Privacy Policy

Effective date: August 4, 2026

This combined Privacy Policy and Consumer Data Notice explains how Workado LLC, doing business as BrandWell (“BrandWell,” “we,” “us,” or “our”) collects, uses, discloses, licenses, sells, shares, stores, and protects personal information. It applies both to people who interact directly with BrandWell websites, applications, reports, portals, communications, and services and to individuals whose information is included in BrandWell’s business-data, identity, enrichment, website-visitor, audience, or buyer-intent products.

Some BrandWell services are designed for business customers and agencies that use information for sales, marketing, analytics, advertising, identity resolution, fraud prevention, and related business purposes. Those customers and agencies are responsible for their own privacy notices, legal bases, permissions, communications, and use of the information they receive.

Product separation. BrandWell Intent Services include the buyer-intent portal, topic reports, topic exclusivity, identity resolution, TrafficID, Licensed Data, audience tools, APIs, custom portals, and the agency white-label portal. Sections addressing licensed data, network sources, cookie or device matching, website-visitor resolution, research signals, and buyer intent apply specifically to the BrandWell Intent Services.

RankWell Content and SEO Services include content briefs, keyword and website inputs, drafts, editing, content analytics, optimization, and AI-detection workflows. Customer Content submitted to RankWell is Customer Data. It is not added to BrandWell’s Licensed Data catalog or identity graph, and it is not distributed through BrandWell Intent reports, feeds, audiences, portals, or APIs. Using one product does not enroll a customer in the other. The products may share limited account, billing, security, support, and analytics infrastructure while retaining separate entitlements and data-use rules.

1. Scope and Roles

This Policy covers:

• Website and account interactions: visits to brandwell.ai and related pages, account registration, product use, forms, support, sales conversations, purchases, integrations, events, and job applications;
• RankWell Content and SEO Services: URLs, briefs, keywords, prompts, source material, drafts, edits, content analytics, AI-detection submissions, brand settings, and related workflow data submitted or generated for the customer;
• BrandWell Intent Services: topic reports, research signals, website-visitor resolution, TrafficID, identity matching, audiences, exclusive-topic feeds, and related portal or API services;
• Agency services: white-label portals, branded reports, client accounts, topic capacity, filters, and workflows made available to agencies and their authorized clients; and
• Consumer and professional records: information received from customers, participating businesses, data contributors, contracted suppliers, public sources, advertising and marketing sources, and other lawful sources.

Depending on the context, BrandWell may act as a business or controller that determines why and how personal information is processed, or as a service provider or processor acting under a customer’s instructions. When a customer controls the processing, requests about that customer’s use should also be directed to the customer.

2. Sources of Personal Information

We may collect personal information from the following sources:

• Directly from you, including forms, account setup, purchases, support, sales-agent chats, emails, surveys, onboarding, integrations, and other communications;
• Our customers, agencies, resellers, participating businesses, and data contributors, which may provide customer, lead, prospect, employee, website-visitor, transaction, campaign, or other records under written agreements;
• Our own websites, tags, pixels, APIs, applications, emails, and services, including information collected automatically when a browser, device, or network interacts with them;
• Contracted data suppliers and service providers, including identity, validation, enrichment, advertising, audience, analytics, and intent-data services;
• Publicly available and licensed sources, such as business websites, professional profiles, public records, directories, and other sources lawfully made available; and
• Advertising, marketing, and participating digital properties, including campaign, ad-placement, device, browsing, research, and engagement signals.

Product-specific sources. Network, data-contributor, participating-property, identity, audience, and Licensed Data sources described in this section support the BrandWell Intent Services. They do not include private RankWell Customer Content merely because a customer uses RankWell. RankWell Customer Content comes from the customer, its Authorized Users, and integrations or sources the customer directs BrandWell to use for the Content and SEO Services.

