CRM & Content Operations · brandi.aiBrandi AI
Graded against 804 verified platforms, from its own policy text. Automated assessment against a published rubric — not legal advice.
Partially verified: Privacy Policy assessed · Terms of Service pending. Everything below comes only from what was read in full.
Watch: Data retention
Start here. These are the highest-risk verified clauses AIRIN found in the platform's own policy text.
This segment specifies the retention obligation in detail — retaining data to support business activities, comply with legal obligations, resolve disputes, establish and defend legal claims, and enforce agreements — and states the overall retention period of approximately seven years.
This segment establishes the controller's obligation to retain personal information for the duration necessary to operate the Website, Portal, and business, and for subsequent record-keeping purposes, defining the operative retention period.
Establishes the procedure for amending the Privacy Notice, obligating the Company to post changes on the Website with reasonable advance notice and to make efforts to notify users by email, creating a procedural obligation for how policy changes are communicated.
How to read this page: Overall risk rates what Brandi AI's own policy terms mean for your prompts, outputs, and data. The benchmark bands below grade those same verified terms relative to peers — a platform in a risky-by-default category can rate HIGH risk and still grade STRONG against its peer set. Both trace to the cited findings.
Policy benchmark
rubric v1.0 — how this is scoredIP/output assessment pending — terms of service not yet verified This lens receives a band only once its source document has been captured and read in full.
Know where this document lives? Point us to the URL or PDF and the pipeline will verify it.
Based on 46 verified, verbatim-cited findings below — read the citations.
Automated assessment against a published rubric — not legal advice.
Partially verified — Terms of Service — Capture pending; Privacy Policy — Verified (read in full, 36 findings). Findings below are from fully-read, verified documents only; remaining core documents are pending capture.
Held for review
A core policy document failed verification or contains contested evidence that must not be treated as fully verified.
- Terms of ServiceCapture pendingstatic
- Privacy PolicyVerified - read in full - 36 citationsstaticLast captured 2026-08-12
Only citation-backed plan differences are shown here; absent cells mean AIRIN has not verified a tier-specific claim.
Identifies the purpose for which personal data is processed — administering business/service relationships with customers, portal users, and support — establishing a legal basis for that processing activity.
" Administering business/service relationships with customers; Portal Users; support"
Identifies the data controller as Brandi AI, LLC and defines the key terms 'Company,' 'we,' 'us,' and 'our,' establishing the legal entity responsible for data processing obligations throughout the document.
" We, Brandi AI, LLC (the “ Company ,” “ we ,” “ us ,” “ our ”), respect the privacy and data protection rights of our website visitors, business users, and business contacts."
Specifies the purposes for processing customer representative data — administering the business relationship and facilitating support — establishing the legal purposes justifying that data processing.
" Administering the business and professional services relationship with customers. Facilitating the provision of support to customers."
Defines the legitimate interest relied upon for processing personal data when defending against or enforcing against violations harmful to the business, specifying the lawful basis for that processing.
" Legitimate interests in defending against and enforcing against violations harmful to our business"
Specifies the purposes for processing Portal User data — administering the service agreement with the business customer and facilitating Portal provision and support — establishing legal purposes for that processing.
" Administering the relationship and service agreement we have with the company (business) using the Portal User. Facilitating the provision of the Portal and support for the Portal."
This segment states the purpose for which data is shared with service providers — operating the Website and business — establishing the legal basis and scope of the sharing obligation with subprocessors.
" Operating the Website and our business."
Enumerates the categories of personal data (name, email, company affiliation, free-text inquiry content) collected in the demo/email contact scenario, defining the scope of data collection for that purpose.
" Name, email address, your company affiliation, and any free-text content of your inquiry."
This segment describes the procedural methods by which personal information is collected (directly from the individual, via email, online forms, or third-party representatives) and imposes an obligation on the individual to understand consequences of non-provision, i.e., inability to respond to inquiries or register as a Portal User.
