> [Privacy Policy | BrandOS | Positronica Labs](https://positronicalabs.dev/privacy) # Privacy Policy ## Website analytics / Analítica del sitio This website measures visits with self-hosted Umami and PostHog Cloud in the United States. Analytics include page paths, UTM campaign parameters and browser/device information. PostHog uses temporary anonymous identifiers in memory, with analytics cookies and persistent storage disabled. We do not send form contents or account identities. Session recordings are disabled, and the trackers respect Do Not Track. Este sitio mide visitas con Umami en nuestro servidor y PostHog Cloud en Estados Unidos. La analítica incluye rutas de páginas, parámetros UTM de campañas e información del navegador y dispositivo. PostHog usa identificadores anónimos temporales en memoria, sin cookies de analítica ni almacenamiento persistente. No enviamos contenido de formularios ni identidades de cuentas. Las grabaciones de sesión están desactivadas y los trackers respetan Do Not Track. ## BrandOS publishing tool policy BrandOS, operated by Positronica Labs Effective date: July 12, 2026 BrandOS is a private content-publishing tool operated by Positronica Labs ("we", "us", "our"). It lets the operator publish their own approved content to their own connected social media accounts (such as X, LinkedIn, Instagram, and YouTube) through those platforms' official APIs. This policy explains what limited data BrandOS handles and how we protect it. BrandOS is not a consumer service. It operates on accounts owned and controlled by the operator. We do not collect, buy, sell, or process personal data about members of the public or about other users of any social platform. ## 1. What We Access and Store To publish content on the operator's behalf, BrandOS handles: - Content the operator creates: post text/captions, media references (images, video), scheduling times, and hashtags, all authored and approved by the operator before publishing. - Identifiers of the operator's own posts: the platform's post ID returned after publishing, used to confirm delivery. - Basic engagement metrics of the operator's own posts: counts such as likes, comments, shares, and views, used to measure how the operator's own content performs. - Authentication tokens (OAuth access tokens/keys) for the operator's connected accounts, used solely to publish and read back the operator's own posts. We do not collect data about other people, followers, or audiences. We do not build profiles of any social platform's users. ## 2. How We Use Data - To publish content the operator has explicitly approved. - To confirm that a post was delivered. - To report performance of the operator's own posts back to the operator. Every publish action requires manual human approval. Nothing is posted automatically without the operator's review. ## 3. Data From Social Platforms When BrandOS connects to a platform's API (X, LinkedIn, Meta/Instagram, YouTube), it uses only the permissions the operator grants and only for the purposes above. We comply with each platform's Developer Agreement and Policy. We do not use platform data for advertising, resale, surveillance, or any use the platform prohibits. Platform data is not shared with any third party. ## 4. Data Sharing We do not sell, rent, or share any data with third parties. Data flows only between BrandOS and the social platforms the operator has connected, for the sole purpose of publishing the operator's content. ## 5. Security - OAuth tokens and API keys are stored securely and are never written to application logs. - Access is restricted to the operator and the systems required to publish. - Credentials are held only for as long as an account remains connected and can be revoked at any time from the platform's own settings. ## 6. Data Retention Content, post IDs, and metrics are retained only while needed to operate the tool and measure the operator's own content. Authentication tokens are deleted when the operator disconnects an account or revokes access on the platform. ## 7. Your Rights The operator may disconnect any account, revoke API access from the platform's settings, and request deletion of stored content and metrics at any time by contacting us at the address below. Because BrandOS does not process data about other individuals, there are no third-party data subjects. ## 8. Children's Privacy BrandOS is an internal operations tool and is not directed to children. It does not knowingly collect any data from children. ## 9. Changes to This Policy We may update this policy to reflect changes in how the tool works. Updates are posted on this page with a revised effective date. ## 10. Contact Questions or requests about this policy: [hola@positronicalabs.dev]() Positronica Labs, [positronicalabs.dev]() This document describes the actual data practices of BrandOS as operated by Positronica Labs. It is provided for transparency and platform-review purposes and does not constitute legal advice.