Legal
Effective date: March 25, 2026
This Privacy Policy describes how HelloBrand collects, uses, stores, and protects information when people use the HelloBrand product and related services.
HelloBrand helps creators manage brand partnerships by organizing contracts, email conversations, payment tracking, deliverables, and related workflow context in one workspace.
When a user chooses to connect an email account, HelloBrand uses that connection to help identify deal-related conversations, display linked threads, and surface relevant workflow updates such as approvals, deliverables, payment mentions, rights language, and attachment changes.
We collect information that users provide directly, such as account details, profile information, uploaded documents, workspace content, and connected email account settings.
If a user connects an email provider, we may process message metadata and content needed to support the requested feature, including sender and recipient addresses, subject lines, snippets, message body content, timestamps, and attachment metadata. Where relevant to the feature, we may also process attachment text and related extracted summaries.
We use information to operate HelloBrand, including authenticating users, maintaining workspaces, organizing deal communications, generating summaries and drafting assistance, surfacing workflow alerts, and improving the reliability and security of the service.
Email-connected data is used only to provide user-requested product functionality. We do not use connected mailbox data to create advertising audiences or targeting segments.
HelloBrand's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
When a user connects a Gmail account, HelloBrand accesses email metadata, message content, and attachments solely to provide the Smart Inbox feature: displaying inbox threads, linking conversations to partnerships, surfacing deal-related emails, and enabling reply drafting from within the workspace.
We do not use Gmail data for advertising, tracking, or creating user profiles outside of the direct product functionality. We do not sell Gmail data. We do not transfer Gmail data to third parties except to our infrastructure providers (such as cloud hosting and AI processing services) who act solely on our behalf to operate the feature.
Users can disconnect Gmail at any time in Settings - Email Connections. Disconnecting removes the API access token and stops further data syncing. Previously synced thread data may be retained according to our standard retention practices until the user deletes it or their account.
We do not sell personal information or connected mailbox data. We do not share mailbox data with advertisers or data brokers.
We may use service providers and infrastructure partners to host the application, store encrypted data, deliver product emails, and power product features such as AI-assisted summaries and workflow suggestions. Those providers act only on our behalf and only as necessary to operate the service.
We retain information for as long as needed to provide the service, comply with legal obligations, resolve disputes, and enforce our agreements. Users can disconnect supported email accounts, and we limit access to mailbox data to the authorized user and the systems required to provide the feature.
We may retain logs and operational records for security, reliability, fraud prevention, and compliance purposes.
We take reasonable measures to protect user data, including access controls, encrypted storage for sensitive credentials, and controls designed to reduce unauthorized access or disclosure.
No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
Depending on where a user lives, they may have rights related to access, correction, deletion, or restriction of personal information. We aim to honor applicable privacy rights under relevant laws.
Users may also disconnect third-party integrations at any time through the product where supported.
For Google-connected accounts, users can also revoke HelloBrand's access at any time through their Google Account security settings at https://myaccount.google.com/permissions.
HelloBrand is not intended for children under 13, and we do not knowingly collect personal information from children under 13.
We may update this Privacy Policy from time to time. If we make material changes, we may update the effective date and provide additional notice where appropriate.
For privacy-related questions or requests, contact us at support@hellobrand.app.