Privacy | BRANDCommandHQ

What Brand Command collects

We collect account information such as your email address and the business information, contacts, plans, tasks, files, and content you choose to enter or upload. We also process technical information needed for authentication, security, notifications, and app operation.

Google user data we access

If you choose to connect Google services, Brand Command accesses only the Google data needed for the feature you request. Gmail access is used only to send messages from your connected Gmail account; Brand Command does not read, import, search, or synchronize your Gmail inbox. Google Calendar access is used to list calendars, display calendar events, and create, update, or delete calendar events when you request those actions. Google Drive access is used to save Brand Command-generated files to your Drive and access only files Brand Command creates.

How we use information

We use your information to provide and secure the app, keep each business profile organized, generate the AI-assisted results you request, process purchases, connect services you choose, provide support, and improve reliability. We do not sell your personal information or Google user data.

Google data sharing and disclosure

Brand Command does not sell Google user data, use it for advertising, or disclose it to data brokers. Google user data may be processed by Wix.com Ltd., our hosting and application infrastructure provider, only as necessary to authenticate users, operate the connected feature, securely store app data, and transmit requests to Google APIs. Data may also be disclosed when required by law, to protect users or the service from fraud or abuse, or as part of a business transaction where legally permitted and subject to required notice or consent. We do not permit Google Workspace API data to be transferred to third-party AI services for the purpose of creating, training, or improving foundational or generalized AI or machine-learning models.

AI and internet research

When you ask for AI analysis or internet research, non-Google business details and the prompt needed to complete that request may be processed through our application infrastructure and its AI or search services to provide the user-facing result you requested. Google Workspace API data is not used to create, train, or improve foundational or generalized AI or machine-learning models. Brand Command does not use raw, aggregated, anonymized, or derived Google Workspace API data for generalized AI training.

Google API Limited Use

The use of raw or derived user data received from Google Workspace APIs will adhere to the Google User Data Policy, including the Limited Use requirements. Brand Command uses Google Workspace API data only to provide or improve the user-facing Google-connected features the user has requested and authorized.

Data protection and security

Brand Command uses technical and organizational safeguards designed to protect personal and sensitive data. Google account connections are kept separate for each signed-in user and are not shared between Brand Command users. Data sent between Brand Command and connected services is protected in transit using HTTPS/TLS. Hosted app data is encrypted at rest, and sensitive credentials are stored using protected key-management systems. Private file attachments use protected storage and temporary access links rather than permanent public links. We limit access to the data and permissions needed to provide the features you choose to use.

Service providers

Information may be processed by providers that support hosting and authentication (Wix.com Ltd.), payments (Stripe), managed social-account connection and background publishing (Post for Me and the social networks you authorize), connected services you authorize (including Google Calendar, Google Drive, Gmail, and Jotform), notifications, address lookup, and AI or internet research. Providers receive information only when needed to provide the feature you use and are expected to handle it under their applicable privacy, security, and contractual obligations.

Social account credentials

Brand Command does not expose your social-account access credentials to other Brand Command users. When you enable Post for Me, Brand Command securely keeps the connection needed to publish scheduled posts while you are offline. Publishing requests are routed only to the social accounts you selected for your signed-in Brand Command account.

Retention and deletion

We retain account information and app content while your account is active and as needed for security, legal, tax, dispute, and fraud-prevention obligations. You can export your content or delete your account in Settings. Deletion removes the account, associated app data, and the managed social publishing profile used for that account, except records we must retain by law or legitimate transaction records that must be kept for a limited period. Disconnecting a Google service stops future access through that connection.

Your choices

You can manage notifications and connected services, disconnect Google services, export app content, and delete your account. For privacy questions or requests, use the support channel published on the official Brand Command website. Founder or administrator personal contact details are not used as the public support endpoint.

Business contact

Brand Command is operated by What's Poppin' USA Ltd Co (WPUSA Brands).

Privacy Policy