Legal
Privacy Policy
Effective date: September 1, 2026
Last updated: September 1, 2026
The Branded Agency Inc. (“The Branded Agency,” “we,” “us” or “our”) operates the Brand Health Audit available at audit.brandedagency.com, including its associated accounts, audit reports, connected services and agent integrations (collectively, the “Service”).
This Privacy Policy explains what information we collect, how we use and disclose it, how long we retain it, and the choices available to you.
By using the Service, you acknowledge the practices described in this Privacy Policy.
1. About the Brand Health Audit
The Brand Health Audit is an automated diagnostic that evaluates how a business presents itself across its publicly accessible website, search presence, AI visibility, social profiles, reviews, listings and other relevant sources.
The Service may also allow you to provide additional business information, upload brand materials or connect authorized third-party accounts for a more complete analysis.
The Service uses automated systems, including artificial intelligence, to collect, organize, analyze and summarize information. Audit findings may contain errors, omissions or inferences and should be reviewed in context. The Brand Health Audit is not a substitute for customer research, legal advice, financial advice or a full strategic brand audit.
2. Information we collect
The information we collect depends on how you use the Service.
Information you provide directly
We may collect:
- Your name
- Work email address
- Company name
- Job title or role
- Account login information
- Website addresses
- Public social-media or business-profile links
- Founder, executive or spokesperson information
- Business category, markets, geography and target audiences
- Competitor names and websites
- Business objectives, performance indicators and other market context
- Responses provided through the audit intake
- Communications, support requests and feedback
- Information provided when you book an audit review or contact The Branded Agency
Please do not submit passwords, payment-card information, government identifiers, health information or other sensitive personal information through the audit intake.
Materials you upload
You may choose to upload brand guidelines, positioning documents, marketing materials, reports or similar business files.
Uploaded materials may contain confidential or personal information. You are responsible for ensuring that you are authorized to provide those materials and that they do not contain information that is unnecessary for the audit.
Publicly accessible information
To prepare an audit, we may collect and analyze publicly accessible business and professional information, including:
- Website pages, copy, metadata, images and structured data
- Public business listings
- Search results
- Public social-media profiles and posts
- Public reviews and ratings
- Public press coverage, interviews, awards and articles
- Public professional biographies and founder profiles
- Other publicly accessible brand-relevant information
We limit our analysis of founders, executives and other identifiable individuals to professional, public and brand-relevant signals. We do not intentionally analyze private accounts or personal lifestyle content that is unrelated to the business being audited.
The fact that information is publicly accessible does not necessarily remove it from the protection of applicable privacy laws. We therefore limit collection and use to information reasonably necessary to provide the Service.
Connected-account information
You may be offered the option to connect a third-party service, such as a read-only advertising, analytics or business account.
When you connect an account, we may receive:
- Account identifiers
- Authorized profile or business information
- Campaign, audience and performance data
- Analytics and attribution information
- Authentication tokens needed to maintain the connection
- Information describing the permissions you granted
We use authorization methods provided by the connected service. We do not ask for or receive your account password.
Connected-account information is used only for the purposes explained when you authorize the connection. You can revoke access through the connected service or your Brand Health Audit account.
Audit and report information
We create and retain information associated with your audit, including:
- Audit status and completion dates
- Pages and sources reviewed
- Findings and supporting evidence
- Brand Health Scores and category scores
- Data-coverage and confidence assessments
- Generated summaries and recommendations
- Report-access and delivery records
- Corrections, challenges or review notes
Technical and usage information
When you use the Service, we may automatically collect:
- IP address
- Browser and device information
- Operating system
- Pages viewed and actions taken
- Referring website
- Approximate location derived from IP address
- Session, authentication and security logs
- Cookie and analytics identifiers
- Consent records, including the version, date and time
- Agent-integration connections and tool-call records
- Error, performance and diagnostic information
Country eligibility information
The free automated audit is currently available only to businesses in selected countries. To apply that rule we collect and store:
- The business country you select in the audit form
- An approximate country determined from your network connection at the time of the request
- The outcome of the eligibility check, the reason for it, when it was carried out and which method was used
- Any access request you submit and the decision an administrator records, including internal review notes
We use this information to confirm eligibility, prevent misuse of the free audit, apply usage limits and decide access requests. We do not store the raw IP address used for the country check, and the approximate country is a country-level signal only — not a precise location. Eligibility results are re-checked periodically, when you change your declared country, or when a request looks inconsistent with your earlier verification.