" We collect personal information from several sources: Directly from you when you provide it to us through email communications or an online form. You are not legally obligated to provide us with your personal information, but if you do no..."
Evidence appendix
Showing priority citations first. The full appendix is available for audit trails; not every citation is a severe risk.
" Responding to, handling, and mitigating suspected violations of law."
This segment specifies the purpose of sharing in the abuse/violation scenario — responding to, handling, and mitigating suspected violations of law — establishing a compliance-driven obligation for disclosure.
AI-generated interpretation, not legal advice.
" The webpages of the Website and Portal that you accessed or viewed, your interactions with the content, IP addresses, browser information, device identifiers, and data collected through cookies and similar technologies. We obtain your consent before placing non-essential cookies."
Enumerates the categories of data collected for analytics (page views, interactions, IP addresses, browser info, device identifiers, cookie data) and notes that consent is obtained before placing non-essential cookies, combining a data category definition with a consent-based restriction on certain tracking.
AI-generated interpretation, not legal advice.
" This Notice may be amended from time to time. We will post any changes to this Notice on our Website a reasonable time in advance of the effective date of the change, and we will also make efforts to proactively notify you by email of the changes to the Notice if we have your email address."
Establishes the procedure for amending the Privacy Notice, obligating the Company to post changes on the Website with reasonable advance notice and to make efforts to notify users by email, creating a procedural obligation for how policy changes are communicated.
AI-generated interpretation, not legal advice.
" We will retain your information for the duration needed to support our ordinary business activities, operating the Website, the Portal, and interacting with existing and potential customers and suppliers. Thereafter, we will still retain your personal information as necessary to comply with our legal obligations, resolve disputes, establish and defend legal claims, and enforce our agreements. The overall period of retention is approximately seven years."
This segment specifies the retention obligation in detail — retaining data to support business activities, comply with legal obligations, resolve disputes, establish and defend legal claims, and enforce agreements — and states the overall retention period of approximately seven years.
AI-generated interpretation, not legal advice.
" We retain your information for the duration necessary to operate the Website, the Portal, and our business, and to interact with customers and suppliers, and thereafter as needed for record-keeping purposes. "
This segment establishes the controller's obligation to retain personal information for the duration necessary to operate the Website, Portal, and business, and for subsequent record-keeping purposes, defining the operative retention period.
AI-generated interpretation, not legal advice.
" Responding to, handling, and mitigating suspected violations of law in connection with our business."
Specifies the purpose for processing personal data in the abuse/violation scenario — responding to, handling, and mitigating suspected violations of law — establishing the legal justification for that enforcement-related data processing.
AI-generated interpretation, not legal advice.
" Complying with a binding request from an authority."
This segment states the purpose of sharing in response to authority requests — complying with a binding request — establishing the legal obligation underlying this disclosure scenario.
AI-generated interpretation, not legal advice.
" Our Website and Portal is not intended for visitors and users under 18. We do not knowingly collect their data."
Restricts use of the Website and Portal to users 18 and older and states that the Company does not knowingly collect data from minors, imposing a data collection restriction with respect to children's personal information.
AI-generated interpretation, not legal advice.
" We implement measures to secure your information. We implement appropriate technical and organizational measures to secure your information against unauthorized access, alteration, disclosure, or destruction. These measures include encryption of data in transit and at rest, access controls, and staff training. While we maintain industry-standard security practices, no system can guarantee absolute security, and we continuously work to enhance our protective measures."
This segment establishes the controller's obligation to implement appropriate technical and organizational security measures (encryption, access controls, staff training) to protect personal information, while including a disclaimer that no system can guarantee absolute security.
AI-generated interpretation, not legal advice.
" Administering business/service relationships with customers; Portal Users; support"
Identifies the purpose for which personal data is processed — administering business/service relationships with customers, portal users, and support — establishing a legal basis for that processing activity.
AI-generated interpretation, not legal advice.
