Privacy policy
Last updated 26 September 2026
BrandThink operates Comment Intelligence at https://orm.thebrandthink.com. It reads the comments on social posts through each platform's official API and reports their sentiment and themes. This policy explains what we collect, why, who else handles it, how long we keep it, and how to have it deleted.
What we collect
- Your account: your name, email address, a one-way hash of your password (never the password itself), and when you sign in.
- Accounts you connect: when you connect Instagram, Facebook, Threads, LinkedIn, YouTube, Reddit or X, the platform gives us an access token, your account's id and name, and the list of permissions you granted. You sign in on the platform's own page; we never see your password there.
- Content we fetch for you: posts and comments on the accounts you connect, and public comments on posts whose links you paste (for example YouTube and Reddit). This includes commenters' usernames and what they wrote.
- Files you upload for analysis, such as comment exports.
We do not scrape any platform, and we do not collect content that a platform's API does not return to us.
How we use it
Only to fetch, analyse and show you the results you ask for: sentiment, emotion, themes, and how they change over time. We do not sell data, show advertising, build profiles of commenters, or use your data or anyone's comments to train AI models.
Who else handles it
The analysis is done by AI services that read the text and return a label. They receive only what the analysis needs, and only when you run one.
| Service | Location | What it does |
|---|---|---|
| AI analysis services | China | read comment text to produce the sentiment analysis |
| News search service | United States | runs the news searches you ask for; it receives the search terms only |
| Cloud database | cloud | keeps a backup copy of your analysis history |
Everything else is stored on our own server in India.
How long we keep it
- Fetched comments: 365 days, then deleted automatically.
- Analysis history (summaries, themes and up to ten sample comments per analysis): 180 days, then deleted automatically.
- Access tokens: until you disconnect the account, the platform revokes access, or the token expires.
- Your account: until you ask us to delete it.
How we protect it
All traffic is encrypted with HTTPS. Access tokens are encrypted before they are stored. Passwords are stored only as salted scrypt hashes. Each account can see only its own connections and analyses; our administrators access data only to operate and support the service.
Your rights
Under India's Digital Personal Data Protection Act 2023 and, for people in the EU, the GDPR, you can ask to access, correct or erase your personal data, withdraw consent, and raise a grievance. You can:
- Disconnect an account at any time from the Connect panel. Its token is destroyed immediately.
- Remove the app from your Facebook or Instagram settings and send Meta's deletion request. Meta then tells us, and we delete what we hold for that account. See Data deletion.
- Write to privacy@thebrandthink.com for an export, a correction, erasure of your account, or any other request. We reply within 30 days.
If you are a commenter whose words appear in an analysis and you want them removed, write to the same address with a link to the comment.
Google and YouTube data
Comment Intelligence uses YouTube API Services. By connecting a YouTube channel you also agree to the YouTube Terms of Service, and Google's handling of your data is described in the Google Privacy Policy. You can revoke our access at any time from your Google security settings.
Comment Intelligence's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Meta data
Data from Facebook, Instagram and Threads is used only to show the owner of the connected account their own analysis, as Meta's Platform Terms require.
Children
This service is for businesses and creators and is not meant for anyone under 18.
Changes
If this policy changes, the date at the top changes. Material changes apply only after that date.
Contact and grievances
BrandThink, privacy and grievance contact: privacy@thebrandthink.com.