Network scale and scope. Based on current internal estimates, participating sources generate more than 5 billion signals per day and support an always-evolving identity graph of more than 250 million profiles. The network estimates that it can recognize roughly two-thirds of the identifiable U.S. audience across personal and work devices. These are directional network estimates, not guarantees. Coverage, match rates, available fields, geography, and recency vary by source, person, device, product, and permitted use.

Source governance and consent. Signals may be observed through participating digital properties, tags, scripts, approved integrations, contracted partners, customer contributions, and other lawful sources. Participating sources are expected to operate under applicable notices, consent choices where required, terms, agreements, and technical controls. The presence of a cookie or consent mechanism does not by itself establish a legal basis for every downstream use. BrandWell and each customer remain responsible for the lawful basis, notices, permissions, opt-out handling, and permitted purpose applicable to their role.

We may combine information from multiple sources, match records that appear to relate to the same person or business, validate contact points, and create derived attributes or inferences.

3. Categories of Personal Information We Process

The information available in a particular record depends on the source, product, customer instructions, and permitted use. We may process the following categories:

• Identifiers: name, business or personal mailing address, business or personal email address, hashed email, business or personal telephone number, IP address, cookie or device identifier, mobile advertising identifier, account ID, customer ID, and other unique identifiers;
• Contact validity and identity information: whether an email address or telephone number appears valid, identity-resolution links, and relationships among identifiers, devices, domains, people, and companies;
• Professional and employment information: employer, company, company domain, title, department, seniority, role, work history, professional profile, education information that is publicly available or lawfully supplied, and company firmographics;
• Internet, device, and network activity: browsing or search-related signals, page or email interaction, referring and destination URLs, clickstream data, ad impressions, pixel or cookie events, JSON or HTTP header information, timestamps, browser, operating system, device type, and other visible network traffic;
• Location information: approximate country, region, city, or postal area derived from IP address or other lawfully supplied signals;
• Commercial and service information: products or services purchased or considered, campaign and advertising activity, report requests, selected topics, portal plan, commitment term, billing and subscription status, onboarding preferences, and customer-support history;
• Inferences and intent information: interests, affinities, likely professional or consumer characteristics, comparison-shopping or research behavior, buying-stage or intent indicators, and other inferences derived from the categories above;
• RankWell Customer Content and SEO data: customer-provided URLs, briefs, keywords, prompts, source material, drafts, edits, brand voice or style instructions, content analytics, optimization settings, AI-detection submissions, and generated outputs; and
• Information you choose to provide: chat messages, support requests, survey responses, documents, resumes, integration data, and other content you submit.

Customer Content boundary. Private Customer Content, including RankWell Content and SEO inputs and outputs, is not Licensed Data. BrandWell does not add it to the identity graph, use it to create Intent reports or feeds for other customers, or sell or license it as an Intent data product.

We do not want passwords, full payment-card numbers, government account credentials, medical records, or other highly sensitive information submitted through sales forms or AI chat. Do not submit that information unless a BrandWell feature expressly requests it through a secure channel.

4. Website, Form, Account, and Sales Information

When you request a buyer-intent report, use the sales-demo agent, create an account, select a plan, purchase a service, or contact us, we may collect:

• first and last name, company email, company name, company domain, telephone number, and account details;
• team size, agency client count, monthly advertising-spend range, selected topics, plan, term, report URL, temporary hold, referral source, and campaign parameters;
• questions and answers in AI-agent conversations, timestamps, the page where the conversation occurred, and the lead or customer record associated with the conversation;
• anti-spam, fraud, security, rate-limit, and form-integrity signals; and
• onboarding, filtering, workflow, support, billing, cancellation, renewal, and opt-out communications.

We use this information to respond to requests, generate and deliver reports, confirm topic availability, maintain a time-limited hold, provide checkout and account access, schedule onboarding, configure filters and workflows, administer subscriptions, prevent abuse, monitor service quality, and enforce our Terms and Order Forms.

