Legal

BRBQ.AI Privacy Policy

Effective date: November 10, 2026

1. Who we are

BRBQ.AI is a brand operated by RDRA, LLC, a Delaware limited liability company ("BRBQ.AI," "we," "us"). We are a full-service managed marketing agency. Our team manages paid advertising (Google and Meta), optimization, creative, and performance reporting for businesses. People do the work, assisted by AI tools and internal software.

This policy covers our website, our services, and, when launched, our client dashboard at app.brbq.ai.

We play two roles:

For our own website, marketing, leads, and client relationships, we are the "business" (under US state laws) or the "controller." This policy explains how we handle that information.
For data inside a client's ad, analytics, and business accounts, we act on the client's behalf as a "service provider" or "processor." The client decides what happens with that data. We handle it only as the client instructs and as our agreement with them permits.

Contact: hello@brbq.ai. Postal address: 131 Continental Dr, Suite 305, Newark, DE 19713.

2. Information we collect

Website visitors. Pages viewed, links clicked, device and browser type, approximate location from IP address, referring page, and the date and time of your visit. See Section 9 on cookies.

Prospects and leads. When you fill out a form, request a call, book a meeting, call us, or text us, we collect your name, email, phone number, company, website, advertising budget and goals, and anything else you tell us. We do not currently record calls (see Section 8).

Clients and their staff. Contact and login details, job titles, billing and contract details, and communications with us. Payment card details are handled by our payment processor; we do not store full card numbers.

Data in client accounts we access on the client's behalf. Clients keep ownership of their accounts and grant us standard agency access. Depending on what the client connects, this can include:

Google Ads: campaigns, budgets, keywords, ads, audiences, conversions, spend, and performance.
Meta (Facebook and Instagram) ad accounts, pages, and pixels: campaigns, ad sets, ads, audiences, spend, and performance.
Google Analytics and Search Console: traffic, behavior, and search performance data.
Google Business Profile: business information, reviews, posts, and performance data.
Conversion and lead data the client sends to these platforms, which may include their customers' contact details.

We access only what is needed to provide the services the client requested.

3. How we use information

We use information to:

Provide, manage, and report on marketing services, including making changes in client accounts that the client has authorized.
Respond to inquiries, schedule meetings, and send proposals and contracts.
Run, secure, and support our website and, once launched, our client dashboard.
Bill clients and keep business records.
Communicate about services, updates, and, where permitted, our own marketing (see Section 8).
Analyze and improve our own website and services, using our own business data and not data from Google APIs (see Section 6).
Detect fraud and abuse, enforce our agreements, and comply with law.

4. Legal bases and purposes

Where the law asks us to state a basis for processing, we rely on: performing our contract with the client; our legitimate business interests (running and securing our business, and marketing to businesses); your consent (for example, marketing texts); and compliance with legal obligations. We process data in client accounts on the client's instructions.

5. How we share information

We do not sell personal information, and we do not share it for cross-context behavioral advertising. We share information only with categories of service providers that help us operate, and only as needed:

Hosting, database, and security providers.
Email delivery and telephony providers (email, calls, and text messages).
Scheduling and video meeting tools.
Payment processors and accounting providers.
Customer relationship management and project management tools.
AI service providers (see Section 7).
Professional advisers such as lawyers, accountants, and insurers.

We may also disclose information to comply with law or legal process, to protect rights, safety, and security, and in connection with a merger, financing, or sale of business assets. Service providers are bound by confidentiality and data-protection obligations and may use the information only to serve us.

We share client account data with the advertising platforms the client has connected, as needed to run their campaigns, and with the client.

6. Connected platforms

Clients link their own accounts to us. A client might link a Google Ads account to our manager account, add our business portfolio as a partner on their Meta assets, or add a BRBQ.AI user to Google Analytics, Search Console, and Business Profile. Our staff use internal software to read performance data and make changes the client authorized. The client keeps ownership of the accounts and can revoke our access at any time from the platform's settings or by contacting us. We never ask for your passwords. Access is granted through each platform's own user or partner permissions, and you can revoke it any time.

6.1 Google

BRBQ.AI's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In practice, for information we receive from Google APIs (including Google Ads, Google Analytics, Search Console, and Google Business Profile):

We use it only to provide or improve user-facing features for the client who connected that account.
We do not sell it.
We do not use it for advertising or to serve ads.
We do not use it to build cross-client benchmarks or aggregate products, and we do not use it to develop, improve, or train generalized AI or machine-learning models.
We do not transfer it to others except as needed to provide the feature the client requested, to comply with applicable law, or as part of a merger, acquisition, or sale of assets with notice.
Our people read it only to provide the service, for security purposes (for example, investigating abuse), to comply with law, or with the client's consent.

