Legal · Privacy

Privacy Policy.

How BrandScout handles account data, monitored brand inputs, signal history, cookies, and data requests.

Last updated August 2, 2026.

This policy is published by BrandScout Technologies Inc., 2700 S Gilbert Rd Ste 5, Chandler, AZ 85286. Data requests can be sent to privacy@brandscout.site.

What we collect

Account details (name, email, organization), product usage events, and the brands and competitors you ask us to monitor. We do not sell personal data.

Why we collect it

To deliver the product, secure your account, send briefs you've requested, and improve the platform.

Where it lives

Primary storage is US-East-1. EU customers route through the Frankfurt node activated in May 2026. Data is encrypted with TLS 1.3 in transit and AES-256 at rest using KMS-backed storage.

How long we keep it

Account data for the lifetime of your subscription. Raw logs are retained for 90 days. Aggregated analytics are retained for 730 days unless legally required otherwise.

Your rights

Access, export, correct, or delete your data at any time. Email privacy@brandscout.site and we'll respond within 30 days.

Subprocessors

We use a small set of vendors (hosting, email, analytics, AI providers). A current list is available on request.

Cookies

See our cookie policy for details on what we set and how to control it.

Updates

We'll notify you of material changes by email at least 30 days in advance.

Security posture

Security and access controls

  • SOC 2 Type II certified; report released Q2 2026. Report available under NDA on request.
  • TLS 1.3 in transit and AES-256 at rest using KMS-backed storage.
  • Primary storage is US-East-1. EU customers route through the Frankfurt node activated in May 2026.
  • Raw logs are retained for 90 days. Aggregated analytics are retained for 730 days unless legally required otherwise.
  • Role-based access: Auditor — view-only access. Analyst — tagging and scoring. Command — model approval and whitelist creation.
  • P1 data-breach incidents follow a 1-hour notification protocol.
  • Q1 2026 red-team exercise found no critical vulnerability exposures.
  • Tenant-isolation checks were strengthened in Q2 2026.

Scope note: certification and testing statements describe the BrandScout platform as audited in the periods named above. No other certification or regulatory compliance is claimed.

Questions? Email privacy@brandscout.site.