Privacy Policy
BrandOS is a private content-publishing tool operated by Positronica Labs ("we", "us", "our"). It lets the operator publish their own approved content to their own connected social media accounts (such as X, LinkedIn, Instagram, and YouTube) through those platforms' official APIs. This policy explains what limited data BrandOS handles and how we protect it.
BrandOS is not a consumer service. It operates on accounts owned and controlled by the operator. We do not collect, buy, sell, or process personal data about members of the public or about other users of any social platform.
1. What We Access and Store
To publish content on the operator's behalf, BrandOS handles:
- Content the operator creates: post text/captions, media references (images, video), scheduling times, and hashtags — all authored and approved by the operator before publishing.
- Identifiers of the operator's own posts: the platform's post ID returned after publishing, used to confirm delivery.
- Basic engagement metrics of the operator's own posts: counts such as likes, comments, shares, and views, used to measure how the operator's own content performs.
- Authentication tokens (OAuth access tokens/keys) for the operator's connected accounts, used solely to publish and read back the operator's own posts.
We do not collect data about other people, followers, or audiences. We do not build profiles of any social platform's users.
2. How We Use Data
- To publish content the operator has explicitly approved.
- To confirm that a post was delivered.
- To report performance of the operator's own posts back to the operator.
Every publish action requires manual human approval. Nothing is posted automatically without the operator's review.
3. Data From Social Platforms
When BrandOS connects to a platform's API (X, LinkedIn, Meta/Instagram, YouTube), it uses only the permissions the operator grants and only for the purposes above. We comply with each platform's Developer Agreement and Policy. We do not use platform data for advertising, resale, surveillance, or any use the platform prohibits. Platform data is not shared with any third party.
4. Data Sharing
We do not sell, rent, or share any data with third parties. Data flows only between BrandOS and the social platforms the operator has connected, for the sole purpose of publishing the operator's content.
5. Security
- OAuth tokens and API keys are stored securely and are never written to application logs.
- Access is restricted to the operator and the systems required to publish.
- Credentials are held only for as long as an account remains connected and can be revoked at any time from the platform's own settings.
6. Data Retention
Content, post IDs, and metrics are retained only while needed to operate the tool and measure the operator's own content. Authentication tokens are deleted when the operator disconnects an account or revokes access on the platform.
7. Your Rights
The operator may disconnect any account, revoke API access from the platform's settings, and request deletion of stored content and metrics at any time by contacting us at the address below. Because BrandOS does not process data about other individuals, there are no third-party data subjects.
8. Children's Privacy
BrandOS is an internal operations tool and is not directed to children. It does not knowingly collect any data from children.
9. Changes to This Policy
We may update this policy to reflect changes in how the tool works. Updates are posted on this page with a revised effective date.
10. Contact
Questions or requests about this policy:
hola@positronicalabs.dev
Positronica Labs — positronicalabs.dev