3. How we collect information
We collect information:
- Directly from you
- From publicly accessible online sources
- From services you choose to connect
- From cookies, analytics and security technologies
- From service providers acting on our behalf
- From your authorized AI assistant when it uses an agent integration
4. How we use information
We may use information to:
- Create, score and deliver your Brand Health Audit
- Discover and verify relevant public brand signals
- Generate findings, summaries and recommendations
- Create and manage your account
- Authenticate users and protect private reports
- Operate connected services and agent integrations
- Communicate about audit status, account activity and service changes
- Respond to questions, corrections, complaints and support requests
- Arrange an optional audit-review call
- Detect fraud, abuse, security threats and unauthorized access
- Monitor performance, troubleshoot errors and improve reliability
- Enforce usage limits and manage service costs
- Develop and improve the Service
- Produce aggregated or de-identified research and benchmarking
- Meet legal, regulatory, tax and recordkeeping obligations
- Protect our rights, users, systems and business
We may contact you with administrative messages necessary to provide the requested audit.
Marketing communications are separate. We will send promotional email only where you have consented or where otherwise permitted by applicable law. You may unsubscribe at any time.
5. AI and automated processing
The Service uses artificial intelligence and other automated systems to analyze submitted and publicly accessible information.
These systems may:
- Extract and classify website content
- Compare information across sources
- Identify inconsistencies or missing signals
- Generate scores and confidence assessments
- Summarize findings
- Produce suggested priorities or recommendations
AI-generated outputs are probabilistic and may be incomplete or inaccurate. Material findings are intended to identify their source, observation date and confidence level so you can evaluate the evidence.
The Service is not used to make employment, credit, insurance, healthcare, legal or other decisions that produce significant effects concerning an individual.
We do not use identifiable audit data, uploaded materials or connected-account data to train general-purpose AI models. We may use aggregated or de-identified information to evaluate and improve the Service where the information can no longer reasonably be associated with an identifiable person or business account.
Information may be processed by AI service providers acting on our behalf. We limit the information provided to those services where reasonably possible and require service providers to handle it only for authorized purposes.
6. Consent and other grounds for processing
Depending on the circumstances and applicable law, we process information based on:
- Your consent
- Your request that we provide the Service
- Our legitimate business interests in operating, securing and improving the Service
- Compliance with legal obligations
- Protection of our users, rights and systems
Where consent is required, you may withdraw it subject to legal, contractual and technical restrictions. Withdrawing consent may prevent us from continuing to provide some features.
Your request to receive an audit report does not automatically constitute consent to receive marketing communications.
7. How we disclose information
We may disclose information to the following categories of recipients.
Service providers
We use service providers to help us operate the Service, including providers of:
- Website and application hosting
- Cloud databases and storage
- Authentication
- Artificial-intelligence processing
- Website crawling and data extraction
- Email delivery
- Analytics and performance monitoring
- Security and abuse prevention
- Customer relationship management
- Appointment scheduling
- Technical support
These providers may access information only as reasonably necessary to provide services to us and are expected to protect it appropriately.
Connected services
When you connect a third-party account, information may be exchanged with that provider according to the permissions you authorize and that provider’s privacy policy.
Legal and safety disclosures
We may disclose information where we reasonably believe disclosure is necessary to:
- Comply with a law, regulation, subpoena, court order or lawful request
- Investigate fraud, abuse or security incidents
- Enforce our Terms of Use
- Protect the rights, safety or property of The Branded Agency, our users or others
- Establish, exercise or defend legal claims
Business transactions
Information may be disclosed as part of a proposed or completed merger, financing, acquisition, restructuring, sale of assets or similar business transaction. Any recipient will be required to handle personal information in accordance with applicable law.
With your direction or consent
We may disclose information when you ask us to do so or provide separate consent.
8. Sale of personal information
The Branded Agency does not sell personal information.
We do not disclose personal information to third parties for their own independent advertising purposes without consent.
9. International processing
The Branded Agency is based in British Columbia, Canada. Some of our service providers may process or store information in Canada, the United States or other countries.
Information processed outside your jurisdiction may be subject to the laws of the country where it is processed and may be accessible to courts, law-enforcement agencies or governmental authorities in that country.
We use contractual, technical and organizational measures intended to protect information when it is processed by service providers in other jurisdictions.
10. Retention
We retain information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including providing stable report snapshots, responding to questions, preventing abuse and meeting legal obligations.
Unless a longer period is reasonably required:
- Raw website-scan and extraction data is deleted or de-identified within 90 days after the audit is completed.
