BrandPrompts
Sign inJoin us

Privacy Policy

Last updated: 22 March 2026

BrandPrompts (“we,” “us,” or “our”) is a company registered in the United Arab Emirates. We provide generative engine optimisation (GEO) monitoring tools that help brands understand how they appear in AI-powered search engines.

This policy explains what data we collect, why we collect it, how we use it, and your rights. It applies to all users of brandprompts.com and our related services.

1. What we collect

Account information

When you create an account or subscribe to a plan, we collect:

  • Your name and email address
  • Company name (if provided)
  • Payment information (processed by our payment provider — we do not store card details)

Brand and research data

To deliver our service, we collect the data you input:

  • Brand names, competitor names, and keywords you configure for tracking
  • Prompt sets and topic clusters you create or that we generate on your behalf
  • Target markets, audience segments, and funnel stage classifications you define

Usage data

We collect standard usage information to maintain and improve the service:

  • Log data (IP address, browser type, pages visited, timestamps)
  • Feature usage patterns (which dashboards and reports you access)
  • Cookies and similar technologies (see Section 7)

2. How we use your data

We use your data to:

  • Deliver the service — run your tracking prompts, generate visibility reports, and provide competitive benchmarking
  • Submit prompts to AI engines — to measure brand visibility, we send your configured prompts to third-party AI search engines including ChatGPT (OpenAI), Perplexity, Gemini (Google), Claude (Anthropic), and others as the landscape evolves (see Section 3)
  • Improve the product — analyse aggregate usage patterns to develop new features and improve existing ones
  • Communicate with you — send service updates, billing notices, and (with your consent) product announcements
  • Maintain security — detect and prevent fraud, abuse, or technical issues

We do not use your brand data to train AI models. We do not sell your data.

3. Data shared with third parties

To provide GEO tracking, we submit prompts to third-party AI search engines. This is core to how the service works.

What is sent: The natural-language prompts configured in your account — which may include your brand name, competitor names, and category-related keywords. We do not send your account details, email address, or payment information to AI engines.

Who receives it: OpenAI (ChatGPT), Google (Gemini), Anthropic (Claude), Perplexity, and other AI search providers we integrate with. Each provider processes prompts under their own terms and privacy policies.

Why this matters: Once a prompt is submitted to a third-party AI engine, that provider's data handling practices apply to the prompt itself. We select providers with enterprise-grade data handling policies and do not use consumer-tier API access where business-tier alternatives exist.

We also share data with:

  • Payment processors — to handle billing
  • Infrastructure providers — cloud hosting and content delivery services under contractual data protection obligations
  • Analytics tools — aggregated, non-personal usage data

We do not share your data with advertisers or data brokers.

4. International data transfers

BrandPrompts is based in the UAE and serves clients globally. Your data may be processed in the UAE, the United States, the European Economic Area, and other jurisdictions where third-party AI search engines operate.

For transfers from the UK or EEA, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission, or transfers to countries recognised as providing adequate protection.

5. Your rights under GDPR (UK and EEA users)

If you are in the United Kingdom or European Economic Area, you have the right to:

  • Access your personal data and receive a copy of it
  • Rectify inaccurate or incomplete personal data
  • Erase your personal data (“right to be forgotten”)
  • Restrict processing in certain circumstances
  • Port your data to another service
  • Object to processing based on legitimate interests
  • Withdraw consent at any time

To exercise any of these rights, contact us at privacy@brandprompts.com.

6. Your rights under UAE PDPL

If your data is processed under the UAE's Personal Data Protection Law (Federal Decree-Law No. 45 of 2021), you have the right to be informed, access your data, request correction, request erasure, and request restriction of processing.

To exercise these rights, contact us at privacy@brandprompts.com.

7. Cookies and tracking

  • Essential cookies — required for the service to function. These cannot be disabled.
  • Analytics cookies — help us understand usage. You can opt out at any time.

We do not use advertising or retargeting cookies.

8. Data retention

  • Account data — active account + 30 days after deletion
  • Brand and research data — removed within 30 days of project deletion or account closure
  • Usage logs — up to 12 months, then anonymised or deleted
  • Payment records — retained as required by tax law

9. Security

We use encryption in transit (TLS) and at rest, role-based access controls, regular security reviews, and incident response procedures. No system is completely secure — if we become aware of a breach, we will notify you and relevant authorities as required by law.

10. Children

BrandPrompts is a business tool. We do not knowingly collect data from anyone under 18.

11. Changes to this policy

We may update this policy from time to time. Material changes will be communicated by email or through the service before taking effect.

12. Contact

Email: ro@brandprompts.com