Privacy policy
Last updated: September 2026
The short version: your organization's data belongs to your organization, creators own their connections, we only collect from sources we are allowed to, and nothing is deleted just because a subscription lapsed.
Who we are
Brandora is a creator and brand intelligence platform. This policy explains what personal data we process when you use the Brandora website and product, why we process it, and the rights you have over it.
We process personal data in line with the applicable data protection laws in the markets we serve.
Data we collect
Account data: name, email address, password hash, and organization membership when you register or are invited to an organization.
Product data: the campaigns, briefs, rosters, notes, submissions, comments, and reports your organization creates in the product. This data belongs to your organization.
Creator data: profiles in your private roster, publicly available creator information from compliant sources, and, where a creator has connected their own accounts, first-party analytics the creator has explicitly authorized an organization to see.
Usage and billing data: plan, entitlements, metered usage such as discovery and AI requests, and billing state from our payment provider. We never store full card numbers or mobile money PINs.
How we use data
We use data to operate the product: authenticating you, enforcing organization boundaries, running campaigns and approvals, computing metrics with recorded provenance, sending notifications you have chosen over email, SMS, or WhatsApp, and billing your subscription.
We do not sell personal data. We do not use your organization data to train AI models. AI features operate inside your authenticated organization context on your own data.
Cookies and similar technologies
We set only strictly necessary cookies: a session cookie that signs you in and a CSRF token that protects your session. These are exempt from consent because the site cannot function without them, and they contain no tracking.
Optional analytics cookies are off by default and load only after you opt in through the cookie banner. Our one optional tool is Google Analytics 4, which measures which pages people read and which they leave; it sets the _ga cookies and is provided by Google Ireland Limited. Until you opt in, the Google Analytics script is never requested at all, so no request reaches Google and no cookie is written.
When we do report a page view, the address is redacted first. Any sharing or review link token in the address becomes ":token" and any record identifier becomes ":id", so Google receives the kind of page you viewed and never the credential or the specific record. We record your choice (with a timestamp) in your browser so we do not ask again, and you can change it at any time via the Cookie preferences link in the footer. Withdrawing consent is as easy as giving it, and it also deletes the analytics cookies already on your device.
Your browser also stores small non-cookie preferences locally, such as your light or dark theme. These never leave your device and are not used for tracking.
Creator ownership and authorization
Social connections made through Creator Connect belong to the creator, not to any client organization. Connections are read-only by default.
An organization can only see a creator’s connected-account data when the creator has granted an explicit authorization, and creators can revoke that authorization at any time. Provider access tokens are encrypted and are never exposed to organizations or included in logs.
Connected social accounts
When a creator connects an Instagram professional account through Creator Connect, they grant brandora read-only access on Instagram’s own consent screen, and we read only what that consent covers. From their profile: the account id, username, name, account type, follower, following and post counts, and the profile picture. From their own posts: the post id, caption, type, permalink and time of posting. From Instagram insights: account reach, the views, likes, comments, shares and saves on their own posts, and their follower demographics by country, age band and gender as aggregate percentage shares.
What we do not receive is as important. We never read direct messages, comment text, who commented, follower identities, or any contact detail, and we never post, comment, or message on a creator’s behalf. Demographics are aggregate shares and identify nobody. Instagram serves the profile picture as a link that expires, so we keep our own copy and serve that instead; it is deleted with everything else. None of this data is used for advertising or ad targeting, sold, shared with data brokers, or used to train AI models.
A creator can disconnect at any time. "Delete" on their connections page removes the connection, the stored access token, the synced posts, every metric and audience figure collected from them, and our copy of the profile picture. Removing brandora from within Instagram’s own app settings reaches us too, and stops collection immediately. We honour data deletion requests sent by Meta on a creator’s behalf, and report their progress at a status page we return to Meta.
Data sources and retention
Public mention and listening data comes only from sources whose terms allow collection, such as licensed APIs, RSS feeds, and manually imported URLs. We do not scrape platforms that prohibit it, and we retain provider data only as their contracts allow.
We keep audit logs of security-relevant events. Customer data is never deleted merely because a trial or subscription expired; paid write features may pause, but your data stays intact and exportable.
Your rights
You may request access to, export of, correction of, or erasure of your personal data. Erasure requests anonymize personal identifiers while preserving records we must keep for legal, billing, or audit integrity reasons.
Erasing a creator account also deletes everything collected from the accounts they connected: the connections themselves, their access tokens, synced posts, metrics and our copy of their profile picture. Records an organization made about working with them, such as roster entries, rate cards and contracts, belong to that organization and are kept.
To exercise any right, email privacy@brandora.io. We respond within the timelines required by applicable law, and you may lodge a complaint with your local data protection authority.
Security
All traffic is encrypted in transit. Provider tokens and sensitive secrets are encrypted at rest. Access to production systems is restricted and audited. Credentials, tokens, and authorization headers are never written to logs.
Changes to this policy
When this policy changes materially we will update the date above and notify account owners by email before the change takes effect.
Questions about this document? Reach us via the contact page.
Run your next campaign on proof
Discover creators, plan the brief, collect approvals, and prove fulfillment. All in one place.