← Back to Home

Privacy Policy

Last Updated: May 2026  ·  Effective Date: May 2026

Bare Branding Systems ("Autom8ig," "we," "us," or "our") operates the Autom8 social media automation platform available at www.autom8ig.io (the "Platform") and the Autom8 Business Diagnostic Tool available at diagnostic.autom8ig.io (the "Diagnostic Tool"). This Privacy Policy applies to both products and all subdomains, tools, features, and services operating under the autom8ig.io domain.

This Privacy Policy describes what personal information we collect, why we collect it, how we use and share it, how long we keep it, and what rights you have over it. It applies to every visitor, user, lead, and subscriber who interacts with any Autom8ig product, regardless of whether you are a paying customer.

By using the Platform or the Diagnostic Tool, you acknowledge you have read and understood this Privacy Policy. If you do not agree with any part of this policy, please do not use our products.

This policy is designed to comply with applicable United States federal and state privacy laws, including CCPA/CPRA, CDPA, CPA, CTDPA, UCPA, TDPSA, MCDPA, OCPA, DPDPA, NHPA, NJDPA, ICDPA, NDPA, INCDPA, TIPA, MCDPA, MODPA, the FTC Act, the CAN-SPAM Act, and COPPA.

Section 1. Scope of This Policy

This Privacy Policy applies to:

  • (a)The Autom8ig website at www.autom8ig.io and all pages hosted on that domain.
  • (b)The Autom8 social media automation platform and all features within it, including account creation, OAuth integrations, content scheduling, automated posting, analytics dashboards, and any subscription or billing flows.
  • (c)The Autom8 Business Diagnostic Tool at diagnostic.autom8ig.io/scan and all related pages and features.
  • (d)All subdomains of autom8ig.io, including any future tools, features, or microsites hosted under that domain.
  • (e)Any email communications sent by Autom8ig to users or leads, including marketing emails, onboarding sequences, follow-up communications, and transactional notifications.

This policy does not apply to third-party websites, platforms, or services that we link to or integrate with.

Section 2. Information We Collect

We collect personal information in three ways: information you provide voluntarily, information collected automatically, and information obtained from third-party platforms you connect to your account.

2.01 — Autom8 Platform

When you create an account or use the Platform, we may collect: identity information (name, username), contact information (email), business information (business name, industry), billing and payment information (processed through third-party processors — we do not store full card numbers), OAuth credentials for connected social media accounts, user-generated content, and support communications.

We do not store your social media passwords.

2.02 — Business Diagnostic Tool

When you use the Diagnostic Tool, we collect: contact information (name, email, business name), business profile information (industry, size, marketing practices, technology stack, goals), website URL information if you submit one for scanning, and all diagnostic responses you provide.

By submitting the diagnostic form, you consent to the collection and use of this information including for sales follow-up and outreach.

2.03 — Collected Automatically

When you visit our website or use our products, we automatically collect: device and browser information, usage data (pages visited, features used, session duration), cookie and tracking data, log data, and approximate geolocation derived from your IP address. We do not collect precise GPS-level geolocation without your explicit consent.

2.04 — From Third-Party Social Platforms

When you connect a social media account via OAuth, we may access (with your permission): profile information, account content, performance and analytics data, and scheduling/publishing permissions as granted. You may revoke these permissions at any time through your connected platform settings or through your Autom8 account.

2.05 — CCPA Categories

We collect: Identifiers, Personal information (CA Civil Code §1798.80), Internet/electronic network activity, Professional/employment-related information, Geolocation (approximate, IP-derived), and Inferences drawn from diagnostic tool data.

We do not collect sensitive personal information as defined under CPRA (Social Security numbers, precise geolocation, racial/ethnic origin, religious beliefs, health information, or biometric identifiers).

Section 3. How We Use Your Information

We use the information we collect for: service delivery, content automation, diagnostic analysis and report generation, sales qualification and outreach, marketing communications, product improvement, analytics and reporting, security and fraud prevention, legal compliance, and communications.

If you submit the diagnostic form, you consent to being contacted by Autom8ig via email, and potentially by phone or other channels if you provide that information, regarding your diagnostic results and relevant product offerings.

We do not sell your personal information. We do not use your personal information to train publicly available AI models without your explicit authorization.

Section 4. AI and Automated Processing

4.01 Platform: The Autom8 Platform uses AI to assist in drafting social media content based on your brand settings. AI-generated content is a suggestion only — you are responsible for reviewing and approving all content before publishing.