" We, Brandi AI, LLC (the “ Company ,” “ we ,” “ us ,” “ our ”), respect the privacy and data protection rights of our website visitors, business users, and business contacts."
Identifies the data controller as Brandi AI, LLC and defines the key terms 'Company,' 'we,' 'us,' and 'our,' establishing the legal entity responsible for data processing obligations throughout the document.
AI-generated interpretation, not legal advice.
" You contact us through our Website's demo form or in an email message"
Defines a specific data collection scenario — contact through the Website's demo form or email — establishing the trigger condition for the corresponding data processing activities described in the table.
AI-generated interpretation, not legal advice.
" Administering the business and professional services relationship with customers. Facilitating the provision of support to customers."
Specifies the purposes for processing customer representative data — administering the business relationship and facilitating support — establishing the legal purposes justifying that data processing.
AI-generated interpretation, not legal advice.
" Name, username, email address, access authentication information, company; position; phone number; past communications; activities performed on the Portal"
Enumerates the categories of personal data processed for Portal Users (name, username, email, authentication info, company, position, phone, past communications, Portal activities), defining the scope of data collection for that scenario.
AI-generated interpretation, not legal advice.
" Right to withdraw consent that you previously gave, where the processing of your personal data is based on your consent. Right to Access and receive a copy of your personal information that we process. Right to Rectify inaccurate personal information we have concerning you and to have incomplete personal information completed. Right to Data Portability , that is, to receive the personal information that you provided to us, in a structured, commonly used, and machine-readable format. You have the right to transmit this data to another person or entity. Where technically feasible, you have the right to have your personal information transmitted directly from us to the person or entity you designate. Right to Object to our processing of your personal information based on our legitimate interest. However, we may override the objection if we demonstrate compelling legitimate grounds, or if we need to process such personal information for the establishment, exercise, or defense of legal claims. Right to Restrict us from processing your personal information (except for storing it) in certain circumstances, such as when you contest accuracy, processing is unlawful, we no longer need the data, or you have objected to processing. Right to be Forgotten . Under certain circumstances, you have the right to ask us to erase your personal information. However, we may still process your personal information if it is necessary to comply with our legal obligations or for the establishment, exercise, or defense of legal claims. "
Enumerates specific data subject rights granted under GDPR — including rights to withdraw consent, access, rectification, and data portability — conferring enforceable legal entitlements upon EU and UK data subjects against the data controller.
AI-generated interpretation, not legal advice.
" Legitimate interests in defending against and enforcing against violations harmful to our business"
Defines the legitimate interest relied upon for processing personal data when defending against or enforcing against violations harmful to the business, specifying the lawful basis for that processing.
AI-generated interpretation, not legal advice.
" Administering the relationship and service agreement we have with the company (business) using the Portal User. Facilitating the provision of the Portal and support for the Portal."
Specifies the purposes for processing Portal User data — administering the service agreement with the business customer and facilitating Portal provision and support — establishing legal purposes for that processing.
AI-generated interpretation, not legal advice.
" Legitimate interests in administering the contractual relationship with customers and provision of service"
Specifies the legitimate interest ground relied upon for processing personal data in connection with administering contractual relationships with customers and service provision, defining the lawful basis under data protection law.
AI-generated interpretation, not legal advice.
Clause detail — protections, your obligations, and coverage
Every clause below is a verbatim quote from Brandi AI's own published policy, read in full and linked to its exact location. Protections and user obligations are reported separately from risk because they are different kinds of clause — an obligation on you is not a risk to your data. Informational only, not legal advice.
✅ Protections found
5 verified clausesClauses in Brandi AI's policies that work in your favour — commitments the platform made to you.