Trackable topic-report links. When a report is opened through a share link, BrandWell may record total and unique opens, view timestamps, the referring page, device or browser characteristics, a pseudonymous viewer cookie or hashed identifier, a one-way report-scoped hash of the network IP address, and automated-traffic indicators. Automated previews, bots, and prefetch requests may be excluded from engagement metrics. We do not display or return a viewer’s raw IP address to report owners. The customer or agency that created the report and authorized BrandWell administrators may see report-level activity such as view counts, timestamps, the number of distinct IP addresses, and shortened pseudonymous network labels so they can distinguish viewing networks without receiving the underlying addresses. The network hash is scoped to one report and is not used to correlate the viewer across unrelated customer reports. A report link is an unlisted bearer link: anyone who receives an active link may be able to open the report, and forwarding the link grants the recipient the same access until the report owner revokes it. Customers and agencies should share links only with intended recipients and should not add sensitive information to a report. We retain report analytics as described in Section 12.

5. Cookies, Pixels, TrafficID, and Network Technologies

Meta Pixel and Conversions API. BrandWell uses the Meta Pixel on its own websites, including checkout pages, and the Meta Conversions API from its own servers, to measure and improve BrandWell’s own advertising on Meta. The Pixel runs only after you select “Accept and Continue” in our cookie banner, and never while your browser sends a Global Privacy Control signal. It then reports page views with the page address, browser and device information, IP address, and Meta cookies such as _fbp and _fbc. Where your advertising choices permit, our servers also report signups and later milestones recorded in our lead-management system, such as email confirmation, early-access invitations, booked calls, checkout activity, and purchases. For those events we send event times, topic or product information, purchase amounts when applicable, ad-click and browser identifiers, and matching information such as your email address, phone number, name, and location. Contact and location details are hashed before transmission to Meta. Meta uses this information to match activity to ads, measure results, and improve ad delivery, and processes it under its own terms and privacy policy. BrandWell does not sync audiences, Licensed Data, or customer lists to Meta or any other advertising platform. Until you select “Accept and Continue,” the Pixel stays off. To opt out after accepting, turn on Global Privacy Control in your browser, clear this site’s cookies, or email help@brandwell.ai. The “Your privacy choices” link in our site footer leads to your other options. You can also adjust your ad preferences in your Meta account. Advertising choices remain separate from requesting early access or accepting our Terms of Service. See Section 14 for your choices.

We, our customers, and our service providers may use cookies, local storage, software development kits, tags, pixels, web beacons, email beacons, APIs, and similar technologies. These technologies may collect or receive IP address, hashed email or other pseudonymous identifiers, cookie and device IDs, mobile advertising IDs, browser and device information, timestamps, page URL, referrer, email opens, clicks, form activity, and other interaction data.

These technologies help authenticate users, remember preferences, prevent fraud, measure traffic and campaign performance, personalize content, measure and improve advertising, including BrandWell’s own ads on Meta, identify or resolve website visitors where permitted, and understand research or buying activity. A pixel or beacon may be invisible and may communicate with cookies or other identifiers on a browser or device.

Essential, preference, security, and first-party analytics technologies may support all BrandWell products. TrafficID, cross-property identity matching, and the network-level research and audience practices described below apply to the BrandWell Intent Services, not to RankWell Customer Content.

Identity matching. Where a lawful basis, source permissions, and matching controls allow, cookie or device identifiers and hashed identifiers may be associated with a known profile in the identity graph. If an identifier cannot be matched with appropriate confidence and permission, it remains pseudonymous or hashed and is not delivered as an identified person. Hashing is a security and matching control, not a substitute for a legal basis or an applicable privacy right.

TrafficID and visitor resolution. When TrafficID or a related visitor-resolution tag is deployed on a participating website or email, BrandWell and its service providers may use network, browser, device, cookie, hashed-identifier, and interaction signals to attempt to associate a visit with a person or company. Match coverage is not universal and a match does not prove that a person is ready to buy. To request an opt-out associated with TrafficID, visit brandwell.ai/optout-trafficid/ or email help@brandwell.ai.

