Privacy Policy

Effective 15 September 2026

This policy explains what information BrandMaestro AI (“BrandMaestro AI”, “we”, “us”) collects, how it is used and shared, and the choices you have. BrandMaestro AI is operated by BAND AI. It covers the web application at brandmaestro.ddnsfree.com.

1. Information we collect

Account information

• Your first and last name, username, email address and business identifier.
• Your password, which is stored only as a one-way hash.

Content you provide or create

• Documents you upload (for example brand guidelines, past writing and product documents), and the text extracted from them.
• The brand voice profile built from those documents.
• Topics and instructions you enter, the content generated for you, and your approvals, rejections and feedback.

YouTube Studio

If you use the optional YouTube Studio, we also store:

• characters you create: names, voice choices and notes;
• face photos you upload, which you may only do after confirming you have the right to use them;
• style descriptions and reference images;
• a copy of the approved script each video is made from;
• generated voice audio, images, video clips, finished videos and thumbnails;
• video titles, descriptions, tags, category and audience setting;
• records of what each generation step cost.

Google user data (when you connect a YouTube channel)

When you connect a channel, you sign in with Google and grant BrandMaestro AI permission to upload and manage videos on YouTube (the youtube.upload and youtube permissions). We then receive and store:

• an OAuth refresh token, encrypted before it is stored, which lets the app act on your channel when you ask it to;
• your YouTube channel's ID and title;
• for videos uploaded through BrandMaestro AI only: the YouTube video ID, privacy status, processing status and any scheduled publish time.

We do not request or store your Google account password, and we do not access your email, contacts, other videos, comments, analytics or subscribers.

Technical information

• A sign-in token kept in your browser's local storage while you are signed in.
• A short-lived, HttpOnly cookie that exists for up to 15 minutes while you connect a YouTube channel, to confirm the sign-in finishes in the same browser.
• Server logs (such as IP address, pages requested, times and errors), used to run and secure the service.

We do not use advertising or analytics cookies.

2. How we use information

• To provide the service: learn your brand's voice, research and write content, and produce, upload and publish the videos you request.
• To improve results for your own account from your approvals and feedback.
• To secure the service, prevent abuse, fix problems and keep the service running.
• To contact you about your account or changes to these terms.

We do not sell your information, and we do not use it for advertising.

3. How we use Google user data

BrandMaestro AI uses YouTube API Services. By connecting a channel you also agree to the YouTube Terms of Service, and Google's handling of your data is described in the Google Privacy Policy.

We use Google user data only to provide the YouTube features you use in the app:

• uploading the videos you approve, as private;
• setting their details, thumbnail and AI-content disclosure;
• publishing or scheduling them when you choose to;
• showing you their status.

Nothing is uploaded or published without your action in the app.

BrandMaestro AI's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In particular:

• We do not use Google user data for advertising.
• We do not sell it.
• We do not use it to train AI models.
• We do not transfer it to others, except as needed to provide these features, to comply with law, or as part of a merger or sale with your data protected in the same way.
• People do not read it unless you ask us to, or it is needed for security or to comply with law.

Revoking access

You can remove BrandMaestro AI's access to your YouTube channel at any time in either of two ways:

• Click Disconnect in the Channel tab of YouTube Studio. This revokes the token with Google and deletes it, and your channel details, from our database.
• Remove the app on Google's security settings page: security.google.com/settings/security/permissions.

4. Service providers

To run BrandMaestro AI we send data to the providers below, only as needed for the feature you use. Some are used only when enabled for this service. Each processes data under its own terms.

• Google Cloud:
  • hosting and file storage;
  • Vertex AI (Gemini) language, embedding and image models, which receive your documents, prompts, scripts and character reference images;
  • Cloud Text-to-Speech, if enabled, which receives script lines.
• Anthropic and Groq: language models, if enabled; they receive the same text as the language model above.
• Voyage AI: text embeddings, if enabled; it receives document text.
• Parallel Web Systems: web research; it receives the research queries generated from your topics.
• fal.ai and WaveSpeed AI: image generation and talking-character video, if enabled; they receive scene descriptions, character images and voice audio.
• Comet (Opik): diagnostic tracing, if enabled; it receives prompts and model outputs.
• YouTube (Google): the videos, details and thumbnails you choose to upload.
• Google Fonts, cdnjs (Cloudflare) and jsDelivr: fonts, icons and a text-formatting library for the web app; your browser's IP address is visible to them when the app loads.

5. Storage and security

• Data is stored in a database and file storage on servers we control on Google Cloud.
• Connections use HTTPS.
• Passwords are hashed, and YouTube refresh tokens are encrypted at rest.
• Each business's data is kept separate from every other business's data.

No method of storage or transmission is completely secure, but we work to protect your information.

6. Retention and deletion

We keep your information while your account is active. You can delete data yourself in the app:

• Deleting a document removes it and its extracted text.
• Deleting a video project removes its script copy, audio, images, clips, rendered videos, and the record of its YouTube uploads.
• Deleting a character removes its face photos and character sheet.
• Disconnecting YouTube deletes the stored token and channel details.

Videos already uploaded to YouTube stay on YouTube until you delete them there.

To delete your account and all data associated with it, email aniekanudo@gmail.com. We will complete the deletion within 30 days, and revoke any YouTube access at the same time.

7. Your choices and rights

You can ask to access, correct, export or delete your personal information, or object to how it is used, by emailing aniekanudo@gmail.com. Depending on where you live, you may have further rights under local law, including complaining to a data protection authority.

8. Children

BrandMaestro AI is a business tool and is not directed to children. Do not use it if you are under 16. Do not upload photos or voices of children without the consent their law requires.

9. Changes

We may update this policy. The effective date above shows when it last changed. We will tell you in the app before a significant change takes effect.

10. Contact

BAND AI · aniekanudo@gmail.com