4.02 Diagnostic Tool: The Diagnostic Tool uses automated analysis and AI to process your diagnostic responses and generate a business diagnostic report. If you believe the automated analysis produced an inaccurate assessment, you have the right to contact us and request a human review. See Section 9 for how to submit such a request.

4.03 Subprocessors: Your data may be processed by trusted third-party subprocessors who provide infrastructure, AI, analytics, and operational services. We require all subprocessors to maintain appropriate data security practices and process your data only for specified purposes.

Section 5. How We Share Your Information

We share personal information only in the following circumstances: (a) service providers and subprocessors, (b) CRM and marketing automation systems (when you submit the Diagnostic Tool), (c) analytics and advertising platforms (Google Analytics, Meta Pixel, LinkedIn Insight Tag, TikTok Pixel — this may constitute sharing for cross-context behavioral advertising under applicable law), (d) business transfers, (e) legal requirements, and (f) with your consent.

We do not sell personal information. We do not rent personal information. We do not share personal information with unaffiliated third parties for their own independent marketing purposes without your explicit consent.

Section 6. Cookies and Tracking Technologies

We use: (a) strictly necessary cookies (authentication, session management, security), (b) functional cookies (preferences, login state), (c) analytics cookies (Google Analytics), and (d) advertising and targeting cookies (Meta Pixel, LinkedIn Insight Tag, TikTok Pixel — which may constitute sharing for cross-context behavioral advertising under CCPA/CPRA).

You may control cookies through your browser settings. You may also opt out of targeted advertising through: the Digital Advertising Alliance (optout.aboutads.info), Network Advertising Initiative (optout.networkadvertising.org), Google Analytics opt-out add-on, Meta ad preferences, or LinkedIn ad settings.

Global Privacy Control: We honor the GPC browser signal as an opt-out of the sale and sharing of personal information for California residents, as required under CPRA.

Section 7. Data Retention

We retain personal information as follows:

  • (a)Active account data: retained for the duration of your account and up to 12 months following account deletion.
  • (b)Billing and transaction records: retained for 7 years for accounting, tax, and legal compliance.
  • (c)Diagnostic Tool submissions (non-customers): retained for a maximum of 12 months from submission date.
  • (d)Diagnostic Tool data (customers): subject to the active account retention standard.
  • (e)Website scan data: retained for the same period as your diagnostic submission.
  • (f)Marketing contact records: retained until you unsubscribe, removed within 10 business days.

You may request deletion of your personal information at any time as described in Section 9.

Section 8. Data Security

We implement reasonable administrative, technical, and physical safeguards including: encryption of data in transit, secure cloud infrastructure with access controls and audit logging, role-based access controls, OAuth-based authentication, and regular security monitoring.

No method of transmission or storage is completely secure. In the event of a data breach affecting your personal information, we will notify you as required by applicable law.

Section 9. Your Privacy Rights

We do not discriminate against you for exercising any of these rights.

9.01 — All Users

Regardless of your state of residence, you have the right to: (a) Access your personal information, (b) Correction of inaccurate information, (c) Deletion of your personal information, (d) Opt out of marketing at any time via unsubscribe links, and (e) Human review of any automated diagnostic assessment you believe is inaccurate.

9.02 — California Residents (CCPA/CPRA)

California residents have additional rights including: Right to Know (up to twice per 12-month period), Right to Delete, Right to Correct, Right to Opt Out of Sale and Sharing (our use of advertising pixels may constitute sharing under CPRA — click "Do Not Sell or Share My Personal Information" at the bottom of our website or contact us), Right to Limit Use of Sensitive Personal Information (not applicable as we do not collect sensitive PI), and Right to Non-Discrimination.

We will respond to verified requests within 45 days (with a possible additional 45-day extension with notice).

9.03 — Other State Residents

Residents of Virginia, Colorado, Connecticut, Utah, Texas, Montana, Oregon, Delaware, New Hampshire, New Jersey, Iowa, Nebraska, Indiana, Tennessee, Minnesota, and Maryland have rights under their applicable state privacy laws including access, correction, deletion, portability, opt-out of targeted advertising/sale/profiling, and the right to appeal our decisions. We honor these rights regardless of specific business-size thresholds.