- Audit records, submitted intake information and report snapshots may be retained for up to 24 months after your last activity.
- Uploaded materials may be retained for up to 24 months or until you delete the associated audit or account.
- Connected-account tokens are retained only while the connection remains active.
- Security, access and agent-integration logs may be retained for up to 12 months.
- Consent, unsubscribe and compliance records may be retained for as long as reasonably necessary to demonstrate compliance with applicable law.
- Aggregated or de-identified information may be retained for longer where it can no longer reasonably be associated with you.
You may request deletion as described below. We may retain limited information where required by law, necessary to resolve a dispute, prevent fraud or maintain an unsubscribe record.
11. Security
We use reasonable administrative, technical and organizational safeguards designed to protect information against unauthorized access, use, alteration, disclosure or destruction.
These safeguards may include:
- Access controls and authentication
- Restricted employee and contractor access
- Encryption where appropriate
- Limited connected-account permissions
- Security monitoring and logging
- Backups and recovery procedures
- Vendor and service-provider review
- Usage limits and abuse detection
No online system can be guaranteed to be completely secure. You are responsible for maintaining the confidentiality of your account credentials and for notifying us if you believe your account has been compromised.
12. Your rights and choices
Depending on where you live, you may have the right to:
- Ask whether we hold personal information about you
- Request access to that information
- Request correction of inaccurate or incomplete information
- Request deletion of information
- Withdraw consent
- Object to or restrict certain processing
- Request information about our service providers or cross-border processing
- Request human review of a concern involving an automated result
- Make a complaint to an applicable privacy regulator
We may need to verify your identity before responding. Some rights are subject to legal exceptions.
To make a request, contact us using the information below, or use the delete my data form.
Marketing communications
You may unsubscribe using the link in any marketing email. Administrative messages related to an audit, account, security issue or requested service may still be sent.
Connected accounts
You may disconnect a third-party service through your account or the third party’s authorization settings.
Cookies
You may control cookies using your browser settings and any cookie-management tools made available through the Service. Disabling some cookies may affect functionality.
13. Information about founders and other third parties
If you submit information about a founder, employee, competitor or other identifiable person, you confirm that:
- The information is professional and brand-relevant
- You have a legitimate business reason to provide it
- You are authorized to provide any non-public information
- You are not using the Service to harass, profile or cause harm to that person
An individual may contact us to challenge, correct or request removal of personal information included in an audit, subject to applicable law.
14. Agent integrations
The Service may allow you to connect an AI assistant or other compatible agent through an integration.
When you authorize an integration:
- The assistant may call only the tools and access only the information made available through the integration.
- Tool calls act on behalf of the authenticated user.
- The integration may receive audit status, findings or other account information needed to complete your request.
- We may log tool calls for security, support, cost management and compliance.
- Information returned to the assistant will also be handled according to the assistant provider’s privacy policy and settings.
- Disconnecting the integration prevents future access but does not necessarily delete information previously received by the assistant provider.
Review your assistant provider’s privacy and data-retention settings before connecting it. Do not authorize an assistant you do not trust.
15. Cookies and analytics
We may use cookies and similar technologies to:
- Keep you signed in
- Remember preferences
- Maintain security
- Understand how the Service is used
- Diagnose errors
- Measure performance and conversion
Where required, non-essential cookies will be used only after obtaining consent.
For more information, review the Cookie Policy linked through the Service.
16. Third-party websites and services
The Service may link to websites, scheduling tools, social networks, connected platforms or other services operated by third parties.
We are not responsible for the privacy, security or content practices of third parties. Review their policies before providing information or connecting an account.
17. Children
The Service is intended for business users and is not directed to children under 16.
We do not knowingly collect personal information directly from children through the Service. If you believe a child has provided personal information, contact us so we can investigate and take appropriate action.
18. Changes to this Privacy Policy
We may update this Privacy Policy to reflect changes to the Service, our practices or applicable law.
The revised version will be posted with a new “Last updated” date. Where a change materially affects how we use previously collected personal information, we will provide additional notice or obtain consent where required.
19. Contact us
Questions, complaints and requests concerning privacy may be directed to:
Privacy Officer
The Branded Agency Inc.
Suite 506, 1231 Pacific Boulevard
Vancouver, British Columbia V6Z 0E2
Canada
Email: hello@brandedagency.com
Telephone: +1 (236) 987-6005
If we are unable to resolve a privacy concern, you may have the right to contact the Office of the Information and Privacy Commissioner for British Columbia or another regulator responsible for your jurisdiction.
