Privacy Policy
- The data you connect belongs to your brand. We use it only to provide The Brand Computer and do the work you ask for.
- We don't sell personal information, show ads with it, or use it to train AI models.
- Data from Google APIs is used under Google's Limited Use requirements (see Google user data).
- You can disconnect a service, export your data or ask us to delete it at any time.
1. Who we are
The Brand Computer ("the Service") at thebrandcomputer.com is operated by Appbrew ("we", "us", "our"). This policy explains what information we collect when you use the Service, how we use and share it, and the choices you have. Questions go to privacy@thebrandcomputer.com.
The Service is used by businesses ("brands"). When a brand connects its store and other tools, the brand decides what data is processed and why, and we process that data on the brand's behalf. For personal information about a brand's own customers, the brand is responsible for its own privacy notice; we act as its service provider (or processor).
2. Information we collect
Account information
Your email address, name, and the organisation and role you belong to. If you sign in with Google, we receive your name, email address and Google account identifier. We sign you in with one-time email codes or Google; we don't store passwords.
Data from services you connect
When you connect a service (for example Shopify, Google Ads, Meta Ads, Klaviyo or Gorgias) you sign in with that provider and grant access. We then receive and store an access token and read or change data in that service as the work you request requires. Depending on the service, this can include orders, products, inventory, customers (names, contact details, order history), ad accounts, campaigns, budgets and performance reports, email and SMS campaigns, support tickets, payments and accounting records.
Content you create
Your messages to the assistant, goals, boards, reports, files you upload, automations and the results the Service produces.
Texts with the assistant
If you link your phone to text the assistant, we receive your phone number and the texts, pictures and files you send to the assistant's number, and we send you its replies. It may also text you first with updates on your goals and reminders you ask for, and stops after three texts you haven't answered until you text again. Your texts are kept in your Messages chat and the files in your own files, like anything else you send the assistant. You can unlink your phone at any time in Settings. Texts sent by iMessage use your data plan; a text sent by SMS may be charged by your carrier.
The Brand Computer for Chrome
If you add our Chrome extension, the assistant can do website tasks you ask for in your own Chrome. It works only in tabs it opens itself (grouped as "The Brand Computer"), and only on sites you allow it to use the first time it asks. It never reads or touches your other tabs, and it never sees, stores or sends your passwords: you sign in to sites yourself. From the assistant's own tabs, the extension sends us:
- Website content: the text and structure of the page, and a screenshot when the assistant needs one, so it can do the task. Pages can include personal information, such as a customer's name on an order page.
- Web history: the address and title of the pages in its tabs.
- Authentication information: only when you ask the assistant to connect a tool, the API key or credential that tool's own site shows you. It's stored encrypted, like any connection.
- User activity: only the time you last clicked or typed in the assistant's tab, so it pauses while you use it. Not what you clicked or typed.
The extension also keeps, in your Chrome, a token that connects it to your account, your name and email to show in its menu, and the list of sites you allowed. Page content becomes part of the chat in which you asked for the task, like the assistant's other work; screenshots are used for that step only and not kept. We use this data only to do what you ask, never sell it or use it for advertising, and don't use it to train AI models. You can remove a site or disconnect the extension from its menu or in Settings › Browser, or uninstall it at any time.
Usage and technical information
Logs of requests and errors, IP address, browser type and timestamps, used to run, secure and debug the Service. We use one essential cookie to keep you signed in, and a short-lived one during sign-in with Google or a connected service. We don't use advertising or third-party tracking cookies.
3. How we use information
- To provide the Service: answer requests, build dashboards and reports, prepare and, with the approval your settings require, make changes in connected services, run automations and send you notifications.
- To keep accounts secure: sign-in, role-based access, fraud and abuse prevention.
- To operate and improve reliability: monitoring, debugging and measuring usage and costs.
- To contact you about your account, the Service and changes to these policies.
- To comply with law and enforce our Terms of Service.
We do not sell personal information, share it for cross-context behavioural advertising, or use data from connected services to train AI models.