- Privacy & data use
“Right to withdraw consent that you previously gave, where the processing of your personal data is based on your consent. Right to Access and receive a copy of your personal information that we process. Right to Rectify inaccurate personal information we h…”
Enumerates specific data subject rights granted under GDPR — including rights to withdraw consent, access, rectification, and data portability — conferring enforceable legal entitlements upon EU and UK data subjects agai…
📍 Privacy Policy › “Data Subject Rights”Jump to exact text → - Privacy & data use
“If you wish to exercise any of these rights, please contact us through the channels listed in this Notice. When you contact us, we reserve the right to request reasonable evidence to verify your identity before providing you with information. If we are unable…”
Specifies the procedure for exercising data subject rights, including the method of contact, the controller's right to verify identity, the obligation to explain refusals, and the right to lodge a complaint with a superv…
📍 Privacy Policy › “Data Subject Rights”Jump to exact text → - Audit rights, DPA & residency
“To facilitate processing your information with our service providers, we will transfer your information to countries such as the United States. For transfers to countries without adequacy decisions, we implement appropriate safeguards, including Standard Contr…”
This segment establishes the controller's obligation to implement appropriate safeguards — including Standard Contractual Clauses (2021/914/EU) and the UK International Data Transfer Addendum — when transferring personal…
📍 Privacy Policy › “International Data Transfers”Jump to exact text → - Moderation & enforcementterms can change anytime
“This Notice may be amended from time to time. We will post any changes to this Notice on our Website a reasonable time in advance of the effective date of the change, and we will also make efforts to proactively notify you by email of the changes to the Notice…”
Establishes the procedure for amending the Privacy Notice, obligating the Company to post changes on the Website with reasonable advance notice and to make efforts to notify users by email, creating a procedural obligati…
- Terms changes: advance notice promised
📍 Privacy Policy › “Introduction”Jump to exact text → - Privacy & data usechildren's data
“Our Website and Portal is not intended for visitors and users under 18. We do not knowingly collect their data.”
Restricts use of the Website and Portal to users 18 and older and states that the Company does not knowingly collect data from minors, imposing a data collection restriction with respect to children's personal informatio…
📍 Privacy Policy › “Introduction”Jump to exact text →
📋 Rules you must follow
0 verified clausesWhat Brandi AI requires of YOU. These are your obligations, not risks to your data or IP, so they are cited here and excluded from this platform's risk rating.
No user-conduct rule has been verified in Brandi AI's published policies yet.
What the policies actually cover
6 topics- Product telemetry & usage tracking6 clauses
- Advertising & tracking1 clause
- Children's data1 protective1 clause
- Government & law-enforcement disclosure5 clauses
- Terms can change at any time1 protective1 clause
- Deletion rights & post-termination survival2 clauses
20 further verified clauses are cited on this page but not yet assigned a topic.
Clause intelligence
Canonical clauses and stance patterns extracted from the same gate-verified citations shown on this page.
The clause imposes arbitration, class-action waiver, or jury-trial waiver terms.
“These Terms of Service (" Terms ") apply to your access to and use of (i) the website located at https://www.read.ai/ (or any successor links) and all associates web pages, websites, and social media pages (the “ Site ”) provided by Read AI, Inc. (" Read AI ", “ Read ,” or " we "), (ii) mobile, web, or desktop applications that may be downloaded to your smartphone, tablets, computer or other devices (each an “ App...”Open source citation
The clause imposes arbitration, class-action waiver, or jury-trial waiver terms.
“PLEASE READ THIS SECTION CAREFULLY BECAUSE IT REQUIRES YOU AND READ AI TO ARBITRATE CERTAIN DISPUTES AND CLAIMS AND LIMITS THE MANNER IN WHICH WE CAN SEEK RELIEF FROM EACH OTHER. ARBITRATION PRECLUDES YOU AND READ AI FROM SUING IN COURT OR HAVING A JURY TRIAL. YOU AND READ AI AGREE THAT ARBITRATION WILL BE SOLELY ON AN INDIVIDUAL BASIS AND NOT AS A CLASS ARBITRATION, CLASS ACTION, OR ANY OTHER KIND OF REPRESENTATI...”Open source citation
The clause imposes arbitration, class-action waiver, or jury-trial waiver terms.
