Privacy Policy
Effective June 11, 2026
BrandGauge helps Nigerian and West African marketing teams understand how their brands are perceived online. This policy explains what data we collect when you connect your social accounts, how we store it, and the rights you have over it.
1. What we collect
When you connect a social account (Instagram, Facebook, or X/Twitter), we collect:
- Your account name, account ID, and follower count
- Post content, media URLs, and publication dates
- Public engagement metrics — likes, comments, shares, saves, impressions, and reach
- Public mentions of your connected brand name on X/Twitter
- OAuth access tokens that allow us to fetch the above on your behalf
We do not collect private messages, follower lists, personal information about your audience, or any data that is not directly related to your brand's public performance.
2. How we use it
We use the data you share exclusively to power your BrandGauge workspace:
- Calculating your Brand Health Index, sentiment scores, and share of voice
- Populating your Content Performance table and analytics dashboards
- Running AI-powered brand health questions through the Ask AI feature
- Scoring content before posting with the Pre-Post Widget
Your data is never used to train AI models, shared with other BrandGauge customers, or used for any purpose outside your workspace.
3. How we store it
All data is stored in a secured, encrypted Postgres database hosted on Supabase with servers in the EU West region. Access is enforced at the row level — only members of your workspace can read your data.
OAuth access tokens are encrypted at rest using AES-256-GCM before storage and are never returned to the client or exposed via any API endpoint. They are decrypted server-side only when needed to sync your data.
Data is synced nightly. We retain your data for as long as your account is active.
4. We never sell your data
BrandGauge does not sell, rent, license, or otherwise transfer your data to any third party for commercial purposes. Full stop.
We use a small number of sub-processors to operate the service — including Supabase (database), Vercel (hosting), Anthropic (AI inference), and Upstash (caching). Each processes data only as instructed and under strict data processing agreements. None of them receive your data for their own commercial use.
5. Third-party platforms
Connecting a social account means BrandGauge accesses data from that platform on your behalf. Your use of those platforms remains governed by their own terms and privacy policies:
- Meta (Facebook and Instagram): facebook.com/policy.php
- X (Twitter): x.com/en/privacy
You can revoke BrandGauge's access to any platform at any time from that platform's app permissions settings, independently of deleting your BrandGauge account.
6. Your rights and data deletion
You have the right to:
- Access a copy of all data we hold about your workspace
- Correct inaccurate data
- Request deletion of your account and all associated data
- Disconnect any social account at any time from your dashboard
To request data access or deletion, email us at privacy@brandgauge.app. We will respond within 5 business days and complete any deletion request within 30 days.
7. Contact
If you have any questions about this policy, reach us at privacy@brandgauge.app.