Privacy

Privacy Policy

This policy explains how brandto.social handles personal data when you visit the website, contact us, view embedded media, or purchase founder access. It is written for the current site experience and the early-access commercial flow now available on the site.

Last updated: March 20, 2026
Contact: info@experclaw.xyz

1. Who we are

brandto.social operates this website and is responsible for the personal data processed through it. If you have questions about this policy or want to exercise your privacy rights, contact info@experclaw.xyz.

This policy applies to the public marketing website, direct email contact with our team, embedded video content, and the founder-access checkout flow linked from the site.

2. What we collect

Depending on how you interact with the site, we may process:

  • Technical and usage data such as IP address, browser type, device data, referring pages, and basic server logs.
  • Communication data you provide when you email us, including your name, email address, company details, and the content of your message.
  • Transaction and onboarding data related to founder-access purchases, such as payment status, billing contact details, and operational follow-up information.
  • Third-party interaction data generated when you open the Vimeo demo or continue to Stripe checkout.
  • Marketing analytics and behavioral data collected through PostHog when you consent, including pageviews, CTA clicks, navigation usage, and session replay data.

We do not intentionally collect full payment card numbers on this website. Payment details are handled by Stripe through its own checkout environment.

3. How we use personal data

  • To operate, secure, and improve the website.
  • To respond to enquiries and provide founder-access onboarding.
  • To process payments, confirm purchases, and maintain transaction records.
  • To prevent misuse, fraud, and technical abuse.
  • To comply with legal, accounting, and tax obligations.
  • To understand visitor behavior, improve conversion paths, and optimize site performance and messaging.

4. Legal bases for processing

Where the GDPR or similar laws apply, we rely on one or more of the following legal bases:

  • Performance of a contract or steps taken at your request before entering a contract, including founder-access purchases and onboarding.
  • Legitimate interests, such as operating the site, securing systems, replying to business enquiries, and improving our offering.
  • Compliance with legal obligations, including accounting, tax, and regulatory recordkeeping.
  • Consent for optional analytics and session replay where required.

5. Third parties and data sharing

We share personal data only when needed to run the service or comply with the law.

  • Payment providers, including Stripe, to process founder-access purchases.
  • Embedded media providers, including Vimeo, when you load or play hosted video content.
  • PostHog, to provide website analytics, click tracking, and session replay.
  • Hosting, infrastructure, email, collaboration, or security providers that support the website and operations.
  • Professional advisers, regulators, or authorities when disclosure is legally required or reasonably necessary to protect rights and safety.

We do not sell personal data in the ordinary meaning of that term.

6. International transfers

Some service providers may process data outside your country. When that happens, we rely on lawful transfer mechanisms and appropriate safeguards where required, such as contractual protections or transfers to jurisdictions recognized as providing adequate protection.

7. Retention

  • Enquiry emails and contact records are kept for as long as needed to respond, follow up, and maintain a reasonable business history.
  • Transaction and billing records are kept for the period required by tax, accounting, and legal obligations.
  • Technical logs are retained for security, troubleshooting, and abuse-prevention purposes for a limited period unless a longer retention period is required for an incident.

8. Your rights

Subject to local law, you may have the right to request access to your personal data, correction of inaccurate data, deletion, restriction of processing, objection to certain processing, and data portability. Where consent is the legal basis, you may withdraw it at any time for future processing.

You may also have the right to lodge a complaint with your local data protection authority. We encourage you to contact us first at info@experclaw.xyz so we can try to resolve the issue directly.

9. Cookies and third-party technologies

The current site uses analytics technology, including PostHog, to measure pageviews, navigation behavior, button clicks, and session replays only after you accept analytics cookies through the consent banner. We also use essential technical measures needed to deliver pages and secure the service. When you interact with embedded Vimeo content or continue to Stripe checkout, those providers may use their own cookies or similar technologies under their own policies.

Analytics and replay data are used to improve site performance, messaging, and conversion paths. You can reject analytics cookies or change your choice later through the Cookie Settings link in the footer. If our analytics, advertising, or disclosure practices change, we will update this policy accordingly.

10. Children

This website and the related founder-access offering are intended for businesses and adults. We do not knowingly collect personal data from children.

11. Changes to this policy

We may update this Privacy Policy to reflect changes to the website, the product, our providers, or legal requirements. The updated version will appear on this page with a revised effective date.