This Privacy Policy explains how [Brandexa Technologies Pvt. Ltd.] collects, uses, stores and protects information when you use our SaaS Platform.
01Information We Collect
Depending on how you use the Platform, we may collect:
Account Information
- Name
- Email address
- Phone number
- Password/authentication information
- Business name
- Business address
Business Information
- Company/business name
- Brand names
- Logo
- GST information where applicable
- Business registration information
- Product information
- Service information
- Pricing
- Business hours
- Business location
Product Information
Business Users may upload:
- Product images
- Product descriptions
- Prices
- SKU
- Inventory information
- Product variants
Service Information
Service providers may provide:
- Service descriptions
- Service locations
- Pricing
- Availability
- Service categories
- Business information
Customer Information
When customers interact with businesses, we may process:
- Name
- Phone number
- Delivery address
- Order details
- Service request
- Communication history
- Payment status
02Automatically Collected Information
We may automatically collect:
- IP address
- Browser type
- Device type
- Operating system
- Login information
- Usage information
- Pages viewed
- Approximate location
- Cookies and similar technologies
03How We Use Information
We may use information to:
- Create and manage accounts
- Provide SaaS services
- Create business websites/landing pages
- Display products and services
- Process orders
- Facilitate deliveries
- Communicate with users
- Provide customer support
- Process subscriptions
- Improve Platform functionality
- Detect fraud
- Protect Platform security
- Analyse usage
- Send service-related notifications
- Send marketing communications where permitted
04Business Information Displayed Publicly
When a Business User publishes a digital storefront, certain information may become publicly accessible, including:
- Business name
- Brand name
- Logo
- Products
- Services
- Prices
- Business description
- Business hours
- Public contact information
- Business location, where enabled
Business Users should not publish confidential or unnecessary personal information.
05Payments
Payments may be processed by third-party payment providers.
We generally do not store complete card details or CVV information.
Payment providers may independently process information under their own privacy policies.
06Delivery Information
If delivery services are enabled, necessary information may be shared with the relevant delivery partner to complete the delivery.
This may include:
- Customer name
- Delivery address
- Phone number
- Order information
- Pickup information
We limit such sharing to information reasonably required to fulfil the delivery.
07Communication
The Platform may support communications through:
- SMS
- Push notifications
- Phone calls
- In-platform notifications
Where third-party communication providers are used, their terms and privacy policies may also apply.
09Data Sharing
We may share information with:
- Business Users
- Customers
- Delivery partners
- Payment processors
- Cloud infrastructure providers
- Communication providers
- Analytics providers
- Security providers
- Professional advisors
- Government authorities where legally required
We do not sell personal information merely for the purpose of selling personal information.
10Data Security
We use reasonable technical and organisational measures to protect information, which may include:
- Encryption
- Access controls
- Authentication
- Secure cloud infrastructure
- Logging and monitoring
- Backup mechanisms
- Security testing
However, no internet-based system can guarantee absolute security.
11Data Retention
We retain information only for as long as reasonably necessary for:
- Providing services
- Maintaining accounts
- Legal obligations
- Tax/accounting requirements
- Resolving disputes
- Preventing fraud
- Enforcing agreements
After the applicable retention period, information may be deleted or anonymised.
12User Rights
Subject to applicable law, users may have rights regarding their personal information, including:
- Requesting access
- Requesting correction
- Requesting deletion
- Withdrawing consent where applicable
- Raising privacy concerns
- Requesting information regarding processing
Requests can be sent to:
[privacy@brandexa.com]
13Children’s Privacy
The Platform is primarily intended for businesses and general users and is not knowingly designed to collect personal information from children without appropriate legal basis or parental/guardian involvement where required.
14International Data Processing
Depending on our infrastructure and service providers, information may be processed or stored in India or other countries.
Where required, appropriate safeguards will be implemented in accordance with applicable law.
15Third-Party Websites
Our Platform may contain links to third-party websites or services.
We are not responsible for their privacy practices.
Users should review their respective privacy policies.
16Business User Responsibilities
Business Users are responsible for:
- Collecting customer information lawfully
- Providing appropriate privacy notices where required
- Obtaining required consent
- Using customer information only for legitimate purposes
- Protecting customer information
- Not uploading unnecessary sensitive personal information
17Data Protection Compliance
We intend to operate the Platform in accordance with applicable Indian data-protection and privacy laws, including the Digital Personal Data Protection Act, 2023, and applicable rules/regulations as they come into force.
The exact responsibilities of the Platform and Business Users may depend on the particular processing activity and applicable law.
18Security Incidents
If we become aware of a data-security incident requiring notification under applicable law, we will take appropriate steps to investigate, contain and notify relevant parties as required.
19Changes to Privacy Policy
We may update this Privacy Policy periodically.
The updated version will be published on the Platform with a revised “Last Updated” date.