Privacy Policy

01Who we are

BrandMultiplier (“b*”, “we”, “us”) is a brand of ChrisRubinCreativ, Inc., a Colorado corporation. We install Narrative Operating Systems for founder-led B2B companies.

ChrisRubinCreativ, Inc. is the controller of the personal information described in this policy. Our registered mailing address is 1500 N Grant St, Ste N, Denver, CO 80203, USA.

This policy covers brandmultiplier.ai, every gated page and lead-magnet download we operate, our email programs, our outbound and social outreach, and the personal information we handle while delivering Narrative Operating System (“NOS”) engagements. It does not cover third-party sites we link to, or platforms you reach us on that run under their own policies, such as LinkedIn.

Where a signed services agreement, statement of work, or data processing addendum exists between us and your company, that agreement governs the personal information we process on your company’s behalf. This policy fills the gaps; it does not override the contract.

02The short version

The rest of this document is the detail behind those six lines. If a section contradicts the summary, the section wins.

03What we collect

We collect four kinds of information, and the amount depends entirely on how far into a relationship with us you are. A visitor who reads one page leaves almost nothing behind. A client mid-engagement necessarily leaves a great deal more.

Information you give us directly

• Gated resources and lead magnets. Name, business email, phone number, and, on some forms, company name, role, company size, or revenue band. Some diagnostic tools also capture the answers you enter, because the answers are what generate your result.
• Phone numbers. Where a form asks for a phone number, providing it is optional and is never a condition of receiving the resource. If you provide one, a member of our team may call you about what you requested and whether there is a fit between your business and ours. We record the form, the timestamp, the URL, and the exact consent wording you saw, so we can show why we called.
• Newsletter and content subscriptions. Email address and any preferences you set.
• Booking a call. Name, email, company, phone where you provide it, plus whatever you type into the intake questions on the scheduling form.
• Direct correspondence. Anything you send us by email, LinkedIn message, or contact form, including the content of the message itself.
• Client onboarding. Contact details for you and the stakeholders you nominate, billing contact information, and the business context needed to run the engagement.

Information we collect automatically

• Device and connection data. IP address, browser type and version, operating system, device type, screen dimensions, and language settings.
• Usage data. Pages viewed, time on page, scroll depth, referring URL, exit pages, and which links and buttons you clicked.
• Email engagement. Whether a message was opened, which links were clicked, and delivery status. Standard for every email platform, and you can defeat it by blocking remote images in your mail client.
• Visitor identification. We use a service called RB2B that attempts to identify individual visitors to our site — not just the company, but the person — by matching browsing signals against commercial professional-data networks. Where it succeeds, we may receive your name, job title, employer, and professional background without you having filled in anything. We would rather tell you that plainly than describe it as “analytics.” It operates on US visitors only. Section 6 explains how to switch it off, and we honor a browser-level Global Privacy Control signal as an instruction to do so.

Information we collect from third parties

• Business contact databases and enrichment providers. For outbound prospecting we use commercial B2B data providers that supply name, title, company, business email, business phone, and public professional history. If we contacted you cold, this is where your details came from, and you can ask us to tell you which provider and to delete the record.
• Public professional profiles. Publicly visible LinkedIn and company-website information about prospects, clients, and the executives we research as part of narrative work.
• Referral sources. Where a partner or existing client introduces you, we receive whatever context they include in the introduction.

Engagement content

During an NOS engagement we receive and generate substantive material: interview and workshop recordings, transcripts, internal documents you share, customer research, positioning artifacts, and the deliverables we build from them. This material frequently contains personal information about your employees, executives, and customers. Section 10 governs it.

04How we use it

We do not use your personal information for any purpose materially different from the ones above without telling you first.

05Legal bases for processing

If you are in the United Kingdom, the European Economic Area, or Switzerland, the UK GDPR and EU GDPR require us to name a lawful basis for each processing activity. Ours are:

• Consent — marketing email to individuals in jurisdictions that require opt-in, non-essential cookies and tracking technologies, and recording of calls. You may withdraw consent at any time, which does not affect processing already carried out.
• Contract — delivering an engagement, providing a resource you requested, and administering billing.
• Legitimate interests — B2B outreach to business contacts in a professional capacity, site security, service improvement, and aggregate analytics. We have weighed these interests against your rights and freedoms; you can object at any time under Section 16 and we will stop unless we have compelling grounds not to.
• Legal obligation — tax, accounting, and lawful requests from authorities.

06Cookies and tracking

Cookies are small files a site stores in your browser. We use them, along with pixels and similar technologies, in six categories.

Your controls

• Global Privacy Control. If your browser or extension transmits a GPC signal, we treat it as a valid opt-out of analytics, advertising, session-recording, and visitor-identification technologies for that browser, and we process the signal server-side. This is the fastest way to switch all of it off, and it works across every site that honors it, not just ours.
• Email us. Write to support@brandmultiplier.ai and ask to be excluded from visitor identification. We will suppress it against your details.
• Browser settings. Every major browser lets you block or delete cookies. Blocking strictly necessary cookies will break parts of the site.
• Advertising platforms. Meta and LinkedIn each provide ad-preference controls inside your account on those platforms, independent of anything we do.

