BRANDBIO PRIVACY POLICY

BrandBio LLC

Effective Date: September 30, 2025

This Privacy Policy describes how BrandBio LLC ("BrandBio," "we," "us," or "our") collects, uses, and shares information about you when you use our website builder service and related features (collectively, the "Service"). This Privacy Policy applies to information we collect when you use our Service, visit our website at brandbio.io, or otherwise interact with us.

By using our Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access or use our Service.

Information We Collect

Information You Provide to Us

We collect information you provide directly to us, including:

Account Information

• Email address and password when you create an account
• Billing information and payment details when you subscribe to our Service

Profile Information

• Display name (the public name shown on your BrandBio page)
• Content genre tags that describe your content categories
• Location information (you control the level of detail shared)
• Contact email address for brand inquiries
• About Me description and biographical information
• Names of brands you have worked with

Platform Authentication Data

When you connect your social media accounts to our Service, we collect:

• Authentication tokens and permissions from YouTube via Google OAuth
• Access to YouTube Analytics API and YouTube Data API
• In the future: Authentication and API access for TikTok and Instagram accounts

Communications

• Information you provide when you contact our support team
• Feedback and correspondence sent to us

Information We Collect Automatically

Currently, our Service does not use analytics tools or tracking technologies. We collect minimal technical information necessary for the Service to function, including:

• Basic server logs for security and performance monitoring
• Information necessary to process your payments

Information from Third-Party Platforms

When you authorize us to connect to your YouTube account (and in the future, TikTok and Instagram), we access:

• Channel analytics and performance metrics
• Video metadata and thumbnails
• Subscriber counts and engagement statistics
• Other publicly available channel information

This data is retrieved directly from platform APIs in accordance with their terms of service and is used solely to display on your BrandBio page.

How We Use Your Information

We use the information we collect to:

Provide and Maintain Our Service

• Create and manage your BrandBio page
• Display your creator analytics and content on your public page
• Provide customer support

Communicate with You

• Send account-related communications
• Respond to your inquiries and support requests
• Send important Service updates and changes

Improve Our Service

• Understand how users interact with our Service
• Develop new features and functionality
• Ensure technical functionality and security

Comply with Legal Obligations

• Respond to legal requests and prevent harm
• Enforce our Terms of Service and other policies
• Protect rights, property, and safety

How We Share Your Information

Public Information

Your BrandBio page is public by default. This means that anyone can view:

• Your display name and profile information
• Your YouTube analytics and performance metrics
• Brand partnerships you choose to display
• Your About Me description
• Your contact email for brand inquiries
• Any other information you add to your public page

You maintain control over your page and can unpublish it at any time through your account settings.

Service Providers

We work with third-party service providers who assist us in operating our Service:

• Payment processors to handle subscription billing
• Cloud hosting providers for data storage
• Email service providers for communications

These providers have access only to the information necessary to perform their services and are obligated to protect your information.

Business Transfers

In the event of a merger, acquisition, or sale of our assets, your information may be transferred as part of that transaction. We will notify you of any such change and any choices you may have regarding your information

Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities, including to meet national security or law enforcement requirements.

With Your consent

We may share your information for other purposes with your explicit consent.

What We Don't Do

We do not sell, rent, or trade your personal data to third parties. We do not:

• Sell creator data or analytics to brands or any other parties
• Use your social media data for advertising purposes
• Share your authentication tokens or private account access
• Transfer your data except as explicitly described in this policy

Your Rights and Choices

Account Management

You have the right to:

• Access and update your account information at any time
• Delete your account and associated data
• Unpublish your BrandBio page while maintaining your account
• Revoke social media platform authorizations
• Request a copy of your personal data

Platform Authorizations

You can revoke our access to your YouTube, TikTok, or Instagram accounts at any time through:

• Your BrandBio account settings
• The respective platform's connected apps settings
• Platform-specific privacy controls

Revoking access will prevent us from updating your analytics but will not automatically delete previously collected data displayed on your page.

Email Communications

You can opt-out of promotional emails by following the unsubscribe instructions in those messages. You will continue to receive transactional and account-related communications.

Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with our Service. Specifically:

• Account information is retained until you delete your account
• Social media analytics data is refreshed regularly and historical data may be retained for comparison features
• Payment records are retained as required for tax and accounting purposes
• Communications are retained for customer service purposes

Upon account deletion, we will delete or anonymize your personal information within 30 days, except where retention is required by law.

Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized or unlawful processing, accidental loss, destruction, or damage. These measures include:

• Encryption of sensitive data in transit and at rest
• Secure authentication mechanisms
• Regular security assessments
• Limited access to personal information by authorized personnel

While we strive to protect your information, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

Children's Privacy

Our Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

International Data Transfers

BrandBio LLC is based in the United States. If you are accessing our Service from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States where our servers are located. By using our Service, you consent to such transfer.

Third-Party Links and Services

Our Service may contain links to third-party websites or services that are not operated by us. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services. We encourage you to review the privacy policies of any thirdparty services you visit.

Platform-Specific Terms

YouTube Data

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We:

• Only use YouTube data to display on your public BrandBio page
• Do not transfer YouTube data except to provide the Service features
• Do not use YouTube data for advertising or marketing purposes
• Allow you to revoke access at any time

Future Platform Integrations

When we add TikTok and Instagram integrations, we will update this Privacy Policy to reflect platform-specific data handling practices and comply with their respective API terms.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the new Privacy Policy on this page
• Updating the "Effective Date" at the top
• Sending an email notification for significant changes

Your continued use of our Service after changes become effective constitutes acceptance of the revised Privacy Policy.

Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us at:

BrandBio LLC
Email: contact@brandbio.io
Website: https://brandbio.io

For privacy-related requests, including data access or deletion requests, please email us with "Privacy Request" in the subject line.

Additional Rights for Certain Jurisdictions

California Residents

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including:

• The right to know what personal information we collect, use, disclose, and sell
• The right to request deletion of your personal information
• The right to opt-out of the sale of personal information (note: we do not sell personal information)
• The right to non-discrimination for exercising your privacy rights

European Union Residents

If you are in the European Union, you have rights under the General Data Protection Regulation (GDPR), including:

• The right to access your personal data
• The right to rectification of inaccurate data
• The right to erasure ("right to be forgotten")
• The right to restrict processing
• The right to data portability
• The right to object to processing

To exercise any of these rights, please contact us using the information provided above.