Privacy Policy

This Privacy Policy explains how BrunsonAI ("we," "us," or "our") collects, uses, discloses, and protects information in connection with the BrunsonAI website, application, and related services (the "Service"). By using the Service, you agree to the collection and use of information as described here. This Policy is incorporated into, and should be read together with, our Terms of Service.

1. Information We Collect

We collect the following categories of information:

• Account information — your email address and a hashed password.
• Content you submit — prompts, uploaded reference images/video/audio, and the output generated from them.
• Payment information — handled directly by our payment processor (Stripe); we receive confirmation of payment and a customer reference, not your full card details.
• Usage and device data — pages visited, actions taken, timestamps, IP address, browser/device type, and similar diagnostic data, collected automatically as you use the Service.
• Cookies and local storage — including an authentication cookie used to keep you signed in.

2. How We Use Information

We use the information we collect to:

• Provide, operate, and maintain the Service, including generating content you request;
• Process payments and manage your credit balance;
• Authenticate you and keep your account secure;
• Communicate with you — including account verification, password resets, support responses, and service-related notices;
• Monitor, investigate, and enforce our Terms of Service, including detecting misuse;
• Comply with legal obligations, including responding to lawful requests from authorities;
• Analyze and improve the Service.

3. Third-Party Service Providers

To operate the Service, we share information with third-party providers who process it on our behalf, including:

• AI generation providers — your prompts and any reference images, video, or audio you submit are sent to the third-party AI models that power generation, in order to produce your output.
• Cloud storage and content delivery — generated output and uploaded reference files are stored using third-party cloud storage and delivered via a content-delivery network.
• Payment processing — Stripe processes payments on our behalf.
• Transactional email — a third-party email provider sends account, verification, and notification emails on our behalf.
• Analytics — we use privacy-conscious analytics to understand aggregate usage of the Service.

These providers are only authorized to use your information as necessary to provide their services to us, and are subject to their own privacy and security practices.

4. AI-Generated Content and Provenance Metadata

Output you generate through certain features may have a visible disclosure mark and/or embedded provenance metadata (such as a C2PA manifest) added to it before being delivered to you, to label it as AI-generated. This metadata is embedded in the file itself and travels with it if the file is shared or downloaded elsewhere.

5. Data Retention

We retain account and content data for as long as your account remains active, or as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. You may request deletion of your account and associated data by contacting us; some information may be retained where required by law or for legitimate business records (e.g. transaction history).

6. Data Security

We use reasonable administrative, technical, and physical safeguards designed to protect your information, including encrypted transport, hashed passwords, and access controls. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. Your Rights and Choices

Depending on your location, you may have rights to access, correct, delete, or export your personal information, or to object to or restrict certain processing. You can exercise most of these directly from your account settings, or by contacting us at the address below.

8. Cookies

We use a small number of cookies, primarily a session/authentication cookie required for you to remain logged in. We do not use cookies for third-party advertising.

9. Children's Privacy

The Service is not directed to, and is not intended for use by, anyone under 18 years of age. We do not knowingly collect personal information from children. If we learn that we have collected information from someone under 18, we will delete it.

10. International Data Transfers

Our service providers may process and store information in countries other than your own. By using the Service, you acknowledge that your information may be transferred to and processed in such countries, which may have different data protection laws than your jurisdiction.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above, and where appropriate, by additional notice within the Service. Continued use of the Service after changes take effect constitutes acceptance of the revised Policy.

12. Contact

Questions about this Privacy Policy, or requests regarding your personal information, can be sent to paul@probranding.com.