Security at BrandOS

Your data stays yours.

BrandOS connects to the platforms you already use to build a secure record of your decisions and outcomes. We use your data to provide BrandOS to your business — not to sell it or give other brands access to it.

Secure platform connectionsIsolated brand workspacesNo automatic changes
Connected signals
Shopify
Meta Ads
Google Ads
BrandOS protected layer
Decisions recorded
Evidence retained
Outcomes checked
Learning built
1. Independent by design

BrandOS observes. It doesn’t run your business.

BrandOS is designed to observe and understand important changes across your connected platforms. It does not automatically change your advertising budgets, launch campaigns, alter prices or make changes to your store.

Where BrandOS supports optional actions such as adding context or confirming why a decision was made, those actions require you to choose them.

You stay in control

  • No automatic budget changes
  • No automatic store changes
  • No campaigns launched by BrandOS
  • You decide what actions to take
2. Only the access we need

We only use the access BrandOS needs.

When you connect Shopify, Meta or Google, BrandOS requests access needed to understand the decisions, changes and outcomes relevant to Decision Memory. We use these connections to retrieve information such as campaign activity, creative delivery, pricing changes, promotions and relevant performance evidence.

Shopify

Products, pricing, promotions, inventory and relevant commercial evidence.

Meta Ads

Campaigns, budgets, creatives, account changes and performance evidence.

Google Ads

Campaign configuration, changes and relevant advertising performance.

View detailed data access →
3. Your data is isolated

Your brand is isolated from other brands.

Each BrandOS workspace is separated from other customer workspaces. One brand cannot access another brand’s account data, decisions or underlying evidence.

Your brand
Other brands

Your underlying business data is never exposed to another brand.

4. Decision Memory

Decision Memory preserves evidence, not access for everyone.

Decision Memory stores the evidence associated with important decisions so BrandOS can understand what was known when a change happened and what happened afterwards. Historical records are retained so decisions can be compared over time without rewriting the past as new performance data arrives.

01Decision detected
02Evidence recorded
03Outcome checked
04Learning saved
5. How we protect your data

Built with security at every layer.

BrandOS protects connected evidence throughout the decision lifecycle.

Encrypted connections

Connections to supported platforms use secure authenticated APIs.

Protected credentials

Platform credentials and connection tokens are not exposed in the BrandOS interface.

Controlled access

Brand and administrative access are separated and scoped to authorised workspaces.

Private media

Creative assets are served through controlled, time-limited access rather than public storage links where private evidence is retained.

Tenant isolation

Data queries and application services are designed to stay within the authorised tenant.

Monitoring and recovery

BrandOS monitors important ingestion and system processes so missing or incomplete data can be detected rather than silently treated as truth.

6. What we don’t do

What BrandOS does not do with your data.

Clear boundaries keep you in control of your accounts and your decisions.

We do not sell your business data.

We do not allow another customer to browse your account data.

We do not automatically spend your advertising budget.

We do not automatically change your Shopify store.

We do not treat incomplete data as verified evidence.

Your identifiable business data is not made available to other brands through BrandOS intelligence.

Frequently asked questions

Common questions.

Can BrandOS make changes to my accounts?

BrandOS is designed as an independent observation and Decision Memory layer. It does not automatically change campaigns, budgets, prices or inventory.

Does BrandOS use data from different brands to improve its intelligence?

BrandOS is designed to learn from patterns across decisions while keeping each brand’s identifiable underlying account data private. Cross-brand intelligence should describe comparable patterns rather than expose another brand’s private records.

What happens if I disconnect a platform?

Disconnecting stops BrandOS from receiving new data from that platform. See our Privacy Policy for current retention terms.

Can my data be deleted?

Yes. You can revoke access to connected platforms and request deletion of your BrandOS data and associated OAuth connections.

How are OAuth connections handled?

OAuth credentials are handled through Nango rather than being stored directly in the BrandOS application database. Credentials are encrypted and made available server-side only when required for an authorised connection.

Are brands isolated from one another?

Yes. Brand data is separated by workspace and protected through application-level access controls and database Row Level Security.

Can another customer see my underlying data?

No. Other customers cannot browse your campaigns, products, creatives, decisions or underlying evidence.

Who can access my BrandOS data?

Access is restricted to authorised users, and operational access is limited to what is needed to provide and support the service.

Is my data used to train general-purpose AI models?

BrandOS does not use customer data to train a general-purpose AI model.

Are platform credentials visible inside BrandOS?

No. Connected-platform credentials are not displayed in the BrandOS product interface.

What happens if a data connection fails?

BrandOS treats missing or incomplete data as incomplete evidence rather than silently assuming it is correct.

Give your marketing a memory.

Know which decisions are working, when to step in, and what your brand should remember next time.

Book a demo

Free for 4 weeks · No credit card required