You can control many cookies through your browser, but blocking them may affect functionality. Browser “Do Not Track” signals are not standardized. Where applicable law requires us to recognize an opt-out preference signal such as Global Privacy Control, we treat the supported signal as an opt-out request for the browser or device that sends it. Because a browser signal may not identify offline or separately held records, submit a verified request for a broader record-level opt-out.

6. BrandWell Intent Services: Buyer Intent, Identity, and Audience Data

BrandWell may organize digital research activity around a category, competitor, product, or business problem and combine that context with company, professional, contact, device, or identity information where available and permitted. Signals may come from participating digital properties, customer contributions, advertising or marketing activity, public or licensed sources, and contracted suppliers.

We and our service providers may use algorithms and artificial-intelligence models to match and deduplicate records, link identifiers, validate contact details, classify activity, infer interests or likely intent, improve data quality, and create or maintain products. These outputs are probabilistic. They should be treated as context for lawful business decisions, not as proof of identity, intent, eligibility, creditworthiness, employment suitability, or a vendor relationship.

7. How We Use Personal Information

We may use personal information to:

• provide, maintain, secure, support, and improve our websites, portals, reports, APIs, applications, and data products;
• provide RankWell Content and SEO Services using the Customer Content, settings, sources, and instructions supplied by the customer;
• provide BrandWell Intent Services, including topic reports, exclusive-topic feeds, TrafficID, identity resolution, audience tools, agency portals, and customer-requested data workflows;
• perform identity resolution, data-quality checks, audience creation and export, analytics, buyer-intent analysis, topic exclusivity, fraud detection, and related customer-requested services;
• communicate with leads, customers, agencies, users, applicants, and consumers; provide service notices; and send marketing subject to applicable choices;
• process payments, administer accounts, enforce commitments, manage renewals and cancellations, and provide onboarding and support;
• develop, test, and improve matching, classification, security, analytics, and product functionality, while not using Customer Data or Delivered Records to train generalized language models;
• create aggregated or deidentified information and use it for lawful purposes while maintaining it in deidentified form except as permitted by law;
• detect abuse, protect systems and people, investigate incidents, enforce agreements, and establish or defend legal claims;
• comply with law, regulatory requests, court orders, and valid consumer-privacy requests; and
• complete a merger, financing, acquisition, restructuring, sale, bankruptcy, or other corporate transaction.

8. AI Sales Agent, Automated Features, and Customer Data Commitments

Questions submitted to the BrandWell sales agent, relevant conversation history, and limited lead, company, report, topic, or plan context may be sent through OpenRouter to the model provider selected by BrandWell solely to generate the requested response. BrandWell configures supported AI requests with provider controls intended to prevent prompt and output retention or model training. Limited service metadata may still be processed for routing, billing, security, and abuse prevention. Authorized BrandWell personnel may review and associate conversations with the captured lead or customer record for quality monitoring, sales follow-up, support, and safety.

Customer Data and Delivered Records. For this Policy, Customer Data includes nonpublic information submitted by a customer or user, RankWell Customer Content and outputs, and the private account settings, prompts, filters, reports, and workflow content created from those inputs. Delivered Records are the copies of Licensed Data placed in a customer’s private workspace. BrandWell does not use or permit Customer Data or Delivered Records to train a generalized language model.

Limited disclosures of Customer Data. BrandWell does not sell or license Customer Data as a data product and does not disclose it to independent third parties for their unrelated purposes. We disclose Customer Data only to contracted service providers and processors that help operate the Services, destinations or integrations a customer directs us to use, analytics and advertising providers used for BrandWell’s own measurement or advertising where permitted, payment and professional-service providers, parties needed for security or legal compliance, and transaction counterparties subject to appropriate protections. Some analytics or advertising disclosures may be treated as “sharing” under applicable privacy law, and BrandWell honors applicable opt-out rights. These commitments do not change the separate licensing of identity, professional, contact, audience, and intent data through the BrandWell Intent Services described in Section 10.