We do not build profiles of your activity across unrelated websites ourselves. The technologies named above — RB2B and LiveConnect in particular — draw on third-party identity networks that do operate across sites. That is exactly why we list them individually rather than folding them into “analytics,” and why we tell you how to switch each one off.

We do not currently operate a cookie consent banner. Our advertising and visitor-identification technologies are configured for US visitors, and we honor Global Privacy Control signals server-side rather than asking you to negotiate with a pop-up. If you are in the UK or EEA and would prefer none of this ran at all, tell us at support@brandmultiplier.ai and we will suppress it.

07Email and phone

Email

When you download a resource, subscribe, or otherwise give us your email address, you should expect to hear from us. Specifically:

• A delivery email containing what you requested.
• A short follow-up sequence related to that resource.
• Our ongoing newsletter, if you subscribed or if the form told you that downloading subscribes you. Where consent is required, the form asks for it separately rather than burying it.

Every marketing email carries a working unsubscribe link and our physical mailing address, as US law requires. Unsubscribing removes you from all marketing sequences within ten business days and usually within minutes. It does not stop transactional messages tied to an active engagement, such as invoices or scheduling confirmations.

Phone calls

If you do give us a number, this is the whole of what happens to it.

• A person dials it. Our system scores engagement across the resources you download and the content you interact with. When that score suggests real interest, the record surfaces to a member of our team, who calls you individually to see whether a conversation with our founder is worth your time. That is the entire mechanism.
• No automated calling of any kind. We do not use autodialers, predictive dialers, prerecorded or artificial voice messages, ringless voicemail drops, or AI voice agents to contact you. Every call is placed manually by a human being who knows your name.
• No marketing text messages. We do not send marketing SMS. If we ever start, we will ask for your separate, explicit consent first, and giving us a number today will not be treated as agreement to that.
• Why we are calling. Calls follow from your own request for a resource. We are contacting you in a business capacity, at a business, about the business problem the resource addressed.
• Stopping it. Say so on the call, or email support@brandmultiplier.ai. We honor the request made by any reasonable means, through any channel, and we process it within ten business days — in practice, immediately. You do not have to give a reason, and we will not call to ask why.
• Do Not Call. We maintain an internal Do Not Call list and honor it indefinitely. Ask to be added and you stay on it, permanently, even if you later download something else.
• Transactional contact is separate. A call or text tied to a meeting you actually booked — a confirmation, a “running five minutes late” — is not marketing and continues unless you ask us to stop those too.

We do not sell, rent, or share phone numbers with third parties for their own marketing, and we do not pass them to lead buyers or affiliates. Phone numbers are used by BrandMultiplier, and only by BrandMultiplier.

Cold outreach

We send business-to-business outreach to professional contacts at companies matching our ideal client profile, using contact data from the sources named in Section 3. Reply with “remove” or write to support@brandmultiplier.ai and we will suppress your address permanently and delete the underlying record on request.

08Recorded sessions

Discovery calls, Rumble sessions, extraction interviews, and workshops are frequently recorded and transcribed. Recording is how narrative extraction works: the exact language a founder uses is the raw material, and reconstructing it from memory produces a worse result.

• We ask first. You will be told at the start of any recorded session, and consent is requested before recording begins. Several US states and most of Europe require the consent of every participant, and we operate to that standard everywhere rather than tracking which rule applies to which participant.
• You can decline. If any participant objects, we do not record. We take notes instead.
• Where they go. Recordings and transcripts are processed by our meeting-capture vendors (Section 11) and stored in our access-controlled cloud storage.
• What they are used for. Building your deliverables and internal quality review, nothing else. Recordings are never used in marketing, case studies, or public material without separate, specific, written permission.
• Deletion. You may request deletion of a recording or transcript at any time, subject to Section 13.

09AI and automated processing

The Narrative Operating System is a services and software platform. The software layer is a multi-agent system that supports extraction, synthesis, and deployment work. Being direct about what that means for your data:

Where AI is used

• Transcribing and summarizing recorded sessions.
• Structured narrative extraction from interviews and source documents.
• Drafting, analysis, and synthesis inside deliverable production.
• Research and content operations on our own marketing.

What that means for your content

Human review and automated decisions

We score engagement to decide who our team should contact, as described in Section 4. That is profiling, and we name it as such rather than hiding it in a euphemism — but the only outcome it produces is whether a person picks up a phone and calls you. It sets no price, grants no access, and denies you nothing. You may object to it at any time under Section 16, and you may ask us what your score is and what drove it.

Every AI-assisted output that reaches you passes through human review. We do not make decisions producing legal or similarly significant effects about any individual — employment, credit, housing, insurance, education, healthcare, or access to essential services — through automated means, with or without AI. If that ever changes, this section will change first, and we will provide the notice, explanation, correction, and human-review rights that the applicable law requires.

AI output can be wrong, and confidently so. Our engagement deliverables carry human judgment and accountability; our public tools and resources do not, and you should treat their output as a starting point rather than a finding. The disclaimer in our Terms of Use covers this in full.

