Last updated October 10, 2026. What we access, what we store, what we never touch and how to reach us about your data.
Before the detail, here is the short version: what we collect, why, who handles it, how long it stays, and how you get it back or erased. Drag the scene or pick a layer, then use the sections below for the exact wording. Cookie specifics are in the Cookie Policy.
Account and workspace data, your monitoring configuration and roster, case evidence (public ad data), marketing chat and lead details, and billing data for paid plans. We never collect personal data about the shoppers who click the ads we monitor.
To run scans and build case evidence, secure your account, bill you, answer chat enquiries and send transactional email. Each purpose rests on a legal basis under the GDPR and UK GDPR, listed below.
A small number of subprocessors handle data on our behalf, under contract and only for the stated purpose, including Airwallex, Cloudflare, Google, SerpApi and our hosting provider. Transfers outside the UK and EEA rely on Standard Contractual Clauses.
Account and case data is deleted within 30 days of a closure or deletion request and ages out of backups within 90 days. Chat and lead data is kept up to 24 months, billing records up to 7 years, and security logs up to 12 months.
You can ask us to access, correct, delete or restrict your data, object to processing, or withdraw consent at any time. We respond within one month of a verified request, and the Data Deletion page walks through the steps.
BrandPatrol ("BrandPatrol," "we," "us," or "our") operates the ad-monitoring service described on this site and in the workspace at app.brandpatrol.net. For the purposes of the GDPR and UK GDPR, BrandPatrol is the data controller for the personal data described in this policy.
Our full registered company name, company number, and registered business address are available on request — email [email protected] and we'll send them to you. General contact: [email protected].
BrandPatrol's monitoring is built on public data only: search-engine results pages and the public ad-transparency record that ad platforms are already required to publish. A scan reads what a searcher would see, or what a network discloses publicly about an ad. Nothing else.
We never log into a client's ad accounts, affiliate platform, CRM, or analytics tools to do this work. There's no OAuth grant, no read-only API key, no account access requested from you for detection to run.
Depending on how you use BrandPatrol, we hold:
Nothing BrandPatrol monitors involves an end customer. We don't collect shopper identities, payment details, order history, or any other personal data belonging to the people who click the ads we're watching. That data isn't visible from a public SERP or the ad-transparency record, and we have no reason to look for it elsewhere.
Case evidence and workspace data for a brand are visible only to accounts that brand has explicitly granted access to. An agency account managing several client brands keeps each client in its own separate workspace — one client's cases, roster, and keywords are never visible from another client's workspace.
This section is a summary; the full list is in our Cookie Policy. The signed-in workspace uses an essential session cookie to keep you logged in. Marketing pages set no advertising or tracking cookies. Cloudflare runs cookieless Web Analytics for page-view and performance counts. Google Analytics 4 measures page/function views and selected actions using cookieless Consent Mode pings with analytics and advertising storage denied. Its tag runs in a separate analytics-only origin, not in customer forms or record pages; it receives fixed route templates and predefined action categories, not identities, credentials, search terms or content. Referring addresses are omitted, and Global Privacy Control, Do Not Track or a stored analytics denial prevents the Google tag from loading. Google still receives IP addresses and basic browser/device metadata when measurement is enabled. The chat widget separately uses browser session and local storage to remember a conversation on your device.
Running BrandPatrol means a small number of other companies process data on our behalf, always under contract and only for the purpose listed:
We don't sell case evidence or workspace data to any of these providers, we don't let them use it for their own advertising, and we don't share it with third parties for marketing purposes.
Some of the subprocessors above are located outside the UK and EEA, including in the United States. Where personal data is transferred there, we rely on the UK and EU Standard Contractual Clauses (and the UK's International Data Transfer Addendum) as the transfer safeguard, or an applicable adequacy decision.
Under the GDPR and UK GDPR, we rely on one or more of these legal bases for each purpose below:
Traffic to brandpatrol.net and your workspace is encrypted in transit with TLS 1.2/1.3. Passwords are hashed with scrypt and a unique salt per account — we never store or transmit a plain-text password. The session cookie is HttpOnly and SameSite=Strict, so it can't be read by page scripts or sent cross-site. Card numbers and CVVs are entered directly with our payment provider and never touch our servers. Workspace data is scoped per account and per brand, so one client's cases, roster, and keywords are never reachable from another's. No system is perfectly secure; if a breach affects your data, we will notify you as required by law.