Do not submit payment-card data, passwords, health information, government identifiers, or confidential information that is not needed for the question. Automated responses may be inaccurate; the applicable Order Form, Terms of Service, Privacy Policy, and human confirmation control.

9. Payments and Connected Services

Purchases may be completed through Stripe-hosted checkout. Stripe collects the email address and payment details entered in its checkout, while BrandWell sends only a non-sensitive order reference in the checkout URL so the payment can be matched to the correct order. Stripe processes full payment-card information under its own terms. BrandWell may receive transaction, subscription, invoice, payment status, and limited card metadata but does not receive the full card number through this flow.

If you connect Google, a CRM, or another service, we process the information and permissions you authorize to provide the requested integration. The connected provider’s terms and privacy notice also apply.

10. How We Disclose, Sell, or Share Personal Information

We may disclose personal information to:

• Customers, agencies, resellers, and their authorized clients as part of licensed reports, portals, APIs, identity, audience, or buyer-intent services;
• Service providers and contractors supporting hosting, storage, security, data processing, identity matching, analytics, communications, AI, customer relationship management, payment processing, advertising, and support;
• Advertising platforms, such as Meta, that receive the measurement data described in Section 5 for BrandWell’s own advertising;
• Data contributors, suppliers, and business partners where permitted by contract and law to validate, match, license, improve, or provide products and services;
• Affiliates and professional advisers such as lawyers, auditors, insurers, and accountants;
• Government, regulators, courts, and law enforcement when disclosure is legally required or reasonably necessary to protect rights, safety, systems, or users; and
• Transaction counterparties and successors in connection with a financing, merger, acquisition, asset sale, reorganization, bankruptcy, or change of control.

BrandWell licenses and provides access to business, professional, identity, contact, device, network, audience, and intent information. Depending on the jurisdiction and use, these activities may be considered a “sale,” “sharing,” or processing for targeted advertising even when no money is exchanged for a particular record. Categories that may be sold or shared include identifiers, customer-record information, professional or employment information, internet or network activity, device and approximate location data, commercial information, and inferences such as interests or intent. Recipients may include BrandWell customers, agencies, resellers, authorized clients, data and audience partners, and advertising platforms such as Meta for BrandWell’s own advertising measurement.

The preceding paragraph concerns the BrandWell Intent Services and their Licensed Data. It does not mean that BrandWell sells or licenses Customer Data as a data product. Private RankWell Customer Content is not part of the identity graph, Licensed Data catalog, Intent reports, feeds, audiences, portals, or APIs. Customer Data and Delivered Records in a private workspace are handled under the limited-disclosure commitments in Section 8, while the underlying Licensed Data remains subject to its source rights, permitted uses, consumer choices, and BrandWell’s data-product obligations.

We do not knowingly sell or share personal information about children under 16.

11. Customer and Agency Responsibilities

Customers, agencies, and resellers must use BrandWell information only for authorized, lawful purposes and in accordance with their agreements, applicable privacy and marketing laws, suppression and opt-out obligations, platform policies, and any required notices or consents. Agencies are responsible for their own client billing, contracts, communications, support, and disclosures. BrandWell does not control an independent customer’s use of information after it is provided, but we may investigate complaints, enforce contractual restrictions, suspend access, and require deletion or suppression where appropriate.

12. Retention, Security, and Deidentification

We retain information for as long as reasonably necessary for the purposes described in this Policy, including providing products and services, maintaining data quality, honoring suppression requests, resolving disputes, collecting fees, enforcing agreements, preventing harm, protecting security and integrity, and meeting legal or accounting obligations. Retention varies by category, source, customer agreement, and legal requirement.

We use administrative, technical, and physical safeguards designed to protect information. No internet transmission, storage system, or security program can guarantee absolute security. Customers and agencies that receive information are responsible for securing it in their own systems.

