Privacy Policy

Site visitors and customers. If you visit brambles.ai, create a publisher or retailer account, or talk to us about a deal, Brambles.ai is the business that decides how that information is used (a “controller”).

Readers and shoppers on a customer’s site. If you use the Brambles.ai chat or search module on a publisher or store site, we process that interaction on behalf of that customer (a “processor” / “service provider”). Their privacy notice also applies. We do not need your name, email, phone number, or payment card for you to use the module.

From customers and site visitors

• Name, email, company, and role when you sign up, book a meeting, or submit a form
• Account and authentication data (through our identity provider)
• Billing contacts and payment metadata (cards are handled by Stripe; we do not store raw card numbers)
• Support messages you send us
• Technical data such as IP address, browser type, and pages viewed on brambles.ai

From readers and shoppers on a customer site

• Messages you type into the assistant, and the assistant’s replies
• Session and conversation identifiers (not your email)
• Page URL, referrer, and on-page context the embed sends so answers stay relevant
• Searches, product views, clicks, and similar events
• Device and browser metadata, and the IP address our host sees, used for security, rate limits, and approximate location

If a merchant enables storefront cart or helpdesk features, we may process a cart token or a support message you choose to submit (which can include a name or email you type). For retail order attribution we use product identifiers, totals, and timestamps — not shopper name, email, phone, or address.

We do not need payment-card data, government IDs, health information, or biometric identifiers to operate the Services, and we ask customers not to send that data through the module.

• Provide, secure, and support the Services
• Generate AI replies and product results on a customer’s site
• Measure usage, clicks, and (where enabled) monetization performance for that customer
• Bill customers, prevent fraud and abuse, and comply with law
• Respond to sales and support requests
• Produce de-identified, aggregated statistics that do not identify you or a customer

We do not sell personal information. We do not use reader or shopper information to build a Brambles.ai advertising profile across unrelated sites.

The module uses a large language model to draft answers and shopping help. Your message and the context needed to answer (for example products from the customer’s catalog or the page you are on) are sent to our model provider — currently OpenAI — only to generate that reply.

We do not use customer data or end-user conversation content to train or fine-tune foundation models, and we do not use one customer’s data to improve another customer’s service. We do not opt the model provider into using that content for training. We may use a customer’s own usage, clicks, and conversations to improve ranking and answers for that customer. Output can be wrong or incomplete. It is shopping assistance, not professional advice.

We share personal information with vendors that help us run the Services (hosting, databases, authentication, billing, email, search index, and the model API). Those vendors may process data in the United States. Lead forms on brambles.ai may go to HubSpot so we can respond to sales requests.

If a publisher or merchant enables a monetization feature, a click or similar event may be sent to a demand partner (an affiliate, retail-media, or programmatic partner) so that feature can work. That partner typically handles the data it receives under its own terms. The site you are on is responsible for telling you about that feature.

We may also disclose information if required by law, to protect the Services, or as part of a merger or sale of the business.

brambles.ai uses cookies and similar tools that are needed to run the site, keep you signed in, measure how the marketing site is used, and (where configured) attribute paid ads that brought someone to brambles.ai. That measurement may use analytics and advertising tags such as Google Tag Manager. Those tags are for Brambles.ai’s own marketing site. They are not used to build a cross-site advertising profile of readers from a customer’s embed.

Marketing-site analytics are designed so emails, names, and click IDs are not placed in the browser data layer. Click IDs used for checkout attribution stay on the server.

The embedded module uses session and conversation identifiers so a chat can continue. Customers are responsible for any consent banner required on their own properties.

You can use the module without an account. Analytics are keyed to the customer’s property and a session or conversation ID, not to your email. We redact obvious email addresses and phone numbers in stored free text where we retain conversation content. We strip tracking parameters from links we build when those parameters are not required for an enabled feature.

We keep customer account and billing records for as long as the account is active and as long as tax or accounting rules require (commission and payout records may be kept up to seven years). Reader interaction data is kept only as long as needed to provide the Services, security, and customer reporting, then deleted or de-identified. After a customer relationship ends, we delete production personal data we processed for them within thirty days, except where law or backups require a longer cycle.

We use encryption in transit and at rest, access controls, and managed cloud infrastructure. No internet service is perfectly secure. If we become aware of a personal-data incident that affects a customer, we notify that customer without undue delay and within 72 hours.

The Services are not directed to children under 16, and we do not knowingly collect their personal information. If you believe a child has submitted information, email hello@brambles.ai and we will delete it.

Depending on where you live, you may have the right to access, correct, delete, or export personal information, or to object to or limit certain processing. Email hello@brambles.ai. If we processed your data only on behalf of a publisher or merchant, we will point you to that customer or handle the request on their instruction.

California and other U.S. state residents may have additional rights, including to appeal a denial. We will not discriminate against you for exercising a privacy right. We do not sell personal information or share it for Brambles.ai’s own cross-context behavioral advertising of readers on customer sites.

Brambles.ai is a U.S. company. Personal information is processed in the United States and in other countries where our vendors operate. Where required, we use Standard Contractual Clauses or the UK International Data Transfer Addendum with customers and vendors.

We may update this policy. The “Last updated” date will change. If a change is material, we will post a notice on this page or email customers.

Brambles.ai Inc.
2829 Townsgate Rd., Suite 100, PMB 9028
Westlake Village, CA 91361
United States
hello@brambles.ai