Privacy Policy

BrandAnchor.io operates a full Agency OS, client management platform, and forensic AI brand audit reports. We scan large language models to identify and correct misrepresentations of your brand. This policy explains precisely what data we collect in that process, why we need it, and how it is handled. We do not sell data. We do not run ads. There is no ambiguity in this document by design.

01 Who We Are

BrandAnchor.io is operated by Yair Zilberman (sole proprietor). Contact: hello@brandanchor.io. For GDPR purposes, BrandAnchor.io acts as the data controller for information submitted through this website and as a data processor for any client company data provided as part of an audit engagement.

02 What We Collect & Why

Information you submit

When you request a Hallucination Risk Report, we collect your work email address and company domain. This is the minimum required to run the audit and deliver the report to the right inbox. We do not collect names, phone numbers, or payment details at the intake stage.

Audit data

To conduct the forensic scan, we query publicly available outputs from large language models (ChatGPT, Claude, Gemini, Perplexity, Meta Llama, and others) using your company domain and brand name as inputs. We do not submit any confidential business information to these models. The queries are constructed to reveal what the model already knows — or misrepresents — about your brand from its training data.

Automatically collected data

This website uses Vercel Analytics (privacy-preserving, no cookies, no cross-site tracking) to measure aggregate page performance. No personally identifiable information is collected through analytics. We do not use Google Analytics, Meta Pixel, or any behavioural ad trackers.

03 Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), we process your data under the following legal bases:

• Contractual necessity — processing your email and domain to deliver the audit report you requested.
• Legitimate interests — understanding aggregate demand for our service through privacy-safe analytics.
• Legal obligation — retaining transaction records as required by applicable tax and accounting law.

04 How Long We Keep Your Data

We retain your data only for as long as necessary to provide our Services, fulfill the purposes outlined in this policy, or comply with our legal obligations. The specific retention period depends on the nature of the data and the context in which it was collected. If you engage us for a remediation project, engagement records are kept for as long as required by applicable tax and accounting law.

05 Third-Party Service Providers

To operate our platform, we share data with trusted third-party service providers only to the extent necessary for them to perform their functions. We do not sell your data. All providers are contractually bound to GDPR-equivalent data protection standards:

We only share the minimum data required for each provider to perform their specific service. We do not share your personal data with advertising networks, data brokers, or any parties unrelated to operating our service.

06 Your Rights

Under GDPR (and equivalent laws in your jurisdiction), you have the right to:

• Access — request a copy of all data we hold on you.
• Rectification — correct any inaccurate information.
• Erasure — request deletion of your personal data.
• Portability — receive your data in a machine-readable format.
• Object — opt out of any processing based on legitimate interests.

To exercise any of these rights, please contact us directly at support@brandanchor.io. We will respond within 30 days of receiving your request.

07 Security

All data in transit is encrypted via TLS 1.3. Form submissions travel through a relay that does not log payloads. Audit reports and action plans are delivered securely via your authenticated Client Workspace and as encrypted PDFs where applicable. We do not store payment card data — billing (where applicable) is handled entirely by Lemon Squeezy and never touches our servers.

08 Cookies

This website does not use tracking cookies. Vercel Analytics operates without cookies or device fingerprinting. No consent banner is required because there is nothing to consent to.

09 Changes to This Policy

If we make material changes, we will update the "Last updated" date at the top of this page. We will not retroactively apply less protective practices to data already collected. Continued use of the service after a change constitutes acceptance. If you disagree with a change, email us and we will delete your data.