Privacy Policy
Effective October 21, 2026
We collect only what we need to run Brain Otter for you, we never sell personal information, and you can delete it at any time. This policy explains what 1591660 Ontario Corp. collects at brainotter.com, why, and your choices.
1. What we collect
| Information | Examples | Why |
|---|---|---|
| Account details | Name, email address, login | To sign you in and contact you about your account |
| Business information | Business name, website, description, offers, rules for what can be said | To research and write marketing content for the business |
| Content | Articles, social posts, images, schedules | To store, edit and publish it for you |
| Connected account data | Access tokens, account ids, usernames, boards or Pages, post results | To publish to and report on the accounts you connect |
| Contacts you add | Names, emails, phone numbers, consent records of your customers | To send the emails and texts you set up |
| Usage and technical data | Log entries, IP address, browser type, error reports | To keep the Service secure and working |
| Payment data | Billing details, handled by our payment provider | To charge for paid features; we do not store card numbers |
2. Pinterest data
If you connect a Pinterest account, we ask Pinterest for permission to read your account information (user_accounts:read), read your boards (boards:read) and Pins (pins:read), and create Pins (pins:write). We use this only to:
- show your boards so you can choose where a Pin goes;
- publish the Pins you create or schedule in the Service;
- show you whether a Pin was published.
We store your Pinterest access token encrypted, plus your account id, username and board names. We do not sell Pinterest data, share it with other users, use it for advertising profiles, or use it to train AI models. When you disconnect Pinterest in Settings, we delete the stored token right away. Pinterest does not let apps revoke their own access, so to remove it completely also open Pinterest › Settings › Security and logins › Connected apps and remove Brain Otter.
3. Google and Meta data
If you connect Google (Search Console, Analytics, Ads) or Meta (Facebook, Instagram), we read only the reports and account details needed to show your results and publish your content. Our use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements. Disconnecting deletes the stored tokens; where the provider allows it, we also revoke the access with them.
4. How we use AI
To write content, we send your business information and instructions to our AI provider (Anthropic). It processes them to return the text and does not use them to train its models. We do not send your contacts' personal information to the AI.
5. Who we share it with
We share information only with service providers that help run the Service, under agreements that limit their use to that purpose:
- hosting and database: Supabase, Vercel;
- AI writing: Anthropic;
- search and keyword data: DataForSEO (keywords and websites only, no personal information);
- email and text messages: Amazon Web Services;
- payments: Stripe;
- the platforms you connect, when you tell us to publish there.
We may also disclose information if the law requires it. We never sell or rent personal information. Some providers are in the United States, so your information may be stored and processed outside Canada.
6. How long we keep it
We keep your information while your account is open. When you delete your account, we delete your data within 30 days, except records we must keep by law (such as invoices). Copies in backups are removed as the backups expire. Contacts who unsubscribe are kept only as an entry so they are never messaged again.
7. Security
Data is encrypted in transit and at rest. Access tokens for connected accounts are stored encrypted and are never shown in the browser. Each business's data is separated so only its owner can see it.
8. Your rights
You can ask to see, correct, export or delete your personal information, or withdraw your consent, at any time. Email hello@brainotter.com and we will reply within 30 days. If you are not satisfied, you can complain to the Office of the Privacy Commissioner of Canada or your local data protection authority.
9. Children
The Service is for adults running a business. We do not knowingly collect information from anyone under 18.
10. Changes
We will post any change here with a new effective date, and email you before a significant change takes effect.
11. Contact
1591660 Ontario Corp., 213 Queensway S, Unit 400, Keswick, ON L4P 2A7, Canada. Privacy questions or requests: hello@brainotter.com.