BrandRobin

Privacy policy

Robin cares about your privacy

Last updated 6 October 2026

BrandRobin reads public conversations so our customers can find out what is being said about their brand. That means we handle two different kinds of information: the ordinary details of people who visit this site or buy the product, and the public posts of people who have never heard of us.

This page covers both. It is written to be read rather than to be survived.

Introduction

BrandRobin is a social listening service. We read public conversations across seventeen channels and tell our customers what is being said about their brand, their competitors and their market.

This policy covers all of it: this website, the product itself, and the public conversations the product reads. It applies whether or not you are a customer, and whether or not you have ever heard of us.

We have tried to write it the way we would explain it out loud. Where a section could have been vague, it names the company, the country or the number instead, and the list of everyone we pass information to is further down this page rather than somewhere harder to find.

If anything here is still unclear, write to privacy@brandrobin.ai and we will answer in plain terms.

Definitions

Four terms do most of the work in this policy:

  • Personal information: anything that identifies a person, or could with a little effort. A name and an email address obviously; an account handle and an IP address also count.
  • A visitor: anyone reading this website. You do not need an account and we do not ask for one.
  • A customer: a person or company paying for BrandRobin, and the people they invite into their workspace.
  • A public post: something published openly on one of the channels we read, by somebody who is usually neither a visitor nor a customer.

Information we collect

From visitors to this website, without ever asking who you are:

  • the pages you open, in what order, and how far down them you scroll
  • your device, browser and operating system
  • an approximate location, worked out from your IP address: the city, not the street
  • the page or search that sent you here
  • errors the site throws while you are on it
  • a recording of the visit, covering the pages, clicks and scrolling, with typing into form fields masked

From anyone who joined our earlier waitlist: the email address they entered, stored in Google Forms and used only to tell them when they could sign up. From customers: the name and email you sign up with, your billing details, the brands and phrases you ask us to watch, and the results and reports we generate from them. And from public conversations: the text of a post, the account name that wrote it, when it was posted, a link back to it, the public counts the platform displays, and the channel or community it appeared in. We do not read anything behind a login, direct messages, private or closed groups, or posts that have been deleted.

How we use your data

Each thing we hold has a job, and it does not do any other job:

  • Website measurement: to see which pages work and which confuse people.
  • Form submissions: to set up the listeners we propose for your website.
  • Account data: to run your workspace, deliver your alerts and bill you.
  • Public posts: to tell our customers what is being said about them, which is the service they buy.
  • Errors and recordings: to find and fix what is broken.

We do not build advertising profiles, we do not use one customer's data to serve another, and we do not sell any of it to anybody.

Retention of data

Nothing is kept indefinitely because it might be useful one day.

  • Website analytics and session recordings: a limited period, then deleted automatically.
  • Email addresses from the earlier waitlist: until we have told you sign-up is open, or sooner if you ask us to remove you.
  • Customer account data: while the account is open, and for a short period after it closes so an account closed by mistake can be restored, then deleted. Ask us and we will delete it straight away.
  • Collected posts: for as long as your workspace keeps the listener that found them, so that trends and history stay useful, then deleted.
  • Invoices and records the law requires us to keep: for as long as it requires, and no longer.

Subprocessors

We use other companies to run the service. Each receives only what its job requires, and each is bound to use it only to provide its service to us.

  • PostHog

    Data processed
    Usage events, session recordings, IP address
    Purpose
    Website and product analytics
    Location
    United States
  • Google Analytics

    Data processed
    Usage events, IP address
    Purpose
    Website traffic measurement
    Location
    United States
  • Google Forms

    Data processed
    Email address
    Purpose
    The earlier waitlist
    Location
    Global
  • Railway

    Data processed
    Everything this site serves
    Purpose
    Application hosting
    Location
    United States
  • Cloudflare

    Data processed
    IP address, request metadata
    Purpose
    Delivery and security
    Location
    Global
  • Dodo Payments

    Data processed
    Name, email, billing details
    Purpose
    Merchant of record: subscriptions, billing and tax
    Location
    Global
  • Resend

    Data processed
    Name, email address
    Purpose
    Product and marketing email
    Location
    United States
  • Anthropic

    Data processed
    Collected posts, your questions
    Purpose
    The AI analyst
    Location
    United States

Two of these are worth a sentence each. Dodo Payments is our merchant of record, which means it is the seller on your invoice and handles the transaction and its tax; card numbers never reach us. Anthropic provides the models behind the AI analyst, under commercial terms that do not permit your content to be used to train them. We do not sell your information and we do not share it for anyone else's advertising. If we add a subprocessor that handles customer data, this table changes with it.

Integrations

BrandRobin can deliver findings into tools you already use: Slack, email and webhooks today, and AI agents through our MCP server once it launches.

When you connect one, you give us the access that integration needs and nothing more, and we use it only to send you what you asked for. We do not read your Slack messages, your inbox, or anything else in the connected tool.

Disconnecting an integration stops the delivery and revokes the access. You can do it yourself, at any time, without asking us.

Marketing

We do not send marketing email. There is no newsletter and no mailing list, so there is nothing here to unsubscribe from.

Product email is different. If you have an account we will email you about billing, security and material changes to the service, and you cannot unsubscribe from those while the account is open, because they are how we keep you informed about something you are paying for.

If we ever do start sending marketing email it will go only to people who asked for it, every message will carry an unsubscribe link that works immediately, and this section will say so before the first one is sent.

Cookies

This site uses two analytics services. PostHog handles product analytics and the session recording described above, and is served through our own domain rather than a third-party one. Google Analytics gives us a second, simpler view of traffic.

Both set cookies. Those cookies are what let us tell a returning visit from a new one; none is used to advertise to you anywhere else, and we run no advertising trackers on this site.

You can stop all of it. Blocking cookies in your browser, or using any of the common privacy extensions, prevents both tools from loading, and nothing on this site stops working if you do.

On Do Not Track: browsers can send a signal asking sites not to track you, but the signal has never had an agreed meaning and most sites ignore it. Rather than claim we honour something undefined, we have made the paragraph above true. Refusing cookies genuinely stops the measurement.

International data transfers

The subprocessor table is also a list of countries. Several of those companies are in the United States and some operate globally, so information covered by this policy will cross borders.

Where it does, we rely on the standard contractual protections those transfers require, and we choose providers that offer them. If you would like the detail for a particular provider, ask and we will send it.

Your rights

Wherever you live, and whether or not you are a customer, you can ask us to:

  • tell you what we hold about you
  • correct it, if it is wrong
  • delete it
  • send you a copy of it
  • stop using it for a particular purpose
  • stop sending you marketing, which you can also do yourself from any email we send
  • remove a public post you wrote: send us the link, no reason needed and no account needed

Write to privacy@brandrobin.ai. We will reply within 30 days and will not charge you or treat you differently for asking. On the last one, two honest limits: deleting the post on the platform itself is faster and removes it from everyone who collected it, and we can only reach our own systems, not a copy a customer has already read or exported.

Acceptance of these terms

Using this website or the BrandRobin product means you accept this policy.

If you do not accept it, please do not use them. Continuing to use them after a change to this page means you accept the change.

Changes to this privacy policy

When this policy changes, the date at the top changes with it.

If a change materially affects what we do with your information, we will say so rather than quietly updating the page and hoping nobody reads it.

Contact

privacy@brandrobin.ai for anything in this policy, including a request about your own information or the removal of a post.

hello@brandrobin.ai for everything else.