Privacy Policy

This Privacy Policy explains how ELITE BRANDING AGENCY LLC, doing business as Brandilite (“Brandilite”, “we”, “us”, or “our”), collects, uses, stores, and shares personal information when you visit brandilite.com, request a free teardown or paid diagnostic, qualify for a Plan, purchase or use our AI Visibility, SEO, AEO, GEO, content, authority-building, measurement, reporting, or related Services.

It also explains the choices and rights available to you. The data we process depends on which Services, integrations, and access you choose to provide.

Data Controller

Data We Collect

Account and Contact Information

We may collect your name, work email, company, role, billing contact, account identifiers, support messages, consent records, and communication preferences.

Client Project and Website Data

Free-teardown, paid-diagnostic, Plan-qualification, and client-delivery requests may include a domain, business model, priority offer, primary visibility problem, selected starting option or Plan, desired start date, and information needed to scope or deliver the approved work.

SEO, Content, Analytics, and Authority Data

With your authorization, we may process crawl data, indexation and search-performance data, analytics events, conversions, landing-page performance, content inventories, schema, sitemaps, referring domains, earned mentions, citation sources, outreach records, and approved credentials or expert information. Access may include Google Search Console, Google Analytics, Bing Webmaster Tools, your CMS, hosting, tag manager, and specialist SEO or reporting platforms.

Payment and Billing Information

Payment processors such as Stripe process payment-card and banking information. Brandilite may receive limited transaction details such as the customer identifier, Plan, amount, status, billing country, invoice, subscription status, and charge or refund history.

AI Visibility and Automation Data

We may process sampled buyer prompts, model responses, brand mentions, cited pages, citation sources, competitor inclusion, sentiment labels, prompt metadata, timestamps, country or device information where available, and workflow logs needed to provide AI Visibility measurement.

Usage and Technical Data

We may collect IP address, browser and device information, referring pages, viewed pages, form-start and form-submit events, checkout clicks, approximate location, cookies, error logs, consent status, and security or fraud-prevention signals.

How We Use Your Data

We use personal and service data to:

• Review free-teardown, paid-diagnostic, and Plan-qualification requests and determine service fit.
• Provide technical SEO, on-page optimization, AEO, GEO, content, authority, measurement, and reporting Services.
• Establish baselines, prioritize work, monitor sampled visibility, and report limitations and movement.
• Manage subscriptions, billing, cancellation, refunds, onboarding, delivery queues, and support.
• Protect accounts, prevent abuse, troubleshoot errors, and maintain service quality.
• Comply with law, enforce agreements, and establish or defend legal claims.
• Send service communications and, where permitted, relevant marketing that you can opt out of.

Legal Bases for Processing

• Contract: To provide diagnostics, subscriptions, support, approved optimization and implementation work, and requested deliverables.
• Legitimate Interests: To improve services, protect systems, prevent abuse, and operate our business.
• Consent: For optional integrations, marketing communications, cookies where required, and certain third-party connections.
• Legal Obligation: To comply with applicable tax, accounting, regulatory, and legal requirements.

Third-Party Services and Integrations

We may use service providers for payments, forms, email, hosting, analytics, search-performance data, crawling, reporting, AI Visibility monitoring, project delivery, and security. Depending on your configuration, these may include Stripe, Webflow, Google, Microsoft Bing, Cloudflare, analytics platforms, AI providers, and specialist SEO or visibility tools.

These providers process data under their own terms and privacy notices. Brandilite shares only data reasonably necessary for the configured purpose and does not sell personal information.

Google API Services User Data

If you connect a Google account or authorize access to Google services, our use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

We use Google data only to provide user-facing Brandilite services you authorize, such as website analytics review, Search Console analysis, documentation, file access, communication, reporting, or optimization support. We do not sell Google user data. We do not use Google user data to train generalized AI or machine learning models. Human access is limited to what is necessary to provide support, deliver the service, investigate security issues, comply with law, or act with your consent.

AI and Research Tooling

Brandilite may use AI systems, search interfaces, language models, crawlers, automation, analysis tools, and APIs to support research, content review, prompt sampling, citation analysis, quality assurance, reporting, and service administration.

We aim to minimize the context shared with those tools and avoid unnecessary sensitive personal information. Do not submit passwords, private keys, regulated data, or confidential material through unsecured forms. AI outputs may be variable and are reviewed as directional evidence rather than complete analytics truth.

Connected Platforms and Website Access

What We Access

We access only the websites, CMS projects, analytics properties, search-console accounts, hosting or domain settings, reporting tools, and other platforms that you explicitly authorize for the Services. Access should be limited to the permissions needed for the agreed work.

What We Do Not Do

• We do not sell connected-platform data or personal information.
• We do not publish website changes, content, outreach, or campaigns without the agreed approval path.
• We do not use Client Materials to create public case studies or endorsements without permission.
• We do not intentionally use confidential Client Materials to train generalized AI models.
• We do not keep connected access longer than reasonably necessary for the Services, legal obligations, or security.

Data Retention

• Account and contact data: Retained while your account or client relationship is active, then as needed for legal, accounting, tax, and business records.
• Billing and subscription records: Retained for up to 7 years or as required by law.
• Project files and support communications: Retained as needed to deliver services and maintain business records, generally up to 3 years unless a longer period is required.
• website platform access: Active only while authorized. Cached technical data is deleted or de-identified within a reasonable period after disconnection unless retention is required for legal, security, or business continuity reasons.
• Usage, analytics, and log data: Generally retained for up to 12 months unless needed for security, fraud prevention, debugging, or legal purposes.
• AI/tooling context: Retained only as needed to provide services, improve workflows, maintain records, or comply with legal obligations.

Your Privacy Rights

Depending on your location and applicable law, including UK GDPR, GDPR, CCPA/CPRA, and other US consumer privacy laws, you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion of your personal data, subject to legal retention requirements.
• Request restriction of processing.
• Object to processing based on legitimate interests.
• Receive a portable copy of your data.
• Withdraw consent where processing is based on consent.
• Opt out of sale or sharing of personal information where applicable.

We do not sell personal information. To exercise your rights, contact us at legal@brandilite.com. We will respond within the timeframe required by applicable law.

International Transfers

Your data may be transferred to and processed in countries outside your jurisdiction, including the United States and countries where our service providers operate. Where required, we use appropriate safeguards such as contractual protections, data processing agreements, and Standard Contractual Clauses.

Cookies

We may use cookies and similar technologies to operate our website, remember preferences, understand site performance, improve user experience, and secure our services.

• Essential cookies: Required for website functionality, security, preferences, and session management.
• Analytics cookies: Help us understand how visitors use our website and improve our services.
• Marketing cookies: Used only where permitted or with consent where required by law.

Security

We use appropriate technical and organizational measures to protect personal data, including:

• Encryption in transit using HTTPS/TLS.
• Access controls and role-based permissions.
• OAuth and token-based authentication for integrations where applicable.
• Scoped access permissions using the minimum access reasonably necessary.
• Security reviews, monitoring, and vulnerability remediation.
• Secure handling of API keys, credentials, and project secrets.

Children

Our services are not intended for children under 18. We do not knowingly collect personal data from children under 18.

Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we may notify you by email, website notice, or another appropriate method. Continued use of our website or services after an update means the revised Privacy Policy applies.

Complaints

If you have concerns about how we handle your data, contact us at legal@brandilite.com.

If you are in the United Kingdom, you may also contact the Information Commissioner’s Office at https://ico.org.uk. If you are in the European Economic Area, you may contact your local Data Protection Authority.

Contact