Privacy
What Brand Climb does with data, written from the code rather than a template. Every statement, including what we do not collect, can be checked.
Who is responsible
Brand Climb is operated by its founder and is not yet incorporated. Until a company is registered there is no legal entity to name as data controller, so this page is a factual description of how the product handles data rather than a binding corporate policy. It becomes one, unchanged in substance, when the entity exists. We would rather tell you that than print a company name that does not.
What we collect
The account you create: your email address, and a name and role if you choose to enter them. The work you configure: brand name, domain, description, the prompts you track, the competitors you list, and any facts you record for accuracy checking. The results we produce for you: the answers engines returned, the metrics derived from them, and your action plan. That is the whole set.
What we deliberately do not collect
No IP address is stored in readable form. To limit abuse of the free audit and other public endpoints we keep a one-way hash of the address for a short window, which cannot be turned back into the IP. Product analytics is limited to PostHog counting the steps of signup, onboarding and checkout, with session recording and automatic click capture switched off and client IP addresses discarded; there is no Google Analytics, no advertising pixel, and nothing following you to other sites. Error monitoring runs with personal information switched off. The only cookies set are your login session and a short-lived token used when you connect Google Search Console.
What leaves our systems, and where it goes
To measure your visibility we send the text of your tracked prompts to the answer engines: OpenAI, Anthropic, Google and Perplexity on every plan, and DeepSeek as well on Pro, which reads a fourth metrics engine. Those requests carry prompt text and, where you set one, the country and language of your market. They do not carry your account, your credentials, or your contact details. Two more engines are implemented and keyed but no plan currently reaches them; the subprocessors page lists every third party, what it receives, and where the answer is “nothing yet”.
Payments
Lemon Squeezy is the merchant of record and runs checkout on their own systems. Your card details are never transmitted to or stored by Brand Climb. What we hold is which plan you are on and whether it is active, and nothing that could be used to charge you.
The free audit is anonymous
Running a free report requires no account and asks for no email. What is stored is the domain you entered, the report produced for it, and the date, so that sharing the link does not pay for the same run twice. There is no way to connect a free audit to a person, because nothing identifying a person is collected.
How long we keep it
Today, your data is kept for as long as your account exists and is deleted when you ask us to delete it. There is no automatic deletion schedule yet, and we would rather say so than describe one that does not run. The policy we have adopted is deletion 30 days after a subscription ends; it will be stated here as a commitment once the deletion actually executes on that schedule, and not before.
Your rights and how to use them
You can download a copy of your data, or delete your account and everything in it, yourself in Settings → Preferences. For corrections, or anything those two do not cover, write to legal@brandclimbai.com. Projects can be deleted yourself at any time in Settings.
Last updated 2026. This summary does not replace a formal agreement. Contact legal@brandclimbai.com for the complete document.