We may deidentify or aggregate information. Where required by law, we maintain deidentified information in deidentified form and do not attempt to reidentify it except to test whether deidentification controls are effective or as otherwise permitted by law.

13. U.S. Processing and International Transfers

BrandWell is based in the United States, and our services and data products are primarily designed for business use in the United States. Information may be processed in the United States and other countries where BrandWell or its service providers operate. Those locations may have different privacy laws. Where required, we use contractual or other approved safeguards for international transfers.

14. Your Privacy Rights and Choices

Depending on where you live, you may have the right to:

• know or confirm whether we process personal information about you;
• access specific information or receive a portable copy;
• correct inaccurate personal information;
• delete personal information, subject to legal exceptions;
• opt out of sale, sharing, targeted advertising, profiling, or certain uses of sensitive personal information;
• withdraw consent where processing is based on consent;
• appeal a decision we make about your request; and
• receive equal service and not be discriminated against for exercising a privacy right.

To submit a request, email help@brandwell.ai with the subject Privacy Request. For TrafficID requests, you may also use brandwell.ai/optout-trafficid/. State the right you want to exercise and provide enough information for us to locate the relevant record. We may ask you to verify your identity and email ownership. We use verification information only to process the request.

An authorized agent may submit a request where permitted by law. We may require proof of authorization and may ask the consumer to verify identity directly. If we deny a request, you may appeal by replying to our decision with “Privacy Appeal” in the subject line.

You may unsubscribe from promotional emails using the link in the message. Opting out of marketing does not stop transactional, account, security, or legal communications.

15. California Notice

This section supplements the rest of the Policy for California residents. During the preceding 12 months, BrandWell may have collected the categories described in Section 3 from the sources described in Section 2; used them for the purposes in Section 7; and disclosed them to the recipient categories in Section 10. BrandWell’s licensing, data-product, audience, identity, and intent activities may constitute selling or sharing under the California Consumer Privacy Act.

California residents may request the categories and specific pieces of personal information collected; categories of sources; business or commercial purposes; categories sold, shared, or disclosed; categories of recipients; correction; deletion; portability; and opt-out of sale or sharing. Where applicable, residents may limit certain uses or disclosures of sensitive personal information. BrandWell does not use sensitive personal information to infer characteristics except as described in this Policy and where permitted by law.

California’s “Shine the Light” law may permit residents with an established business relationship to request certain information about disclosures for third-party direct marketing. Submit one request per calendar year to help@brandwell.ai.

16. Other U.S. States, EEA, United Kingdom, and Other Regions

Residents of other U.S. states may have access, correction, deletion, portability, opt-out, profiling, sensitive-data, and appeal rights under applicable law. Individuals in the European Economic Area or United Kingdom may also have rights to object, restrict processing, withdraw consent, and lodge a complaint with a supervisory authority. Our legal bases may include performance of a contract, consent, compliance with law, protection of rights, and legitimate interests such as providing and securing business services. These rights are not absolute and may be subject to exemptions.

17. Children

BrandWell services are not directed to children under 13, and we do not knowingly collect personal information directly from them. We do not knowingly sell or share personal information of individuals under 16. If you believe a child’s information has been included in our systems, contact us so we can investigate and take appropriate action.

18. Third-Party Websites and Public Features

Our services may link to websites, platforms, or social features we do not control. Their privacy practices apply when you interact with them. Information you post in public or semi-public areas may be visible and reused by others. A link does not imply that BrandWell controls or endorses the third party’s privacy practices.

19. Changes to This Policy

We may update this Policy as our services, data practices, or legal obligations change. We will update the effective date and provide any additional notice required by law. Material changes apply prospectively unless law permits otherwise.

20. Contact Us

Workado LLC d/b/a BrandWell
20280 N 59th Ave, #115-141
Glendale, AZ 85308
Email: help@brandwell.ai

Include “Privacy Request,” “TrafficID Opt-Out,” or “Privacy Appeal” in the subject line, as applicable.