9.04 — Opt Out of Cross-Context Behavioral Advertising

To opt out: (a) Contact us at hello@barebranding.site with subject line "Opt Out of Sharing," (b) Enable Global Privacy Control in your browser, or (c) Use the opt-out tools listed in Section 6.

Section 10. Email Communications and CAN-SPAM Compliance

We send transactional emails (account confirmations, billing notifications — not subject to opt-out) and commercial/marketing emails (promotional offers, product updates, diagnostic follow-ups — subject to CAN-SPAM requirements).

In compliance with the CAN-SPAM Act: every commercial email identifies the sender, includes an accurate subject line, includes a physical mailing address for Bare Branding Systems, and includes an unsubscribe mechanism. We process opt-out requests within 10 business days.

If you submit the Business Diagnostic Tool, you will receive email communications about your results and Autom8 products. You may opt out at any time using the unsubscribe link.

Section 11. Children's Privacy — COPPA Compliance

The Autom8 Platform and the Business Diagnostic Tool are not intended for use by individuals under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have inadvertently collected such information, we will delete it promptly.

If you are a parent or guardian and believe your child under 13 has submitted personal information to us, contact us at hello@barebranding.site.

Section 12. International Data Transfers

Autom8ig is based in the United States. If you access our products from outside the United States, your personal information will be transferred to and processed in the United States, where privacy laws may differ from those in your country.

For users in the EEA, UK, or Switzerland, transfers are made pursuant to appropriate safeguards including standard contractual clauses approved by the European Commission.

Section 13. Third-Party Services and Links

Our website and products may contain links to third-party websites and services. We are not responsible for the privacy practices or content of any third-party service. Social media platforms you connect via OAuth are governed by their own terms and privacy policies.

Section 14. Account Disconnection and Data Deletion

14.01 Disconnecting Social Media: You may disconnect any social media account at any time through your account settings. We will revoke the OAuth access token and cease accessing that account's data.

14.02 Account Deletion: Request deletion of your Autom8 account by contacting hello@barebranding.site.

14.03 Diagnostic Submissions: To delete a diagnostic submission, contact hello@barebranding.site with subject line "Delete Diagnostic Submission" and the email you used. We will process your request within 30 days.

Section 15. Do Not Sell or Share My Personal Information

We do not sell your personal information. However, our use of certain tracking and advertising technologies (Meta Pixel, LinkedIn Insight Tag, TikTok Pixel) may constitute sharing for cross-context behavioral advertising under CPRA and similar state laws.

To opt out: (a) Contact hello@barebranding.site with subject line "Do Not Sell or Share My Personal Information," (b) Enable Global Privacy Control in your browser, or (c) Use the advertising opt-out tools in Section 6. We will process your request within 15 business days.

Section 16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the Last Updated date and, where appropriate, notify you by email or prominent notice on our website. Your continued use of our products after a policy update constitutes your acceptance.

Section 17. Contact Information

For questions, to exercise privacy rights, or for any privacy-related inquiry:

Bare Branding Systems / Autom8ig.io

Email: hello@barebranding.site

Subject line for privacy requests: "Privacy Request"

We will respond to all verified privacy requests within the timeframes required by applicable law, and in no event later than 45 days from receipt of a verified request.

California residents unsatisfied with our response may contact the California Privacy Protection Agency at cppa.ca.gov.

Appendix A. Summary of Rights by State

StateLawAccessCorrectDeletePortabilityOpt Out AdsOpt Out SaleAppeal
CaliforniaCCPA/CPRA
VirginiaCDPA
ColoradoCPA
ConnecticutCTDPA
UtahUCPA
TexasTDPSA
MontanaMCDPA
OregonOCPA
DelawareDPDPA
New HampshireNHPA
New JerseyNJDPA
IowaICDPA
NebraskaNDPA
IndianaINCDPA
TennesseeTIPA
MinnesotaMCDPA
MarylandMODPA

Appendix B. Categories of Personal Information — CCPA/CPRA Disclosure

CategoryCollectedBusiness PurposeShared With
IdentifiersYesService delivery, communications, securityCloud providers, CRM, analytics
Payment informationYesTransaction processingPayment processors
Internet activityYesProduct improvement, analytics, securityAnalytics providers
Professional informationYesDiagnostic analysis, sales qualificationCRM, sales tools
Geolocation (approx.)YesAnalytics, fraud preventionAnalytics providers
InferencesYesSales qualification, product recommendationsCRM, sales team
Sensitive personal infoNoN/AN/A