Privacy Policy

Last updated: 16 August 2026

Introduction

Winfluence AB ("we", "our", or "us") operates the Brandwagon application at app.brandwagon.ai ("Application") and this website at brandwagon.ai ("Website"). This privacy policy outlines how we collect, use, and protect the personal data of our users ("Users").

If you have questions, contact us at admin@brandwagon.ai.

Data Controller

Winfluence AB Ringkragevägen 36, 218 73 Tygelsjö, Sweden admin@brandwagon.ai

Role as Controller and Processor

Winfluence AB acts as the data controller for personal data relating to users of the Brandwagon Application and visitors to this Website, including account information, usage data, and service-related interactions.

When customers use Brandwagon to upload or process content containing personal data, Winfluence AB acts as a data processor, processing that personal data on behalf of the customer, who determines the purposes and means of such processing.

Types of Data Collected

• Trackers (cookies and similar technologies)
• Usage data, such as session statistics and number of users
• IP address and other browser-related information
• Content and account data uploaded to the Service, including text, images, video, audio, metadata, and user account information
• Contact details submitted through forms on this Website, such as an email address, name and company name

Personal data may be provided directly by the User or collected automatically.

Mandatory Data

All data requested by the Application is mandatory unless specified otherwise. Refusing to provide such data may prevent us from delivering the Service.

Cookies and Trackers

Non-essential cookies and similar technologies are used only where you have consented to them. You can change or withdraw that choice at any time using the "Cookie preferences" link in the footer of this Website. See our Cookie Policy for the detail of what is set and why.

Detailed Information on the Processing of Personal Data

Analytics

PostHog (PostHog Inc.) — a product analytics service used to understand how the Application and Website are used and to improve them.

• Personal data processed: usage data; trackers; session statistics.
• Place of processing: European Union.

Analytics that stores information on your device runs only after you consent.

Marketing and advertising measurement

Meta Pixel (Meta Platforms, Inc.) — used on this Website to measure the effectiveness of our advertising. It loads only after you consent to marketing cookies, and not at all if you decline.

• Personal data processed: usage data; trackers; IP address.
• Place of processing: United States and other locations where Meta operates.

Platform Services and Hosting

These services host and operate the Application and Website, and provide authentication, storage, database management and content processing.

Supabase (Supabase Inc.) — database, authentication and storage. Personal data processed: account data, uploaded content, application data, and contact details submitted through forms on this Website. Place of processing: European Union.

Microsoft Azure (Microsoft Corporation) — cloud infrastructure running the Application backend and its video-processing workers. Personal data processed: application data and uploaded content. Place of processing: European Union.

Vercel (Vercel Inc.) — hosting and content delivery for the Application and Website. Personal data processed: usage data and technical data. Place of processing: global infrastructure, including the United States.

Google OAuth (Google LLC) — optional sign-in provider. Personal data processed: account information and authentication data. Place of processing: United States.

Automated content analysis

Google Cloud / Vertex AI (Google LLC) — analyses uploaded video and related content to produce automated checks against brand guidelines, campaign briefs and platform policies, and to generate the structured results the Service is built on.

• Personal data processed: uploaded content (including video, audio and images) and metadata required for that analysis.
• Place of processing: United States and other locations where Google operates.

ElevenLabs (ElevenLabs Inc.) — voice and audio processing features used within the Service.

• Personal data processed: audio data and related metadata.
• Place of processing: United States.

Connected Ad Accounts

When you connect an advertising account, you authorise us to read advertising performance data on your behalf so we can relate it to the deliverables you manage. Access is read-only — we cannot create, edit or pay for ads, or post on your behalf. You can disconnect at any time in Settings → Integrations; see Data Deletion for details.

Meta Marketing API (Meta Platforms, Inc.)

• Personal data processed: advertising performance data and ad-account metadata for your connected account; the access token issued by Meta, stored encrypted.
• Place of processing: United States and other locations where Meta operates.

Where personal data is transferred outside the European Economic Area, appropriate safeguards such as Standard Contractual Clauses approved by the European Commission are used.

Data Processing and Retention

Methods of Processing

We implement appropriate technical and organisational security measures to protect personal data. Processing is carried out using secure IT systems and may involve authorised personnel and approved third-party service providers.

Location of Processing

Personal data is primarily processed within the European Union. Some data is processed by approved service providers outside the European Economic Area, in which case appropriate safeguards are applied in accordance with the GDPR.

Data Retention

Personal data is retained only as long as necessary to provide the Service and fulfil the purposes described in this policy, unless a longer retention period is required by law.

Contact details submitted through forms on this Website are retained for as long as we are in contact with you about Brandwagon, and are deleted on request at any time by emailing admin@brandwagon.ai.

Purposes of Processing

• Providing and operating the Service
• User authentication and account management
• Hosting, storage and infrastructure
• Analytics and usage monitoring
• Automated content analysis and compliance checks
• Responding to enquiries and early-access requests made through this Website
• Measuring the effectiveness of our advertising, where you have consented
• Security, fraud prevention and abuse detection
• Legal compliance and protection of our rights

Legal Basis for Processing

• Consent — non-essential cookies, analytics and advertising measurement
• Performance of a contract — providing the Service to customers
• Compliance with legal obligations
• Legitimate interests — operating, improving and securing the Service, and responding to enquiries you send us

User Rights (GDPR)

You have the right to withdraw consent at any time; to object to processing on grounds other than consent; to access your data; to have inaccurate data corrected; to restrict processing; to request deletion; to receive your data in a structured, machine-readable format; and to lodge a complaint with a supervisory authority. In Sweden this is Integritetsskyddsmyndigheten (IMY).

To exercise any of these rights, email admin@brandwagon.ai.

Legal Action

Personal data may be used for legal purposes in court or in the stages leading to possible legal action arising from improper use of the Service.

Changes to this Privacy Policy

We reserve the right to update this policy at any time. Where required by law, we will notify users of material changes.

Winfluence AB · Ringkragevägen 36 · 218 73 Tygelsjö · Sweden · admin@brandwagon.ai