Brandios (brandios.ai) is a product of Nextvibe LLC-FZ, a company registered in Dubai, United Arab Emirates (“Brandios”, “we”, “us”). Nextvibe LLC-FZ is the data controller for the personal data described in this policy. You can reach us any time at info@brandios.ai.
Brandios turns one short clip you film of yourself into an ongoing social media presence: we generate videos and posts featuring your digital twin, and — only with your authorization — publish them to your connected social accounts and read how they perform. This policy explains exactly what data that involves, how long we keep it, and how you delete it.
1. Data we collect
- Account data — name, email address, phone number (for WhatsApp approvals), password or social sign-in identifier, workspace settings.
- Your reference clip and twin data — the short video you record during enrollment, which contains your face and voice. From it we derive your twin: appearance and voice characteristics used to generate videos of you. We treat this as sensitive (biometric-adjacent) data — see section 5.
- Brand profile data — the voice, audience, topics, and preferences you configure, plus content you provide (voice notes, ideas, drafts).
- Social platform data— when you connect an account, we receive, at your direction and via each platform’s official API: your basic profile (name, handle, avatar, page/account IDs), OAuth tokens, your own posts, and engagement metrics on them (reach, likes, comments, shares). We access only your own accounts and content — Brandios does not scrape, and does not collect data about other people’s accounts.
- Payment data — handled by our payment processor; we store subscription status and invoices, never full card numbers.
- Usage and device data — log data, approximate location from IP, and product analytics used for security and to improve the service.
2. How we use your data
- To provide the service: generate your twin videos, write posts in your voice, and schedule content.
- To publish content to your connected accounts — only content you have approved or that falls within the approval rules you set.
- To run your learning loop: we analyze the performance of your own posts so next week’s plan improves.
- To message you for approvals and service updates on WhatsApp, if you opt in.
- To bill you, secure the service, comply with law, and respond to support requests.
We do not sell, license, or purchase personal data, we do not share it with data brokers, and we do not use data received from any connected platform for advertising, surveillance, eligibility determinations (such as housing, employment, insurance, or credit), or to discriminate against anyone. Legal bases where GDPR or similar laws apply: performance of our contract with you, your consent (twin enrollment, WhatsApp messages, marketing), and legitimate interests (security, product analytics).
3. Platform-specific commitments
Brandios uses the official APIs of the platforms below. For every platform: we access only the data needed for the features you use, we use it only to provide those features to you, we never sell or transfer it to third parties (including data brokers or ad networks), and we delete it when you disconnect the platform, when you delete your Brandios account, or when it is no longer needed — whichever comes first. Your learning loop runs on your own accounts only: data from your accounts is never used to profile, train models for, or otherwise benefit any other customer, and we never use platform data to infer sensitive characteristics about anyone (such as health, political views, religion, ethnicity, or sexual orientation).
Meta (Facebook & Instagram)
We receive your Page / professional account identifiers, tokens, your posts, and their insights via Meta’s Graph API, and we publish content to your accounts at your direction. Our use of Meta Platform Data follows the Meta Platform Terms and Developer Policies. You can request deletion at any time — see Data deletion; disconnecting Brandios from your Facebook or Instagram settings also triggers deletion of the related platform data.
We access your profile identifiers, the posts we publish for you, and their engagement via LinkedIn’s APIs, in line with LinkedIn’s API Terms of Use. LinkedIn member data is deleted on request, when you disconnect LinkedIn, or when no longer required. LinkedIn is not responsible for Brandios.
X (Twitter)
We publish posts you approve and read your own posts and engagement via the X API, under the X Developer Agreement & Policy. If you delete a post on X, we delete our stored copy within 24 hours. We do not match X data with other data sources to build profiles, and we do not use X data off-platform beyond providing the service to you.
TikTok
We upload and publish videos to your TikTok account via TikTok’s Content Posting API and read your own video metrics. Depending on our current API audit status, TikTok may require uploaded videos to arrive as private drafts that you review and publish inside the TikTok app. AI-generated twin videos are labeled as AI-generated content (AIGC) as TikTok requires.
You can sign in to Brandios with Google. Brandios’ use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. You can revoke Brandios’ access at any time in your Google security settings.
Approval messages are sent over WhatsApp only if you opt in. Message and data rates may apply; you can opt out at any time by telling us in the chat or emailing us. WhatsApp is a Meta service with its own privacy policy.
4. Who we share data with
Only service providers (processors) acting under contract for us, and only what each needs: cloud hosting and storage, AI generation providers that render your twin videos and drafts, our WhatsApp business messaging provider, our payment processor, and analytics/error-monitoring tooling. Each is bound to protect your data at least as strictly as this policy. We may also disclose data if the law requires it, or as part of a merger or acquisition in which the recipient honors this policy.
5. Your face, voice, and twin
- We create your twin only after your explicit consent during enrollment, and only from a clip of you. Creating a twin of someone else requires their documented consent and is otherwise prohibited.
- Your reference clip and derived twin model are used solely to generate content you direct — never to train models for anyone else, and never sold, leased, or traded.
- Deleting your twin (or your account) deletes the reference clip and every derived model — within 30 days of account closure at the latest. In any event we destroy this data no later than three years after your last interaction with Brandios, and sooner once it is no longer needed for the purpose you consented to.
- Where the law requires it (for example the EU AI Act), AI-generated videos of your twin are disclosed as artificially generated.
6. Retention
- Platform data (posts, metrics, tokens): deleted when you disconnect the platform or delete your account; refreshed copies are kept only as long as features need them.
- Reference clip & twin model: per section 5.
- Account and billing records: for the life of the account plus the period required by tax and commercial law.
- Logs and analytics: short, rolling windows.
7. Data deletion — how to delete your data
This section doubles as our deletion instructions for all connected platforms:
- In the app: Settings → Account → Delete account deletes your account, twin, reference clip, and all stored platform data.
- Per platform: disconnect a platform in Settings → Connections (or revoke Brandios from the platform’s own app settings — e.g. Facebook/Instagram “Apps and Websites”, Google security settings). We then delete the data received from that platform.
- By email: send a deletion request to info@brandios.ai from your account email. We confirm completion within 30 days.
8. Your rights
Depending on where you live (including the EEA/UK under GDPR, California under CCPA/CPRA, and the UAE under the Personal Data Protection Law), you may have the right to access, correct, delete, restrict or object to processing, receive a portable copy, withdraw consent at any time, and complain to your supervisory authority. We do not sell or “share” personal information as defined by the CCPA, and we never discriminate against you for exercising your rights. Brandios does not make automated decisions about you that produce legal or similarly significant effects. Exercise any right via info@brandios.ai.
9. International transfers
We operate from Dubai, UAE, and use processors in other countries. Where data moves across borders from regions that require it, we rely on appropriate safeguards such as standard contractual clauses.
10. Security
Data is encrypted in transit, access is scoped and logged, OAuth tokens are stored encrypted, and twins can only ever be triggered from their owner’s account. No system is perfectly secure; if a breach affects you, we will notify you and the relevant authorities as the law requires.
11. Children
Brandios is for adults building a professional presence. It is not directed at anyone under 18, and we do not knowingly process children’s data.
12. Changes to this policy
We will post updates here and, for material changes, notify you in the app or by email before they take effect.
13. Contact
Nextvibe LLC-FZ, Dubai, United Arab Emirates · info@brandios.ai