Security
Built so your AI can’t post without you.
ReBrandOS holds your brand content and access to your social accounts. Every action goes to the exact account you chose, with the least access needed, and stops if something can’t be confirmed.
Report a security concern
Email us about suspected vulnerabilities, unauthorized access or privacy concerns. Include the affected page or workspace. Don’t send passwords, access keys or personal data we don’t need.
Email security supportHow fast we respond depends on severity. We don’t publish a fixed response time.
Controls
How access and publishing are kept in check.
Approval before publishing
Your AI can draft and plan, but nothing is scheduled until you approve the exact plan you see. If the post or plan changes after you approve, it waits for you again.
You control what your AI can do
You choose what each AI connection can do: read your brand, create drafts, or schedule and manage. AI access keys last an hour. Disconnect one AI, or switch off all AI access at once, in your workspace settings.
Platform tokens stay on our servers
Social accounts connect through each platform’s own sign-in. Their access keys are encrypted on our servers and deleted when you disconnect.
Each brand kept separate
Members, roles and permissions decide who can reach each workspace, brand and connected account. If we can’t confirm the account you named, we stop. We never post to a different one.
No third-party trackers on this site
This website loads no advertising or tracking scripts. Our own optional analytics record which pages and buttons are used, and only after you allow them.
Retention and deletion
Operational and security logs are normally retained for up to 90 days. Verified deletion requests are completed within 30 days unless a legal or security obligation requires longer.
Incident handling
Security events are triaged, contained, investigated and recorded. Affected customers are notified when required by law or when action is needed.
Subprocessors
Services we use to run ReBrandOS.
- Hetzner for application hosting and infrastructure.
- Amazon Web Services for durable object storage where configured.
- SendGrid for transactional email.
- Sentry for application error monitoring where enabled.
- Stripe or Lemon Squeezy for subscription checkout and billing.
Your controls
Disconnect a social account here or on the platform itself, disconnect an AI, ask for a copy of your data or its deletion, and contact support if a sign-in, connection or post doesn’t look right.