Free for 14 days with your work email. No card needed.Start your free trial

BrandsLens — Privacy Policy

Last updated: 1 September 2026 · Effective: 1 September 2026

1. What this policy covers

This Privacy Policy explains what personal data BrandsLens collects, why, and what rights you have over it. It applies to (a) account data for people who sign up for or are invited to use BrandsLens, and (b) mention data collected from public sources that may incidentally include personal data about third parties (e.g., the author of a social media post).

2. Data we collect about you (account holders and team members)

  • Account data: name, email address, password (stored as a salted Argon2 hash — we never store or can retrieve your actual password).
  • Organization data: company name, sector, plan, billing status.
  • Usage data: login timestamps, actions taken within the Service (for the Media Room's audit trail — this is a core safety feature, not incidental tracking, and is disclosed here for that reason).
  • Billing data: processed by our payment providers (Stripe and/or Paystack) — BrandsLens does not store your card number.

3. Data we collect about third parties (mention data)

To provide the monitoring service, BrandsLens collects publicly available content from news sites, social media, forums, and similar sources that mentions a Customer's brand. This may incidentally include:

  • Public usernames, display names, and post content of people who mention the monitored brand
  • Publicly visible engagement metrics (follower counts, reach estimates)

We do not collect private messages, private accounts, or any content not publicly accessible at the time of collection, except for content voluntarily forwarded to a Customer's tip line by that Customer's own team or contacts, which is treated as the Customer's own reporting, not as data BrandsLens independently gathered.

4. Why we process this data (legal basis)

  • Account data: to perform our contract with you (providing the Service) and for our legitimate interest in account security and support.
  • Mention data: our legitimate interest, on behalf of the Customer, in monitoring publicly available information about their own brand for reputational and fraud-prevention purposes. Where a mention includes identifiable personal data about its author, that data is processed only to the extent necessary to assess and respond to the mention (e.g., determining if a post constitutes fraud targeting the Customer's customers) — not for any other purpose.

5. Who we share data with

  • Sub-processors: our hosting providers, Anthropic (for AI classification — mention text is sent for analysis; account passwords and payment details are never sent to this or any AI provider), Stripe/Paystack (billing), and our email delivery provider (invites and notifications).
  • We do not sell personal data. We do not share mention data with any party other than the Customer whose brand it concerns, except as required by law or a valid regulatory/court order.

6. Data retention

  • Active account data is retained for as long as the account is active.
  • On cancellation, organization data is retained read-only for 30 days (so an accidental cancellation can be reversed) and then deleted.
  • Mention data is retained per the Customer's plan and configuration; Customers can request deletion of specific incidents at any time.

7. Your rights

Depending on your jurisdiction, you may have the right to: access the personal data we hold about you; correct inaccurate data; request deletion; object to or restrict certain processing; and receive your data in a portable format. Contact info@brandslens.com to exercise any of these rights.

A note on third-party mention data: if you are the author of a public post that has been captured as a mention within a Customer's BrandsLens workspace and you wish to exercise a data right over that specific mention, contact us and we will work with the relevant Customer, since they control that workspace's data.

8. International data transfers

If BrandsLens's infrastructure or sub-processors are located outside your country, your data may be transferred internationally. We take steps to ensure any such transfer has an appropriate legal basis (e.g., standard contractual clauses where required under GDPR).

9. Security

We use industry-standard measures including encrypted connections (HTTPS), salted password hashing (Argon2), and role-based access controls that prevent one organization's team members from accessing another organization's data. No system is perfectly secure; we will notify affected Customers without undue delay in the event of a data breach affecting their data, consistent with applicable law.

10. Children's data

BrandsLens is a business tool not directed at or intended for use by children, and we do not knowingly collect personal data from children.

11. Changes to this policy

We will notify account Owners of material changes to this policy with reasonable notice before they take effect.

12. Contact

BrandsLens Limited Data Protection contact: info@brandslens.com