4. Google user data
The Service can connect to Google services you authorise: Google sign-in, Google Ads, Google Analytics, Gmail and Google Calendar. This section describes how we handle data we receive through Google APIs ("Google user data").
| Service | What we access | Why |
|---|---|---|
| Google sign-in | Name, email address, Google account ID | To create your account and sign you in. |
| Google Ads | The ad accounts you can reach; their campaigns, ad groups, ads, keywords, budgets, audiences, conversion actions and performance metrics | To report on performance and, when you ask and approve, create or change campaigns, budgets, bids, audiences and conversion uploads. |
| Google Analytics | Properties and reports you can reach | To report on site traffic and conversions. |
| Gmail | Messages, threads, labels and drafts, and the ability to send mail, for the mailbox you connect | To read, summarise, label, archive, draft and send email when you ask. |
| Google Calendar | The calendars you can see and their events, for the account you connect | To answer questions about your schedule and, when you ask, create, change or cancel events and invite guests. |
Use. We use Google user data only to provide and improve the user-facing features you request in the Service. Google Ads data is used only to report on and manage the advertising accounts you have connected.
Storage. Access and refresh tokens are encrypted at rest and stored only on our servers in the United States. Data read from Google may be kept as part of the reports, boards and history you create, and in our logs for a limited time.
Sharing. We don't sell Google user data or use it for advertising. We don't transfer it to others except: to the service providers listed in section 5 that process it for us to run the Service (for example, an AI model that writes the report you asked for, under terms that prohibit training on it); with your consent; for security; or as required by law.
No AI training. We don't use Google user data to develop, improve or train generalised or non-personalised AI or machine-learning models.
Human access. Our staff don't read Google user data unless you ask us to (for example, for support), it is needed for security or abuse investigation, or the law requires it.
The Brand Computer's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Revoking access. You can disconnect a Google service on the Connectors page, which deletes its stored tokens, or remove our access at any time from your Google account permissions.
5. Sharing and service providers
We share information only as needed to run the Service, with:
- Members of your organisation, according to the roles and access your organisation sets.
- Services you connect, when the assistant reads from or acts in them at your request.
- Our service providers, who process data for us under contract: Amazon Web Services (hosting, databases, file storage and email delivery), OpenRouter and the AI model providers it routes to (generating answers, reports and plans), E2B (isolated environments that run code and cloud browser sessions), Neon (databases that hold each brand's own data), Sendblue (sending and receiving texts with the assistant by iMessage and SMS, if you link your phone), and Sentry (error monitoring).
- Legal and safety: when required by law, or to protect the rights, safety and security of our users, the public or us.
- Business transfers: as part of a merger, acquisition or sale of assets, with this policy continuing to apply.
6. Retention and deletion
We keep information while your organisation's account is active. When you disconnect a service, we delete its tokens straight away and stop accessing it. When an organisation is deleted, or you ask us to delete your data, we delete it from our active systems within 30 days, and from backups as they expire (within 35 days after that), unless we must keep something to meet a legal obligation. When you unlink your phone, we stop texting it; our texting provider keeps copies of texts and files for a limited time under its own retention.
7. Security
Data is encrypted in transit (TLS) and at rest. Credentials for connected services are encrypted with a key held only by our servers and are never shown to the AI models or to browser code. Every call to a connected service is checked against what that connection and the member's role allow. No system is perfectly secure; if a breach affects your information we will tell you as the law requires.
8. Your rights and choices
You can access, correct, export or delete your personal information, and disconnect any connected service, from within the Service or by emailing privacy@thebrandcomputer.com. Depending on where you live (for example California, or the EU and UK), you may also have rights to know what we hold, to object to or restrict processing, and to appeal a decision we make about your request. We won't discriminate against you for using these rights. If your information came to us through a brand that uses the Service (for example, as one of its customers), please contact that brand first; we'll help it respond.
9. Where data is stored
We store and process data in the United States. If you use the Service from elsewhere, your information is transferred to the United States.
10. Children
The Service is for businesses and is not directed to children under 16. We don't knowingly collect their personal information.
11. Changes to this policy
We'll post any change here with a new effective date, and tell you by email or in the Service before a material change takes effect.
12. Contact
Appbrew, operator of The Brand Computer. Email privacy@thebrandcomputer.com.