Privacy Policy

BIU (Boast It Up, “BIU”, “we”, “us”) operates https://www.boastitup.com and related brand-intelligence services. This policy covers our website, scans, accounts, and information received through connected Google and Meta services.

For questions, complaints, or privacy requests, email privacy@boastitup.com. You can also reach our team at sk@agrusglobal.com.

Information you provide: name, work email, company, website domain, submitted brand materials, and the contents of scan requests, demo requests, and support messages.

Website activity: pages and referring URLs, browser and device information, IP addresses and approximate location, and interactions such as scroll depth, time on a page, and clicks. Server logs and analytics help operate, secure, and understand use of the site.

Public brand signals: publicly available pages, listings, reviews, social content, and AI-answer references related to brands you ask us to analyze.

Connecting a provider account is optional. The permissions shown during authorization determine the information BIU can access and the actions it can take. A connection does not grant access to every product offered by that provider. Declining or revoking a permission may prevent the associated BIU feature from working.

Connection information can include provider account identifiers, the business assets you select, granted permissions, access tokens, and refresh tokens where provided. Tokens allow the authorized integration to operate; they are not your Google or Meta password. Do not send passwords or tokens in support requests.

Google Sign-In: basic identity information authorized by you, such as your Google account identifier, name, email address, and profile image, is used to authenticate you and associate your BIU account with your Google account.

Search Console: when you connect a property, BIU may access the sites you can manage and search-performance information made available by the permissions you grant, such as queries, pages, clicks, impressions, click-through rate, and average position. This supports search-visibility reporting and identifies opportunities to improve your brand’s discoverability.

BIU uses YouTube API Services for YouTube features. Depending on the feature and authorization, data may include channel identifiers and details, video titles and descriptions, public engagement statistics, and authorized channel information. BIU uses this information to display channel and content information and support brand-visibility monitoring. Write actions require the relevant permission and your approval.

BIU’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is used for the user-facing features described here and in the app’s authorization flow.

Google user data is not sold, transferred to data brokers, or used for advertising, retargeting, creditworthiness, or lending. Transfers are limited to providing or improving the authorized user-facing feature with your consent, security, applicable law, or a business transaction with your explicit prior consent where the policy requires it.

Human access to Google user data is limited to your affirmative agreement to view specific data, security needs, legal obligations, or aggregated internal operations permitted by Google’s policy. These restrictions also apply to data derived from Google user data.

Facebook Login for Business can allow BIU to identify your authorized business connection and the Pages, Instagram professional accounts, or advertising assets you choose to connect. The actual information available depends on the approved permissions and the assets you authorize.

Instagram features may use professional-account details, media and captions, comments, mentions, hashtags, and insights to show brand activity and performance. If you enable a messaging feature and grant the required access, message content and associated sender information are used to provide that feature. Publishing, replying, or managing content requires the corresponding permission and your approval.

Marketing API features may access authorized business and ad-account identifiers, campaign, ad-set and ad information, and performance metrics such as spend, impressions, clicks, and conversions to provide advertising reporting or management that you request. Meta advertising data is handled separately from Google user data; connecting both providers does not authorize using Google user data for advertising.

To provide requested scans, dashboards, reports, connected-account features, and suggested fixes; authenticate accounts; and respond to requests for support and demos.

To communicate about your requests and service changes, maintain security, prevent abuse, comply with law, and enforce our Terms. You can opt out of non-essential marketing emails. Connected-account data is subject to the additional provider restrictions above.

Where applicable, processing relies on providing the service you request, your consent for optional connections or features, legitimate interests in operating and securing the service, or legal obligations. You may withdraw consent for optional processing, without affecting processing already lawfully carried out.

BIU uses AI-assisted analysis and drafting for brand-intelligence features. AI output may be incomplete or incorrect and should be reviewed before use.

Connecting a Google or Meta account does not itself authorize general-purpose AI model training. Such training is outside the purposes described in this policy. Any feature that sends connected-account information to an AI provider requires a clear disclosure of the data, recipient, and purpose before use, together with any consent required by the platform’s rules. Google Limited Use and Meta data restrictions continue to apply.

We do not sell personal information. Information may be processed by providers supporting hosting, storage, communications, analytics, customer support, or an AI feature you choose to use, limited to what is needed for that purpose and subject to applicable provider restrictions. Website analytics is separate from data obtained through connected-account APIs.

Information may also be shared with people you authorize in your workspace, to comply with law, or in connection with a business transaction, subject to the additional consent and transfer restrictions for Google and Meta data. Private customer information is not published as brand content without your approval.

Our providers may process information in countries other than where you live. Applicable data-protection requirements and safeguards govern those transfers.

Account, contact, and support information is kept only as long as needed to provide the service, handle your request, or meet a legal obligation. Connected-account data and tokens are retained only while needed for the authorized feature, subject to provider limits. You can request deletion of one integration’s data or your entire BIU account.

For YouTube API data, deletion requests and account deletion require removal as soon as possible and within 7 calendar days. Revocation through Google security settings requires deletion of the associated authorized YouTube data as soon as possible and within 30 calendar days. Stored YouTube data must also be refreshed or deleted as required by YouTube’s retention rules.

Limited records may need to be retained for legal obligations, fraud prevention, or resolving disputes. Any exception must be consistent with applicable platform rules; it does not permit indefinite retention of connected-account data. We explain applicable exceptions when handling a deletion request.

We use reasonable technical and organizational measures intended to protect information from unauthorized access, loss, or misuse. Access to information is limited to the purposes described in this policy. No method of transmission or storage is perfectly secure.

Depending on where you live, you may have rights to access, correct, delete, or export information, restrict or object to processing, or withdraw consent. Email privacy@boastitup.com to make a request. We may need to verify your identity or authority to act for a business. You may also have a right to complain to your local supervisory authority.

You can revoke Google access from your Google account connections or security settings and Meta access from the applicable account’s app or business-integration settings. Revocation stops future authorized access but does not always erase data already stored by BIU. Use our deletion instructions to request erasure; provider-specific deletion duties still apply.

The website stores your light/dark theme preference in browser local storage under biu-theme. When Google Analytics is configured, it uses cookies and similar technologies to measure website visits and interactions. Browser settings let you block or clear cookies and local storage; this can reset preferences or affect features.

If a feature displays third-party content such as a YouTube player, that provider may receive device or usage information and use its own cookies under its privacy policy. A provider account connection and website analytics serve different purposes.

BIU is intended for business users and is not directed to children under 13. If you believe a child has provided personal information to BIU, contact our privacy team so we can investigate and address it.

We may update this policy and will change the date above when we do. Material changes will be communicated as required. If a new use of connected-account data requires additional disclosure or consent, we provide that disclosure and obtain the required consent before the new use begins.