Privacy Policy
Effective October 7, 2026 · Updated November 5, 2026
This policy explains what Brand X Agency LLC ("Brand X," "we") collects when you use Brand AI Cortex (the "Cortex"), how we use it, and your choices.
The short version: we use your information to run your Cortex and talk to you about it. We don't sell it. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text-messaging opt-in data and consent are never shared with any third party.
What we collect
- Account details: name, email, mobile number and password (stored encrypted by our login provider).
- Your Cortex: archetype quiz answers, workbook answers, brand details, colors, files you upload, photos you add for logos or avatars, and content the Cortex creates for you.
- Billing: your plan, payment status and purchase history. Card details are handled by our payment processor; we don't store full card numbers.
- Usage: how many AI messages and images you use each day, device/browser type and basic logs needed to keep the service secure and working.
How we use it
- To run your Cortex, save it to your account and sync it across your devices.
- To generate AI text and images for you.
- To send account emails (like password resets) and, if you opted in, text messages.
- To process payments and manage your plan.
- To provide support, prevent abuse and improve the product.
Who we share it with
Only with service providers that help us run the Cortex, under their own security and privacy terms, and only what they need:
- Supabase (accounts and data storage)
- Netlify (hosting)
- Anthropic and OpenAI (AI text and images; your prompts, content and photos are sent to generate results for you)
- Our CRM and messaging platform (HighLevel / Expert Marketly) for contact records, email and text messages
- Resend (account emails)
- Our payment processor (billing)
We may also disclose information if required by law or to protect our rights or someone's safety, or as part of a sale or merger of our business. We do not sell or rent your personal information.
Google user data (Google Drive)
If you choose “Pick from Google Drive,” the Cortex asks Google for the drive.file permission only. That lets us open only the files you pick in the Google file picker. We can’t see, list or change any other file in your Drive.
- What we access: the name, type and contents of each file you pick.
- How we use it: only to add that file to your Cortex, so the Cortex can read it and use it to create content for you. Nothing else.
- How we store it: the file’s contents are saved in your Cortex account (Supabase) so you can use them later. Your Google sign-in token stays in your browser for that session. We don’t store it on our servers.
- Who we share it with: nobody, except the AI providers named above (Anthropic, OpenAI), and only to read the file for you. We never sell Google user data or use it for ads, and no human reads it unless you ask us for support, it’s needed for security, or the law requires it.
- Deleting it: remove a file from your Cortex at any time, or ask us to delete your account and everything is removed within 30 days. You can also remove the Cortex’s access in your Google Account permissions.
Brand AI Cortex’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We don’t use Google user data to develop, improve or train generalized AI or machine-learning models.
Text messages
We text you only if you opt in. Your mobile number and opt-in consent are not shared with third parties or affiliates for marketing or promotional purposes. Reply STOP to any message to stop texts. See our SMS Terms.
How long we keep it
We keep your Cortex while your account is open. If you ask us to delete your account, we delete your Cortex data within 30 days, except records we must keep for legal, tax or billing reasons. AI images are stored so you can view them; deleted accounts' images are removed with the account.
Security
Data is sent over encrypted connections, access to your Cortex is limited to your signed-in account, and our AI keys stay on our servers. No system is perfectly secure, so use a strong, unique password.
Your choices and rights
- See, update or download your information, or ask us to delete it, by contacting us.
- Unsubscribe from marketing emails with the link in any email.
- Stop texts by replying STOP.
- Depending on where you live, you may have additional rights under local law; contact us and we'll honor them.
Children
The Cortex is for adults 18+. We don't knowingly collect information from children. If you believe a child has given us information, contact us and we'll delete it.
Changes
We'll post updates here and change the effective date. Significant changes will be announced in the app or by email.
Contact us
Brand X Agency LLC
Phoenix, Arizona
Text or call: 480-428-4170
Email: support@brandaicortex.com