Privacy.

Information we collect

We may collect contact and account information, business details supplied through onboarding, website URLs, generated analyses, purchase and subscription status, service communications, and technical usage data. Payment card data should be handled directly by the connected payment processor and not stored by The Branding Co.

How we use information

We use information to provide scores, audits, recommendations, monitoring and support; operate and secure the service; process transactions; improve methodology; and send service-related messages. Marketing communications require an appropriate lawful basis and an unsubscribe mechanism.

Service providers and AI systems

Approved providers may process limited information for hosting, analytics, payment, communications and analysis. Portal authentication is currently provided by Supabase; score and audit records remain in the Site infrastructure. Customer confidential information should not be used to train public models unless explicitly agreed. Provider contracts and retention settings must be reviewed before production use.

Retention and security

Information should be retained only as long as needed for the stated purposes, contractual obligations, legal requirements and dispute handling. Access should be limited by role, and sensitive configuration stored as managed secrets.

Your choices

Subject to applicable law, individuals may request access, correction or deletion, withdraw consent where applicable, or ask questions about handling practices by emailing mybrand@thebrandingco.ca.

Canadian privacy

The final policy must identify the accountable organization, governing provincial and federal privacy regimes, cross-border processing disclosures, breach procedures and complaint escalation path.