Where a client authorizes it, our staff create, edit, pause, enable, or remove campaigns, budgets, and ads in the Google Ads accounts the client selected. We make only the changes the client requested or approved, and we do not change accounts the client has not connected to us.

6.2 Meta (Facebook and Instagram)

We access Meta ad accounts, pages, and pixels only on the client's behalf, as a partner the client has added, and only to provide the services the client requested. Data from one client's Meta assets is kept separate from every other client's and is not combined across clients. We handle it in line with Meta's platform terms and policies. Clients can remove our access in their Meta business settings at any time.

7. AI tools

We use AI tools to help draft and analyze work, such as ad copy, reports, and summaries. A person reviews the work before it reaches a client. We use AI service providers whose terms do not allow them to train their general models on our data. We do not put data received from Google APIs into any tool or process that trains generalized AI or machine-learning models.

8. Marketing communications, calls, and texts

Email. We send marketing emails to business contacts where permitted by law. Every marketing email has an unsubscribe link, and you can also write to hello@brbq.ai. We honor email opt-outs within 10 business days. Service and billing emails may still be sent.

Text messages. We text you only with your consent, for example when you give us your number on a form that explains what you will receive. Message frequency varies. Message and data rates may apply. Reply STOP at any time to opt out and HELP for help. Consent to texts is not a condition of buying anything. We do not share mobile opt-in information or consent with third parties or affiliates for their marketing purposes.

Calls. We call you only as the law permits and honor do-not-call requests. Tell us on a call, or email hello@brbq.ai, and we will add you to our internal do-not-call list.

Call recording. We do not currently record calls. If that changes, we will announce it at the start of the call and get consent where the law requires it. We do not record without notice.

9. Cookies and analytics

Our website uses only essential cookies, for security and basic function. We do not currently run analytics tools or advertising pixels on it. Our pages load typefaces from a third-party font service, which receives your IP address and browser details to deliver them. You can control cookies in your browser. We honor the Global Privacy Control signal (see Section 11). Once launched, our client dashboard will use cookies needed to keep you signed in.

10. Retention

We keep personal information only as long as needed for the purposes in this policy:

Leads and prospects: 24 months after last contact.
Client account data: for the length of the engagement and 90 days afterward, then deleted. Copies in backups roll off within 30 days after that.
Invoices and tax records: 7 years.

We may keep information longer where the law requires it, or to resolve a dispute or enforce an agreement.

11. Your US state privacy rights

Depending on where you live (including California under the CCPA as amended by the CPRA, and states such as Colorado, Connecticut, Virginia, Texas, Utah, and Oregon), you may have the right to:

Know and access the personal information we collect, use, disclose, and keep about you.
Delete personal information we collected from you, with some exceptions.
Correct inaccurate personal information.
Opt out of sale or sharing of personal information, and of targeted advertising and certain profiling.
Limit the use of sensitive personal information (we do not use sensitive personal information beyond what is permitted without a right to limit).
Non-discrimination: we will not treat you differently for exercising your rights.

We do not sell personal information, and we do not share it for cross-context behavioral advertising.

How to make a request. Email hello@brbq.ai with the subject "Privacy request." We will verify your identity before acting, and answer within 45 days (we may extend once by 45 more days with notice). You may use an authorized agent, who must show your written permission. You may appeal a denial by replying to our response.

Global Privacy Control. We honor a browser's Global Privacy Control signal as a request to opt out of sale and sharing for that browser.

If your data is in a client's account. If you are a customer or lead of one of our clients, we hold your information on that client's behalf. Contact that client with your request; we will help them respond.

12. Security

We use industry-standard safeguards, including encryption in transit, access controls, and limiting account access to staff who need it. No system is perfectly secure, and we cannot guarantee absolute security. If we learn of a breach affecting your information, we will notify you and regulators as the law requires.

13. Children

Our website and services are for businesses and are not directed to children under 13, or to anyone under 16. We do not knowingly collect personal information from children. If you believe a child has given us information, email hello@brbq.ai and we will delete it.

14. Data processed outside the US

We are based in the United States. Our staff and service providers may access data from outside the United States, including from Israel. They do so under our access controls and confidentiality obligations. If you use our services from outside the US, your information will be processed in the US.

15. Changes to this policy

We may update this policy. We will post the new version with a new effective date, and tell clients by email (and, once launched, in the client dashboard) when changes are material. Using our services after the effective date means you accept the update.

16. Contact

RDRA, LLC, operating the BRBQ.AI brand
Email: hello@brbq.ai
Postal address: 131 Continental Dr, Suite 305, Newark, DE 19713