Privacy policy
Robin cares about your privacy
Last updated 6 October 2026
BrandRobin reads public conversations so our customers can find out what is being said about their brand. That means we handle two different kinds of information: the ordinary details of people who visit this site or buy the product, and the public posts of people who have never heard of us.
This page covers both. It is written to be read rather than to be survived.
Introduction
BrandRobin is a social listening service. We read public conversations across seventeen channels and tell our customers what is being said about their brand, their competitors and their market.
This policy covers all of it: this website, the product itself, and the public conversations the product reads. It applies whether or not you are a customer, and whether or not you have ever heard of us.
We have tried to write it the way we would explain it out loud. Where a section could have been vague, it names the company, the country or the number instead, and the list of everyone we pass information to is further down this page rather than somewhere harder to find.
If anything here is still unclear, write to privacy@brandrobin.ai and we will answer in plain terms.
Definitions
Four terms do most of the work in this policy:
- Personal information: anything that identifies a person, or could with a little effort. A name and an email address obviously; an account handle and an IP address also count.
- A visitor: anyone reading this website. You do not need an account and we do not ask for one.
- A customer: a person or company paying for BrandRobin, and the people they invite into their workspace.
- A public post: something published openly on one of the channels we read, by somebody who is usually neither a visitor nor a customer.
Information we collect
From visitors to this website, without ever asking who you are:
- the pages you open, in what order, and how far down them you scroll
- your device, browser and operating system
- an approximate location, worked out from your IP address: the city, not the street
- the page or search that sent you here
- errors the site throws while you are on it
- a recording of the visit, covering the pages, clicks and scrolling, with typing into form fields masked
From anyone who joined our earlier waitlist: the email address they entered, stored in Google Forms and used only to tell them when they could sign up. From customers: the name and email you sign up with, your billing details, the brands and phrases you ask us to watch, and the results and reports we generate from them. And from public conversations: the text of a post, the account name that wrote it, when it was posted, a link back to it, the public counts the platform displays, and the channel or community it appeared in. We do not read anything behind a login, direct messages, private or closed groups, or posts that have been deleted.
How we use your data
Each thing we hold has a job, and it does not do any other job:
- Website measurement: to see which pages work and which confuse people.
- Form submissions: to set up the listeners we propose for your website.
- Account data: to run your workspace, deliver your alerts and bill you.
- Public posts: to tell our customers what is being said about them, which is the service they buy.
- Errors and recordings: to find and fix what is broken.
We do not build advertising profiles, we do not use one customer's data to serve another, and we do not sell any of it to anybody.
Retention of data
Nothing is kept indefinitely because it might be useful one day.
- Website analytics and session recordings: a limited period, then deleted automatically.
- Email addresses from the earlier waitlist: until we have told you sign-up is open, or sooner if you ask us to remove you.
- Customer account data: while the account is open, and for a short period after it closes so an account closed by mistake can be restored, then deleted. Ask us and we will delete it straight away.
- Collected posts: for as long as your workspace keeps the listener that found them, so that trends and history stay useful, then deleted.
- Invoices and records the law requires us to keep: for as long as it requires, and no longer.
Subprocessors
We use other companies to run the service. Each receives only what its job requires, and each is bound to use it only to provide its service to us.
PostHog
- Data processed
- Usage events, session recordings, IP address
- Purpose
- Website and product analytics
- Location
- United States
Google Analytics
- Data processed
- Usage events, IP address
- Purpose
- Website traffic measurement
- Location
- United States
Google Forms
- Data processed
- Email address
- Purpose
- The earlier waitlist
- Location
- Global
Railway
- Data processed
- Everything this site serves
- Purpose
- Application hosting
- Location
- United States
Cloudflare
- Data processed
- IP address, request metadata
- Purpose
- Delivery and security
- Location
- Global
Dodo Payments
- Data processed
- Name, email, billing details
- Purpose
- Merchant of record: subscriptions, billing and tax
- Location
- Global
Resend
- Data processed
- Name, email address
- Purpose
- Product and marketing email
- Location
- United States
Anthropic
- Data processed
- Collected posts, your questions
- Purpose
- The AI analyst
- Location
- United States
Two of these are worth a sentence each. Dodo Payments is our merchant of record, which means it is the seller on your invoice and handles the transaction and its tax; card numbers never reach us. Anthropic provides the models behind the AI analyst, under commercial terms that do not permit your content to be used to train them. We do not sell your information and we do not share it for anyone else's advertising. If we add a subprocessor that handles customer data, this table changes with it.
Integrations
BrandRobin can deliver findings into tools you already use: Slack, email and webhooks today, and AI agents through our MCP server once it launches.
When you connect one, you give us the access that integration needs and nothing more, and we use it only to send you what you asked for. We do not read your Slack messages, your inbox, or anything else in the connected tool.
Disconnecting an integration stops the delivery and revokes the access. You can do it yourself, at any time, without asking us.
Marketing
We do not send marketing email. There is no newsletter and no mailing list, so there is nothing here to unsubscribe from.
Product email is different. If you have an account we will email you about billing, security and material changes to the service, and you cannot unsubscribe from those while the account is open, because they are how we keep you informed about something you are paying for.
If we ever do start sending marketing email it will go only to people who asked for it, every message will carry an unsubscribe link that works immediately, and this section will say so before the first one is sent.
Legal bases for processing
Each thing we do rests on a different justification, and it is fair to say which:
- Running your account and billing you: because we have a contract with you and cannot perform it otherwise.
- Measuring how this website is used: because we have a legitimate interest in knowing which pages work, balanced against the fact that the measurement is not tied to your identity.
- Collecting public posts: because our customers have a legitimate interest in knowing what is said about them publicly, and because the material was published openly by its author.
- Sending marketing email: because you asked for it, and you can withdraw that at any time.
- Keeping invoices and similar records: because the law requires it.
Where something rests on your consent, withdrawing it is always possible and never costs you access to anything you have paid for.
International data transfers
The subprocessor table is also a list of countries. Several of those companies are in the United States and some operate globally, so information covered by this policy will cross borders.
Where it does, we rely on the standard contractual protections those transfers require, and we choose providers that offer them. If you would like the detail for a particular provider, ask and we will send it.
Your rights
Wherever you live, and whether or not you are a customer, you can ask us to:
- tell you what we hold about you
- correct it, if it is wrong
- delete it
- send you a copy of it
- stop using it for a particular purpose
- stop sending you marketing, which you can also do yourself from any email we send
- remove a public post you wrote: send us the link, no reason needed and no account needed
Write to privacy@brandrobin.ai. We will reply within 30 days and will not charge you or treat you differently for asking. On the last one, two honest limits: deleting the post on the platform itself is faster and removes it from everyone who collected it, and we can only reach our own systems, not a copy a customer has already read or exported.
Acceptance of these terms
Using this website or the BrandRobin product means you accept this policy.
If you do not accept it, please do not use them. Continuing to use them after a change to this page means you accept the change.
Links to other sites
This site links out: to the platforms we read, to our own product, and to the occasional article worth reading.
Once you follow a link you are on somebody else's site, under somebody else's policy. We have no control over what they collect, and this policy stops at our edge.
Changes to this privacy policy
When this policy changes, the date at the top changes with it.
If a change materially affects what we do with your information, we will say so rather than quietly updating the page and hoping nobody reads it.
Contact
privacy@brandrobin.ai for anything in this policy, including a request about your own information or the removal of a post.
hello@brandrobin.ai for everything else.