Privacy Policy
Brainlitt is a digital media AI automation agency based in Lahore, Pakistan, providing automated marketing services and the AI Receptionist for WhatsApp. This policy explains how we collect, use and protect information when you visit brainlitt.com or use our services.
Contact details when you submit the audit form — name, business, industry, WhatsApp number and what you want help with. WhatsApp messages you send our business number. For clients: access tokens for the Meta Business, Google Ads and other platform accounts you authorise, your logo and brand assets, and performance data from your ad accounts and pages — read solely to deliver the services you engaged.
Where a client connects its Instagram, Facebook or TikTok accounts: the public comments people leave on those accounts and, for Instagram and Facebook, the direct messages they send (the commenter's name or username and the text), which we read so we can answer on the client's behalf; and, for connected TikTok accounts, the account's profile data and access tokens. We also read the knowledge-base sources a client gives us — its website address, social media links and any text it writes for us — to answer its customers' questions.
For AI Receptionist workspaces: calls and chats to your business line are recorded, transcribed and summarized on your behalf. Your team sees customers through masked codes; real numbers are visible to the workspace owner only, and every reveal is logged.
We do not collect card details. The Free plan asks for no payment information, and Brainlitt never receives or stores your card number. Paid plans are paid at checkout on the hosted, encrypted page of our payment gateway partner, Rapid Gateway, and renewal invoices carry a secure link to that same page — card, bank or wallet details are entered only there, under Rapid Gateway's own privacy policy. We receive only the transaction reference, amount and status, and retain that billing history for your account.
To respond to enquiries, deliver the services you've engaged (campaign management, content, reporting, the receptionist), communicate about your account, and improve our operations. We never use your information for other purposes and never sell personal data, under any circumstances.
Only the providers required to deliver services, with the minimum necessary: Meta Platforms (publishing, advertising, messaging and calling on your behalf) and, where you connect them, Google Ads and TikTok for Business (advertising on your behalf through the ad accounts you authorise, and comments and video publishing on the TikTok accounts you connect); Google services (content storage, cloud hosting and operations data); Anthropic Claude and Google Gemini (AI analysis, content generation, comment replies and call summaries); kie.ai (AI image and video generation — your brand assets, product images and the prompts we write); imgbb (image hosting for the logos and product images used in generation); Apify (reading public web pages — your own social media profiles for your knowledge base, and competitor pages for market research); Brave Search (search queries about your market, with no personal data); Supabase (secure hosting of your account sign-in and client records); Rapid Gateway (payment processing for paid plans — the invoice reference and amount, plus whatever you enter on its hosted checkout page); ElevenLabs (AI voice for receptionist calls on workspaces that use it — the call audio); Resend (account emails such as sign-in, onboarding and password-reset messages — your email address); Netlify (hosting for this website and the client dashboard — standard web request data such as your IP address); and the hosted provider of our workflow automation (n8n). Each is subject to its own privacy policy. We share nothing else without your explicit consent, except where required by law.
Enquiry records are kept up to 24 months. For clients, operational records are retained for the engagement plus 12 months. Publish logs and delivery records are retained for the engagement plus 24 months for dispute and audit purposes (see the Dispute Policy). Comments and direct messages we read or answer for a client, and the replies we send, are kept for the engagement plus 12 months. You can request deletion of your information at any time.
You may access the information we hold about you, correct it, request deletion, withdraw consent, or ask us to stop processing it for specific purposes. Write to support@brainlitt.com — we respond within 30 days.
If you commented on, messaged or called a business that uses Brainlitt and want that data deleted, email support@brainlitt.com with the business's name, the platform (Instagram, Facebook, TikTok, WhatsApp or phone) and your username or number. We delete your comments, messages, call records and contact details from our systems within 30 days and confirm by email. Anything the platform itself keeps (for example a comment still showing on the business's page) is deleted from that platform's own settings or by the business.
Our services are not intended for individuals under 18, and we do not knowingly collect information from them. Anything collected inadvertently is deleted promptly.
This website uses minimal cookies necessary for functionality. We do not use third-party advertising trackers or analytics that profile individual users. If that changes, this policy will be updated with notice.
When this policy changes, the “last updated” date changes with it, and significant changes are communicated to clients directly by email or WhatsApp.