Privacy policy
Effective date: October 6, 2026
This policy explains what BrandTeam AI collects, why, who else touches it, how long we keep it, and what you can ask us to do with it. BrandTeam AI is operated by WiscAI, Inc. If you use the product, this policy applies to you.
1. What we collect
Three kinds of information.
- Account information
- Your name and email address, the organization and brands you create, who else you invite, and what role each person has. If you sign in with Google, we receive your name, email address, and profile picture, plus a sign-in token that keeps you signed in.
- Your content
- Everything you put into the product and everything it writes for you: past campaigns you upload so the voice can be learned, your voice rules and banned words, source documents such as rate sheets and approved claims, briefs, the campaigns the product drafts, reviewer comments, approvals, compliance packets, and any results you import. This is your material. We treat it as yours.
- Usage information
- Records of what happened in the product: sign-ins, boards created, checks run, approvals recorded, exports taken, and the size of each generation request. Some of this is written to an audit trail your own team can read, because the product is meant to be a record of who approved what.
When you send a client review link to someone outside your account, we record the comments and the approve or request-changes decision that person leaves, along with a one-way scrambled version of their internet address that we use only to stop abuse. We do not store their actual internet address, and they do not need an account.
We do not ask for, and the product is not built to hold, government identification numbers, payment card numbers, health records, or consumer credit files. Please do not upload them.
2. How we use it
We use your information to:
- Run the product for you: write campaigns in your brand's voice, run the checks, route approvals, build compliance packets, and export the results.
- Learn your brand's voice from your own past work, and sharpen it using the pieces your team approves inside your own account.
- Keep your account secure, enforce your plan's limits, and investigate abuse.
- See which parts of the product people use and where they get stuck, from our own records, so we can improve it.
- Send you the few emails the product needs to send, such as a welcome note when your workspace is created, and notices about your account.
- Answer your questions when you write to us, and bill you if you are on a paid plan.
- Meet our legal obligations.
We do not sell your information. We do not share it for advertising. We do not use your content to advertise to you.
3. Your content and AI training
We do not train or tune any model on your content, and neither do our providers. When the product gets better at your voice, it is re-reading your own approved pieces, not changing a model. To write a campaign, your brand's voice examples and rules are sent to an AI provider to produce that one piece of writing, under a contract that forbids training on it. A provider may hold what we send briefly for its own abuse checks before deleting it.
Your content is also never used to improve another customer's results. Each organization is walled off in the database, and each brand inside your organization is walled off from your other brands. When the product learns from an approved piece, it learns inside that one brand only.
4. Who else touches it
We share information only with the companies we need to run the product, and only for that purpose. Each one is under contract to use it only as we direct. They are:
- A cloud hosting provider that runs the application.
- A database and sign-in provider that stores your account and your content.
- AI processing providers that turn a brief and your voice examples into written copy, under contract not to train on it.
- A payment processor, if you are on a paid plan. Your card details go to them directly and we never see or store them.
- An email delivery provider for the product's own notification emails.
- An analytics provider that tells us how the public marketing pages are used. It does not run inside your logged-in workspace.
One more recipient is yours to choose. An administrator in your workspace can create an access token that connects an outside AI assistant to BrandTeam AI, so it can list your brands, read a brand book, read a board, and start a new one. When that is switched on, the company operating that assistant receives the information it asks for, and their terms govern what they do with it. You turn it on, you can revoke the token at any time from your settings, and it is off until you do.
We will also share information if the law requires it, or to protect the product and its customers from fraud or abuse. If our business is ever sold or merged, your information may transfer with it, and this policy continues to apply until we tell you otherwise.
If you need a signed data processing agreement or a list of our providers by name for your own vendor review, write to us and we will send one.
5. How long we keep it
- Your content
- As long as your account is open. You can remove voice examples, source documents, brand rules, and channel settings yourself from inside the product. To delete a whole brand or a whole campaign board, write to us and we will remove it within 30 days.
- After you close your account
- Write to us to close it. We delete your content within 30 days of that request, except anything we are required to keep for legal or accounting reasons.
- The audit trail and compliance packets
- Kept for the life of the account, because their whole purpose is to prove later what was checked and who signed.
- Client review comments and decisions
- Kept with the campaign they belong to, along with the scrambled address records we use to stop abuse of a review link, and removed when that campaign is removed.
- Billing records
- Seven years, as tax and accounting rules require.
- Marketing page analytics
- 14 months, which is the longest the analytics tool keeps them.
Ask us to delete something sooner and we will, unless the law says we have to keep it.
6. How we protect it
Every organization and every brand is separated at the database itself, not just in the screens, so no customer's sign-in can reach another customer's rows. Traffic is encrypted in transit. Access to production is limited to the people who need it. Actions inside the product are written to an audit trail. Review links you send outside your account expire, can be revoked, are stored scrambled rather than in the clear, and allow exactly one decision.
No system is perfectly secure, and we will not pretend otherwise. If a breach affects your information, we will tell the account owner without undue delay and within 72 hours of confirming it, and follow the notification rules that apply.
8. Your rights
Whoever you are and wherever you live, you can ask us to:
- Give you a copy of the personal information we hold about you.
- Correct anything that is wrong.
- Delete your information, unless we are legally required to keep it.
- Send you your content. You can export a board's copy as a spreadsheet yourself and print a compliance packet from your browser; ask us for anything beyond that and we will send it.
- Stop sending you email that is not required to run your account.
Depending on where you live, your state or country's law may give you more, including the right not to be treated differently for asking. We do not sell personal information and we do not share it for cross-context behavioral advertising. Write to us at the address at the bottom of this page and we will answer inside the time your law allows.
If you are using BrandTeam AI through an agency or an employer, that organization controls the account. We will point your request to them and help them answer it.
9. Where your information lives
BrandTeam AI is sold and operated in the United States, and your content is stored on servers there. We do not currently offer storage in another country. If you use the product from outside the United States, your information is processed under United States law, which gives you fewer protections than the law of the European Economic Area or the United Kingdom. If your organization needs standard contractual clauses in place before that is acceptable, write to us before you upload anything.
10. Children
BrandTeam AI is a business tool sold to organizations. It is not for children, accounts are for people 18 and over, and we do not knowingly collect information from anyone younger. If we learn that we have, we delete it.
11. Changes to this policy
When we change this policy we post the new version here with a new effective date. If a change materially affects how we handle your content, we will email the account owner before it takes effect.
12. Contact us
Email: Privacy@WiscAI.com
WiscAI, Inc., 821 E Washington Ave. 2nd Floor, Madison, WI 53703