10Client engagement data

Material you share with us during an engagement — strategy documents, customer research, financials, internal communications, anything your team says in a room with us — is confidential. The commitments below apply in addition to whatever your services agreement or NDA says, and never in place of it.

• Engagement material is used solely to deliver your engagement.
• It is never sold, licensed, shared with other clients, or used to train models.
• Access is limited to the named team members working on your account and the vendors in Section 11 that are technically necessary to do the work.
• Every person with access is bound by confidentiality obligations.
• We do not publish your name, logo, or engagement details as a client reference without your written permission.
• Where we process personal information about your employees or customers, we act as a processor on your instructions, and you remain the controller. We will sign a data processing addendum on request.

11Service providers

We run on third-party infrastructure rather than building everything ourselves. Each provider below receives only the data its function requires, under contract terms restricting use to providing the service to us.

Providers change. For the current list applicable to your engagement, write to support@brandmultiplier.ai and we will send it.

12Sharing and selling

We disclose personal information in exactly four situations:

• To the service providers in Section 11, limited to what each needs and bound by contract.
• To professional advisers — lawyers, accountants, insurers — where genuinely necessary and under a duty of confidence.
• Where the law requires it, including valid subpoenas, court orders, and lawful government requests. We will notify you unless legally prohibited.
• In a business transaction. If ChrisRubinCreativ, Inc. is acquired, merged, or reorganized, personal information may transfer as part of the assets. Any acquirer remains bound by this policy until it provides notice of a change, and you will be notified before your information becomes subject to a materially different policy.

13How long we keep it

Deletion requests are honored except where we are legally required to retain a record, where the information is needed to establish or defend a legal claim, or where it exists only in an encrypted backup — in which case it is deleted on the normal backup rotation and is not restored to active use in the interim.

14Security

• All traffic to and from brandmultiplier.ai is encrypted in transit using TLS.
• Data at rest in our cloud storage and vendor systems is encrypted using the provider’s standard encryption.
• Multi-factor authentication is required on every account with access to client or personal data.
• Access is granted on a least-privilege basis and reviewed when team composition changes.
• Contractors and team members are bound by written confidentiality obligations.
• We select vendors that maintain recognized security programs and we review their posture before granting them data.

No system is perfectly secure, and any company claiming otherwise is selling something. If we discover a breach affecting your personal information, we will notify you and the relevant authorities within the timeframes the law requires, and we will tell you what happened rather than what sounds best.

15International transfers

We are based in Colorado, and our infrastructure is primarily in the United States. If you are outside the US, using our site or engaging us means your information is transferred to and processed in the United States, whose data-protection laws differ from those in your country.

For transfers of personal information out of the UK, EEA, or Switzerland, we rely on the European Commission’s Standard Contractual Clauses and the UK Addendum, incorporated into our agreements with the relevant providers, together with supplementary technical and organizational measures. A copy of the relevant transfer mechanism is available on request.

16Your rights

What you can ask for

• Know and access. A copy of the personal information we hold about you, the categories, the sources, the purposes, and the categories of recipient.
• Correct. Fix anything inaccurate or incomplete.
• Delete. Erase your personal information, subject to the exceptions in Section 13.
• Port. Receive your information in a portable, machine-readable format.
• Opt out. Of marketing email, of marketing calls and texts, of targeted advertising, of profiling, and of any sale or sharing — we do not sell, and sharing for advertising is described in Section 6. Opting out of one channel does not require you to opt out of the others, and you can ask us to stop all of them at once.
• Object and restrict. Object to processing based on legitimate interests, or ask us to restrict processing while a dispute is resolved.
• Withdraw consent. At any time, for anything based on consent.
• Appeal. If we refuse a request, you may appeal by replying to our decision. We will respond to the appeal within 45 days with a written explanation.
• Be treated the same. We will not discriminate against you, degrade your service, or change your pricing for exercising any of these rights.

How to exercise them

Email support@brandmultiplier.ai with the request and the email address or other identifier associated with your information. We will acknowledge within 10 business days and substantively respond within 30 days, extendable once by a further 45 days where a request is complex, in which case we will tell you why before the first period expires.

We may need to verify your identity before acting, particularly on deletion and access requests. Verification is proportionate to the sensitivity of the request; we will not demand a passport scan to remove you from a newsletter. An authorized agent may submit a request on your behalf with written authorization.

Complaints

Tell us first — we would rather fix it. If we do not resolve it, you may complain to the Colorado Attorney General, to your own state attorney general, or, in the UK and EEA, to your national supervisory authority or the UK Information Commissioner’s Office.

17Children

Our services are built for businesses and are not directed to anyone under 18. We do not knowingly collect personal information from minors. If you believe a child has given us information, write to support@brandmultiplier.ai and we will delete it.

18Changes

We update this policy when our practices change. The effective date at the top always reflects the current version, and we maintain prior versions on request. For material changes — a new category of data, a new purpose, a new class of recipient — we will provide notice by email to subscribers and clients at least 14 days before the change takes effect. Continuing to use the site after a change means you accept the updated policy.

19Contact