“(a) Claims This Section Applies To. The dispute resolution and binding arbitration terms in this Section 16 apply to all Claims between you and Read AI. A “Claim” is any dispute, claim, or controversy (excluding those exceptions listed below) between you and Read AI, whether based in contract, tort, statute, fraud, misrepresentation, or any other legal theory, that either party wishes to seek legal recourse for an...”Open source citation
The clause imposes arbitration, class-action waiver, or jury-trial waiver terms.
“(b) Informal Dispute Resolution Prior to Arbitration. If you have a Claim against Read AI or if Read AI has a Claim against you, you and Read AI will first attempt to resolve the Claim informally in order to try and resolve the Claim faster and reduce costs for both parties. You and Read AI will make a good-faith effort to negotiate the resolution of any Claim for 30 days, or such longer period as mutually agreed ...”Open source citation
The clause imposes arbitration, class-action waiver, or jury-trial waiver terms.
“(c) Claims Subject to Binding Arbitration; Exceptions. Except for individual disputes that qualify for small claims court (provided that the small-claims court does not permit class or similar representative actions or relief) and any disputes exclusively related to the intellectual property or intellectual property rights of you or Read AI, including any disputes in which you or Read AI seek injunctive or other e...”Open source citation
Tier matrix
Plan-level conditions detected from citation-backed clauses. Empty tiers mean AIRIN has not captured decisive tier language yet.
| Tier | Surface | Verdict | Risk | Citations |
|---|---|---|---|---|
| All applicable tiers | audit rights dpa residency | worsens | HIGH | 1 |
| All applicable tiers | data retention | improves | LOW | 1 |
| All applicable tiers | governing law disputes | conditional | MEDIUM | 15 |
| All applicable tiers | indemnity liability | conditional | MEDIUM | 3 |
| All applicable tiers | moderation enforcement | worsens | HIGH | 1 |
| All applicable tiers | privacy data use | worsens | HIGH | 4 |
| All applicable tiers | subprocessors data sharing | worsens | HIGH | 1 |
| All applicable tiers | training use | improves | LOW | 1 |
| Enterprise | moderation enforcement | worsens | HIGH | 1 |
| Free | training use | worsens | HIGH | 3 |
| Pro / Paid | output ownership | worsens | HIGH | 1 |
| Pro / Paid | privacy data use | worsens | HIGH | 1 |
Policy evolution
Open full timelineBefore/after stance changes across captured policy versions. When no material delta exists yet, AIRIN shows the latest citation-backed stance events instead.
Latest stance: third party or vendor sharing on privacy data use
“To facilitate processing your information with our service providers, we will transfer your information to countries such as the United States. For transfers to countries without adequacy decisions, we implement appropriate safeguards, including Standard Contractual Clauses approved by the European Commission (2021/914/EU) and the UK International Data Transfer Addendum, supplemented by additional technical and organizational measures where necessary to ensure equivalent protection.”Open timeline citation
Latest stance: platform claims or reserves rights on privacy data use
“If you wish to exercise any of these rights, please contact us through the channels listed in this Notice. When you contact us, we reserve the right to request reasonable evidence to verify your identity before providing you with information. If we are unable to provide you with the requested information, we will explain the reason. Subject to applicable law, you have the right to lodge a complaint with your local data protection authority. If you are in the EU, you may lodge a complaint with the supervisory authority in the Member State of your residence, place of work, or place of alleged infringement of the GDPR. If you are in the UK, you may lodge a complaint with the Information Commissioner’s Office (ICO).”Open timeline citation
Latest stance: third party or vendor sharing on privacy data use
“To facilitate processing your information with our service providers, we will transfer your information to countries such as the United States. For transfers to countries without adequacy decisions, we implement appropriate safeguards, including Standard Contractual Clauses approved by the European Commission (2021/914/EU) and the UK International Data Transfer Addendum, supplemented by additional technical and organizational measures where necessary to ensure equivalent protection.”Open timeline citation
Latest stance: platform claims or reserves rights on privacy data use