Matching a flagged ad's affiliate ID against your authorized-partner roster runs automatically, but it only sorts a detection into a case queue for your team to review — it doesn't make a legal or similarly significant decision about any individual, and no case is closed, billed, or enforced without a person acting on it. We don't build advertising or behavioral profiles of the people who click the ads we monitor.
BrandPatrol offers an optional "Sign in with Google" button as an alternative to a password for an account our admin has already created for you — there is no self-signup, by Google or otherwise. When you use it, we receive your name, email address, profile picture (if your Google account has one), and Google account ID from Google's OpenID Connect sign-in. We use your email address, and afterwards your Google account ID, only to confirm your identity and match you to your existing BrandPatrol account; your name and profile picture are used only to identify you during that sign-in and are not stored. We do not request access to your Gmail, Drive, Calendar, or any other Google Workspace API, and we do not use this information for advertising, profiling, or any purpose beyond signing you in. Separately, BrandPatrol also uses Google's Gemini API to generate replies in the marketing chat widget and suggest keywords during brand onboarding, and a standard SMTP connection through a Google Workspace mailbox to send transactional email — neither of those accesses, reads, or stores any data from your own Google Account. BrandPatrol's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
You can ask us to access, correct, delete, or restrict your personal data, object to our processing of it, receive a portable copy of it, or withdraw consent you've given us — at any time. Email [email protected] to exercise any of these. We respond within one month of a verified request, extendable by a further two months for complex or numerous requests (we'll tell you if that applies and why). You also have the right to lodge a complaint with your local data protection authority — in the UK, the ICO (ico.org.uk).
If you're a California resident, you have the right to know what personal information we hold about you, to request its deletion or correction, and to opt out of its sale or sharing. We do not sell or share personal information as those terms are defined by the CCPA/CPRA, and we haven't done so in the preceding 12 months. To exercise these rights, email [email protected]; we verify and respond within 45 days, extendable once by another 45 days for complex requests. We won't discriminate against you for exercising any of these rights.
BrandPatrol is a business-to-business service and isn't directed at, or knowingly used by, anyone under 16 (or under 13 in the United States). We don't knowingly collect personal data from children. If you believe a child has given us data, email [email protected] and we'll delete it.
See our Data Deletion page for step-by-step instructions, or just email [email protected] at any time. We'll confirm exactly what was found, corrected, or deleted, and when.
If this policy changes, we'll update it on this page and change the "last updated" date above. We don't send a separate notice for minor clarifications; changes to what we collect or how we use it will be reflected here.
Questions about this policy or a specific data request: [email protected]. Anything else: [email protected].
Short answers, taken straight from the policy above. For the detail, see the Cookie Policy and Data Deletion pages.
No. We don't sell case evidence or workspace data to any of our subprocessors, we don't let them use it for their own advertising, and we don't share it with third parties for marketing purposes. For California residents, we do not sell or share personal information as the CCPA/CPRA defines those terms.
Account and workspace details, your monitoring configuration and partner roster, marketing chat and lead details, and billing data for paid plans, plus usage events from Google Analytics on the marketing pages. Case evidence is public ad data, and we collect nothing about shoppers who click the ads we monitor.
Google Analytics 4 on the public marketing pages records usage events such as page views, scroll depth, clicks, FAQ opens, language switches and checkout steps. It never receives your name, email, company, chat message contents or card data, and it does not log or store IP addresses. It is not used for advertising.
Account, workspace and case data is deleted within 30 days of a closure or deletion request and ages out of backups within 90 days. Chat and lead data is kept up to 24 months after the last message, billing records up to 7 years after the account closes, and security logs up to 12 months.
Email the privacy contact listed on this page and say what you want done. We respond within one month of a verified request, extendable by two more months for complex cases. The Data Deletion page gives step-by-step instructions, and you can also complain to your local data protection authority.
Airwallex for payments, Cloudflare for content delivery and cookieless analytics, Google LLC for the Gemini chat API, transactional email, optional Sign in with Google and Google Analytics 4, SerpApi for public search-ads data, and PEG Tech Inc (Dignitas Technology Inc) for server hosting. Each is used under contract and only for its stated purpose.