Privacy Policy

Who we are

Brandalf is a marketing software service built and operated by Active Games (Chaos Karts UAE), Dubai, United Arab Emirates ("we", "us"). This policy explains what data we collect when you use Brandalf, why we collect it, and the choices you have. Contact us any time at rushd@activegames.ae.

What we collect

When you create an account and connect your business accounts, we collect:

• Account details — your name, email address and business name.
• Meta Platform Data — when you connect your Facebook Page, Instagram account or ad account through Facebook Login for Business, we access the data you authorize: your page posts and their engagement (likes, comments, shares, reach), your ad campaigns and their performance (impressions, clicks, spend), and the basic details of the Pages and ad accounts you choose to connect.
• Google Drive files you choose — when you connect Google Drive and choose a video using Google's file picker, we access that selected file so we can prepare it for your marketing workspace. We do not browse or list the rest of your Drive.
• Content you provide — messages you send to the Brandalf assistant, marketing goals you describe, and creative assets you upload.
• Usage data — standard logs of how the service is used, for security and reliability.

How we use it

We use this data for one purpose: providing the Brandalf service to you. That means analysing which of your posts and ads perform, creating and adjusting the campaigns you approve, keeping your spend inside the budget you set, and reporting the results back to you in plain language.

We do not sell your data. We do not use one client's data to provide services to another client. Each client's data — including everything Brandalf learns about what works for their audience — is stored separately and used only for that client.

Google Drive

Google Drive access is optional. Only a workspace owner can start the connection, and Google shows you the permissions before you approve them. Brandalf uses the limited access needed for the file you select; your Google sign-in details and connection credentials are kept securely on our servers and are not shown to other Brandalf customers.

Meta Platform Data

Data received from Meta is handled according to Meta's Platform Terms. We request only the permissions needed to provide the service, access only the accounts you explicitly connect, and never share Meta Platform Data with third parties except the service providers listed below, acting on our instructions.

Where it lives

Data is stored with our hosting and database providers (Vercel and Supabase, hosted in the EU) and processed with AI service providers under contract. All access is encrypted in transit, and access tokens for your connected accounts are stored securely and never shown to anyone.

Deletion and your choices

• You can disconnect your Meta accounts at any time from inside Brandalf, or by removing the Brandalf app in your Facebook Business settings. Access stops immediately.
• You can disconnect Google Drive at any time from Brandalf. You can also remove Brandalf from your Google Account's connected apps. This stops future Drive access; you can ask us to delete previously imported content as part of an account deletion request.
• You can ask us to delete your account and all associated data — including all stored Meta Platform Data — by emailing rushd@activegames.ae. We complete deletion requests within 30 days.

Changes

If this policy changes in a way that matters, we will tell you by email before the change takes effect.