“If you wish to exercise any of these rights, please contact us through the channels listed in this Notice. When you contact us, we reserve the right to request reasonable evidence to verify your identity before providing you with information. If we are unable to provide you with the requested information, we will explain the reason. Subject to applicable law, you have the right to lodge a complaint with your local data protection authority. If you are in the EU, you may lodge a complaint with the supervisory authority in the Member State of your residence, place of work, or place of alleged infringement of the GDPR. If you are in the UK, you may lodge a complaint with the Information Commissioner’s Office (ICO).”Open timeline citation
Latest stance: third party or vendor sharing on privacy data use
“To facilitate processing your information with our service providers, we will transfer your information to countries such as the United States. For transfers to countries without adequacy decisions, we implement appropriate safeguards, including Standard Contractual Clauses approved by the European Commission (2021/914/EU) and the UK International Data Transfer Addendum, supplemented by additional technical and organizational measures where necessary to ensure equivalent protection.”Open timeline citation
Latest stance: platform claims or reserves rights on privacy data use
“If you wish to exercise any of these rights, please contact us through the channels listed in this Notice. When you contact us, we reserve the right to request reasonable evidence to verify your identity before providing you with information. If we are unable to provide you with the requested information, we will explain the reason. Subject to applicable law, you have the right to lodge a complaint with your local data protection authority. If you are in the EU, you may lodge a complaint with the supervisory authority in the Member State of your residence, place of work, or place of alleged infringement of the GDPR. If you are in the UK, you may lodge a complaint with the Information Commissioner’s Office (ICO).”Open timeline citation
Latest stance: third party or vendor sharing on privacy data use
“To facilitate processing your information with our service providers, we will transfer your information to countries such as the United States. For transfers to countries without adequacy decisions, we implement appropriate safeguards, including Standard Contractual Clauses approved by the European Commission (2021/914/EU) and the UK International Data Transfer Addendum, supplemented by additional technical and organizational measures where necessary to ensure equivalent protection.”Open timeline citation
Latest stance: platform claims or reserves rights on privacy data use
“If you wish to exercise any of these rights, please contact us through the channels listed in this Notice. When you contact us, we reserve the right to request reasonable evidence to verify your identity before providing you with information. If we are unable to provide you with the requested information, we will explain the reason. Subject to applicable law, you have the right to lodge a complaint with your local data protection authority. If you are in the EU, you may lodge a complaint with the supervisory authority in the Member State of your residence, place of work, or place of alleged infringement of the GDPR. If you are in the UK, you may lodge a complaint with the Information Commissioner’s Office (ICO).”Open timeline citation
Capture recency
- Terms of Service:Last captured 2026-07-19· verified 2026-06-08verified once — no re-scan in 94 days
- Privacy Policy:Last captured 2026-08-12· verified 2026-08-12
Dates state when our pipeline captured and verified each document — not when the vendor last changed it. Documents are re-scanned on a recurring cadence; a document verified once says so until a re-scan confirms it again.
↓ 1 fewer findings this quarter vs last (114 vs 115). First scan: June 2026.
Compare and stack are saved in your browser. Open compare · View your stack. A correction triggers an automated re-read of Brandi AI's policies — no human edits the data.
Need this for procurement or legal diligence?
Free shows today's risk. A Stack Audit gives you a citable, verbatim-sourced PDF across your whole AI stack — and flags the moment a vendor's terms change.
Know where the missing document lives?
We haven't yet verified Brandi AI's Terms of Service. Point us at the official page and our pipeline will attempt to capture and read it in full. Submissions are candidates only — nothing is published until it passes the same verification gates as every other document on this site.
Every finding above is a verbatim quote from Brandi AI's own published policy, captured to an immutable snapshot and read in full through a two-gate verification pipeline. Confidence labels and any analysis are AI-generated and informational only — not legal advice.
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.