Privacy Policy

Last updated: February 24, 2026

BrandEngine ("we", "our", or "the Service") is an AI-powered brand management and content creation platform operated by Utilizebot. This Privacy Policy explains how we collect, use, and protect your information when you use our Service.

1. Information We Collect

Account Information: When you register, we collect your name, email address, and password.

Brand Data: Brand names, descriptions, logos, industry, tone of voice, and other brand configuration you provide.

Social Media Accounts: When you connect social media platforms (Twitter, LinkedIn, Facebook, Instagram), we store OAuth tokens and page/account identifiers necessary to publish content on your behalf. We do not store your social media passwords.

Generated Content: AI-generated text and images created through the Service.

Usage Data: Basic usage logs including timestamps, features used, and error reports to improve the Service.

2. How We Use Your Information

• To provide the Service: generating content, scheduling and publishing posts to your connected social media accounts
• To authenticate you and manage your account
• To improve and maintain the Service
• To communicate with you about your account or the Service

3. Social Media Platform Data

When you connect Facebook and/or Instagram through Meta OAuth, we request the following permissions:

• pages_show_list — to display your Facebook Pages for selection
• pages_manage_posts — to publish posts to your Facebook Page
• pages_read_engagement — to read engagement data on published posts
• business_management — to list the Meta Business Managers you belong to and the Pages assigned within them, so you can publish to Pages managed on behalf of a Business
• Business Asset User Profile Access — to identify you as a Business asset role-holder when listing the Businesses you administer (used together with business_management)
• instagram_basic — to access your Instagram Business account profile
• instagram_content_publish — to publish photo posts to your Instagram account

We only use these permissions for the purposes described above. We do not sell, rent, or share your social media data with third parties. You can disconnect your social accounts at any time from the Automation settings page, which revokes our access.

3.1 Google and YouTube Data

BrandEngine offers optional integrations with Google services. When you use them, we request only the following Google OAuth scopes, each for a single purpose:

• Sign in with Google (openid, email, profile) — to authenticate you and create or match your BrandEngine account by your verified email address
• Google Drive read-only (drive.readonly) — to let you pick images from your own Drive folders to attach to posts, only for brands where you connect Drive
• YouTube upload (youtube.upload) — to publish videos to your own YouTube channel when you request or schedule a post
• YouTube read-only (youtube.readonly) — to identify your channel at connection time and read view/like/comment counts on posts we published for you
• YouTube manage (youtube.force-ssl) — to reply to comments on your videos from the unified inbox and to delete a video when you retract a post

We store the resulting OAuth tokens encrypted, use Google user data solely to provide the features you invoked, and never sell it, use it for advertising, or allow humans to read it except with your consent, for security, or to comply with law. BrandEngine's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Our YouTube features use YouTube API Services. By connecting YouTube you also agree to the YouTube Terms of Service; the Google Privacy Policy applies to Google's handling of your data. You can revoke BrandEngine's access to your Google data at any time from the Automation settings page or via Google security settings; on disconnection we delete the stored tokens.

4. Data Storage and Security

Your data is stored on secure servers. OAuth tokens are stored in an encrypted database. We use industry-standard security measures to protect your information. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

5. Data Retention

We retain your data for as long as your account is active. When you delete your account or disconnect a social media account, the associated credentials and tokens are permanently removed. Generated content may be retained in your content library until you delete it.

6. Third-Party Services

We use the following third-party services:

• Meta (Facebook/Instagram) — for social media publishing via Graph API
• LinkedIn — for social media publishing via LinkedIn API
• Twitter/X — for social media publishing via Twitter API
• AI Services — for content and image generation

7. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Disconnect any connected social media account at any time
• Export your generated content

8. Data Deletion

To request deletion of your data, you can: delete your account from Settings, disconnect social accounts from the Automation page, or contact us at the email below. We will process deletion requests within 30 days.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice on the Service.

10. Contact Us

If you have any questions about this Privacy Policy, please contact us at:
Email: mohameds.tulib77@gmail.com
Company: Utilizebot