Privacy policy

brandflare measures how AI assistants describe brands. This page explains what we collect, why we hold it, who handles it for us, and how to get it removed. If anything here is unclear, use our contact form or email hello@brandflare.io.

Who we are

brandflare is operated by NONE OF THE ABOVE L.L.C-FZ, a company licensed by Meydan Free Zone under licence number 253577901, with its registered office at Meydan Grandstand, 6th floor, Meydan Road, Nad Al Sheba, Dubai, United Arab Emirates. We are the data controller for the information described here.

What we collect

• Account details. Your name and email address, handled by our authentication provider (Clerk) when you sign up or sign in. If you invite teammates, we hold their email addresses too.
• Billing details. Your plan, subscription status, and customer record. Card numbers go directly to Stripe and never reach our servers.
• Brand data you enter. The brands, questions, and facts you ask us to track, and the country you want questions asked from.
• Measurement data we generate. The answers AI engines return for your questions, the pages they cite, and the scores and recommendations we derive from them.
• Crawler logs you send us. If you connect your site's logs, we keep the user agent, page path, and time of visits from AI crawlers. Visits from anything else are discarded, and we do not store visitor IP addresses.
• Messages. Support conversations you open with us, and your email address if you subscribe to the newsletter.
• Basic usage data. Anonymous, aggregated page views and a handful of product events, so we know which parts of the product are used. No advertising trackers, no cross-site profiles, no selling data to anyone.

Why we use it

• To provide the service you signed up for: running checks, showing results, producing reports, taking payment, and answering support requests.
• To send you email you asked for: alerts and digests, which you can turn off in your profile or from the unsubscribe link in each one, and the newsletter if you subscribed to it.
• To run the business responsibly: preventing abuse, understanding which features are used, and keeping the records tax and company law require.

Where UK or EU law applies, those purposes rest on our contract with you, your consent (for the newsletter), and our legitimate interest in running and securing the service.

Where your questions go

To measure visibility we send your tracked questions to third-party AI providers (OpenAI, Google, Perplexity, and Anthropic), routed through Vercel's AI Gateway. Those questions are written to sound like an ordinary consumer question and do not include your account details. We also use AI models to analyse the answers that come back.

Who handles data for us

We use a small number of providers to run brandflare. Each one only receives what it needs for its job.

• Clerk: sign-in and account security.
• Stripe: payments and invoices.
• Vercel: hosting, cookie-free analytics, file storage for exported reports, and the gateway to AI providers.
• Neon: our database.
• Resend: sending email.
• Meta: measuring our advertising, through the Meta Pixel on our public site, and by telling Meta when an account is created or a subscription starts, with the email address hashed.
• LinkedIn: measuring our advertising, through the LinkedIn Insight Tag on our public site.
• OpenAI, Google, Perplexity, and Anthropic: answering and analysing tracked questions, as described above.

We do not sell personal data, and we only disclose it otherwise if the law requires us to or if the business is sold, in which case this policy continues to apply to it.

Access by our team

To answer a support request or investigate a fault, authorised brandflare staff can view a workspace in a read-only mode. They cannot change your data that way, and each use is logged.

Where it is stored

Our database and hosting are in the United States, and the providers above operate in the United States and Europe. That means your information is processed outside the United Arab Emirates, and outside the UK and EU if you are based there. We rely on our providers' contractual safeguards, including standard contractual clauses where they apply, for those transfers.

How long we keep it

Measurement history is kept for as long as your account is open, because the trends are the product. Closing your account stops all checks at once. Ask us to erase your data and we will delete your workspace, brands, questions, and measurement history within 30 days of the request. Billing records are kept for as long as tax law requires.

Security

Data is encrypted in transit and at rest, access to production systems is limited to the people who need it, and you can review and sign out your active sessions from your profile. No system is perfectly secure; if a breach affects your data we will tell you and the relevant authority as the law requires.

Your rights

You can ask for a copy of your data, ask us to correct it, ask us to delete it, or object to how we use it. Email hello@brandflare.io and we will respond within 30 days. These rights apply under the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021), and under the GDPR if you are in the UK or EU. You may also complain to the UAE Data Office, or to your local data protection authority.

Business use only

brandflare is sold to businesses and is not intended for anyone under 18. We do not knowingly collect information from children.

Cookies

We set the cookies needed to keep you signed in and to remember a preference or two. Our analytics are cookie-free. The Meta Pixel and the LinkedIn Insight Tag on our public site set advertising cookies to measure our ads on Facebook, Instagram and LinkedIn. The full list is in the cookie policy.

Changes

If we change this policy we will update the date at the top and, for anything material, tell account holders by email.