your privacy and is committed to protecting it. This Privacy Policy explains how we collect, use, disclose, and protect information when you visit or interact with our public website, including brand.ai and any other sites that link to this Privacy Policy (collectively, the "Website"), and when you register for or use the brand.ai platform available at app.brand.ai and any related software and services (the "Platform" and, together with the Website, the "Services").

Where you use the Platform on behalf of an organization that has a separate written agreement with us (including any data processing agreement), we process content submitted to the Platform on that organization’s behalf, and that agreement governs our handling of such content to the extent of any conflict with this Privacy Policy.

By accessing or using the Services, you agree to the practices described in this Privacy Policy.

Scope

This policy applies to:

  • Visitors to our Website
  • Individuals who interact with us through forms, sign-ups, or marketing pages
  • Registered users of the Platform

This policy does not apply to:

  • Customer Content (as defined below), to the extent a separate written agreement with the customer governs our handling of it
  • Third-party services we do not control

Information We Collect

Information You Provide

We may collect information you provide directly, such as when you:

  • Join a waitlist or request a demo
  • Subscribe to newsletters
  • Submit contact forms or send emails
  • Apply for jobs or participate in surveys
  • Register for, or are invited by your organization to, a Platform account

Information you provide may include:

  • Name and contact details
  • Professional information (company, role)
  • Message content
  • Account credentials and billing details (full payment card information is collected and processed by our payment processor and is not stored by us)
  • Any other information you choose to share

Customer Content

Customers and their authorized users may submit text, documents, images, and other content and materials to the Platform ("Customer Content") and receive output generated from it. We use Customer Content to provide, maintain, secure, and support the Services. We do not use Customer Content or generated output to train or fine-tune any artificial intelligence or machine-learning model, except to the extent we have expressly agreed otherwise in writing with the customer (including in a separate written agreement between us and the customer).

Information Collected Automatically

We and our service providers may automatically collect information using cookies, pixels, and similar technologies. This may include:

  • Device and browser information
  • IP address and approximate location
  • Pages viewed and links clicked
  • Time spent on pages and referring URLs
  • Interaction with marketing emails or Website content

These technologies help us:

  • Operate and improve the Services
  • Understand usage and performance
  • Support analytics and marketing

Information From Other Sources

We may receive information from:

  • Marketing and analytics providers
  • Business partners
  • Publicly available sources
  • Online data partners that help associate website activity with contact information (see section on Cookies & Technologies)

How We Use Information

We use information for purposes including:

  • Operating, maintaining, and improving the Services
  • Providing the Platform, including processing Customer Content on our customers’ behalf
  • Managing accounts, subscriptions, and payments
  • Responding to inquiries and communicating with you
  • Sending marketing communications (where allowed)
  • Analyzing usage and Services performance
  • Identifying prospective customers
  • Protecting our rights, security, and compliance

How We Share Information

We may share information with:

  • Service providers that support our Services, analytics, and marketing
  • Subprocessors that help us host and operate the Platform (such as cloud hosting and AI model providers), under written agreements that impose confidentiality, security, and data-use obligations consistent with our commitments to customers
  • Business partners involved in joint events or marketing
  • Parties involved in corporate transactions
  • Legal authorities where required
  • Others, when sharing aggregated or de-identified data

We do not sell personal information in the traditional sense. Some of our advertising and analytics activities may be considered "selling" or "sharing" under certain U.S. state laws; see Your Privacy Choices.

Google Workspace APIs

The use and transfer of raw or derived user data received from Google Workspace APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

International Data Transfers

We may process and store information in the United States and other countries. Where required, appropriate safeguards are used for cross-border transfers.

European Economic Area, United Kingdom & Switzerland

If you are located in the European Economic Area, the United Kingdom, or Switzerland, this section applies to you. Access to Tools, Inc. is the controller of the personal information described in this Privacy Policy, except Customer Content, which we process on behalf of the customer concerned.

We process personal information on the following legal bases: performance of a contract (providing the Services); our legitimate interests (operating, securing, and improving the Services and communicating with business contacts); your consent (where required, for example for non-essential cookies and similar technologies, which we will request before use); and compliance with legal obligations.

You have the right to request access to, rectification or erasure of, or restriction of the processing of your personal information; the right to object to processing based on our legitimate interests; the right to data portability; and the right to withdraw consent at any time without affecting processing that occurred before withdrawal. You also have the right to lodge a complaint with your local supervisory authority, or with the UK Information Commissioner’s Office if you are in the UK. To exercise a right, contact us at privacy@brand.ai.

We transfer personal information to the United States. Where required, we rely on the European Commission’s Standard Contractual Clauses, the UK International Data Transfer Addendum, equivalent Swiss mechanisms, or another lawful transfer mechanism.

Cookies, Pixels & Similar Technologies

How We Use Cookies

Cookies and similar technologies help us:

  • Enable essential site functionality
  • Remember preferences
  • Analyze Website usage
  • Support marketing and retargeting

Your browser may allow you to refuse cookies, but doing so may limit Website functionality.

RB2B / Retention Technologies Disclosure

When you visit or log in to our website, cookies and similar technologies may be used by our online data partners or vendors to associate these activities with other personal information they or others have about you, including by associating such activity with your email or home address. We or our service providers may use this information to send communications and marketing to these email or home addresses. You may opt out of receiving this advertising by visiting: https://app.retention.com/optout.

Your Privacy Choices & Rights

Marketing Communications

You may opt out of marketing emails by using the unsubscribe link or contacting us.

Cookies and Targeted Advertising

You may:

  • Control cookies through browser settings
  • Use opt-out tools provided by advertising industry groups
  • Use the Retention.com opt-out link noted above
  • Broadcast an opt-out preference signal such as Global Privacy Control (GPC), which we honor where required by applicable law
  • Use the "Your Privacy Choices" link in the footer of our Website

Rights Under Global Privacy Laws

Depending on your location, you may have rights such as accessing, correcting, deleting, or restricting the use of your information, or opting out of certain data practices. To exercise a right, contact us at privacy@brand.ai.

U.S. State Law Rights

Residents of certain states may have additional rights, including requesting access to or deletion of personal information or opting out of certain data practices considered "selling" or "sharing." You may exercise these rights by contacting us.

In the preceding 12 months, we have collected the following categories of personal information: identifiers (such as name and email address); professional or employment-related information (such as company and role); commercial information (such as subscription history); internet or other electronic network activity information (such as pages viewed); and inferences drawn from the above. We collect these categories from the sources, use them for the purposes, and disclose them to the categories of recipients described in this Privacy Policy. We do not knowingly sell or share the personal information of consumers under 16 years of age, and we will not discriminate against you for exercising any of your rights.

Data Retention

We retain personal information as long as needed for the purposes described in this policy or as required by law. The retention period depends on the type of information, the purposes for which we use it, and applicable law. Customer Content is retained for the period specified in the applicable customer agreement, after which it is deleted or de-identified.

Data Security

We use appropriate technical and organizational measures to protect information. We maintain a security program aligned with the SOC 2 framework. However, no method of transmission or storage is completely secure.

Children's Privacy

The Services are not intended for children under 13, and we do not knowingly collect information from them.

Third-Party Links

Our Website may contain links to third-party websites. We are not responsible for their privacy practices.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page. If we make material changes, we will provide notice as required by applicable law.

Contact Us

The Services are provided by Access to Tools, Inc., a Delaware corporation, d/b/a brand.ai. If you have questions about this Privacy Policy or our privacy practices, or wish to exercise a privacy right, contact us at privacy@brand.ai.

Last updated: September 2026