Privacy Policy
Last updated: April 7, 2026
BrandBaazar is committed to protecting your privacy. This Privacy Policy explains how we collect, use, share, and safeguard your information when you use our platform and services.
1. Information We Collect
We collect information in several ways depending on how you interact with our Service:
Information You Provide
- Account registration details (name, email address, company name, job title)
- Billing and payment information processed through our third-party payment provider
- Communications you send to us, including support requests and feedback
- Data you upload to the platform for analysis
- Preferences and settings you configure within the Service
Information Collected Automatically
- Device and browser information (browser type, operating system, device identifiers)
- Log data (IP address, access times, pages viewed, referring URLs)
- Usage data (features used, queries performed, API calls made)
- Performance data (page load times, error logs)
Information from Third Parties
- Business information from publicly available sources for account verification
- Analytics data from service providers we work with
- Information from authentication providers if you use single sign-on (SSO)
2. How We Use Your Information
We use the information we collect for the following purposes:
- Providing the Service. To operate, maintain, and deliver the features and functionality of the BrandBaazar platform.
- Account management. To create and manage your account, process payments, and communicate about your subscription.
- Improvement and development. To understand how users interact with our platform so we can improve existing features and build new ones.
- Communication. To send you service updates, security alerts, technical notices, and support messages. With your consent, we may also send marketing communications.
- Security. To detect, prevent, and respond to fraud, abuse, security incidents, and technical issues.
- Legal compliance. To comply with applicable laws, regulations, legal processes, or enforceable government requests.
- Analytics. To generate aggregated, de-identified insights about platform usage and performance.
3. Data Sharing and Disclosure
We do not sell your personal information. We share your data only in the following circumstances:
- Service providers. We work with trusted third-party providers who assist in operating the Service, such as cloud hosting, payment processing, email delivery, and analytics. These providers are contractually obligated to protect your data and use it only as directed.
- Legal requirements. We may disclose information if required by law, regulation, legal process, or a valid governmental request.
- Business transfers. In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction. We will notify you of any such change.
- With your consent. We may share information with third parties when you have given us explicit consent to do so.
- Aggregated data. We may share aggregated, de-identified data that cannot reasonably be used to identify you.
4. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to operate and improve the Service. These include:
- Essential cookies. Required for the platform to function, including authentication and security cookies.
- Analytics cookies. Help us understand how users interact with the Service so we can improve it. We use tools such as Google Analytics for this purpose.
- Preference cookies. Remember your settings and preferences to provide a more personalized experience.
- Marketing cookies. Used with your consent to deliver relevant advertisements and measure campaign effectiveness.
You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may limit the functionality of the Service.
5. Data Security
We take the security of your data seriously and implement industry-standard measures to protect it, including:
- Encryption of data in transit (TLS) and at rest
- Regular security assessments and vulnerability testing
- Access controls and authentication requirements for all systems
- Employee training on data protection and security best practices
- Incident response procedures for prompt handling of security events
While we strive to protect your information, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security, but we are committed to continuous improvement of our security practices.
6. Data Retention
We retain your personal information for as long as your account is active or as needed to provide the Service. After account termination, we may retain certain data for a reasonable period to comply with legal obligations, resolve disputes, and enforce our agreements. Aggregated, de-identified data may be retained indefinitely for analytics and research purposes.
You may request deletion of your personal data at any time by contacting us. We will process such requests in accordance with applicable law.
7. Your Rights
Depending on your location, you may have the following rights regarding your personal data:
- Access. Request a copy of the personal data we hold about you.
- Correction. Request that we correct inaccurate or incomplete data.
- Deletion. Request that we delete your personal data, subject to legal obligations.
- Portability. Request a copy of your data in a structured, machine-readable format.
- Restriction. Request that we restrict processing of your data in certain circumstances.
- Objection. Object to the processing of your personal data for specific purposes, including direct marketing.
- Withdraw consent. Where processing is based on consent, withdraw your consent at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, please contact us at info@brandbaazar.com. We will respond to your request within 30 days, or sooner where required by law.
8. GDPR Compliance (European Economic Area)
If you are located in the European Economic Area (EEA), we process your personal data under one or more of the following legal bases:
- Performance of a contract. Processing necessary to deliver the Service you have subscribed to.
- Legitimate interests. Processing necessary for our legitimate business interests, such as improving the Service and ensuring security, where those interests are not overridden by your rights.
- Consent. Processing based on your explicit consent, such as receiving marketing communications.
- Legal obligation. Processing necessary to comply with applicable laws.
For data transfers outside the EEA, we rely on Standard Contractual Clauses approved by the European Commission or other legally recognized transfer mechanisms to ensure your data is protected.
You have the right to lodge a complaint with your local data protection authority if you believe your data has been processed unlawfully.
9. CCPA Compliance (California Residents)
If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with additional rights:
- Right to know. You may request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources, the purposes for collection, and the categories of third parties with whom we share it.
- Right to delete. You may request deletion of your personal information, subject to certain exceptions.
- Right to opt out. We do not sell personal information. If this changes, we will provide a clear opt-out mechanism.
- Non-discrimination. We will not discriminate against you for exercising your CCPA rights.
To submit a CCPA request, please contact us at info@brandbaazar.com. We will verify your identity before processing your request.
10. International Data Transfers
BrandBaazar operates globally, and your information may be stored and processed in countries other than your own. We ensure that all international data transfers are conducted with appropriate safeguards in place, including Standard Contractual Clauses and data processing agreements with our service providers.
11. Children's Privacy
The Service is not directed at individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected data from a child, we will take steps to delete it promptly. If you believe a child has provided us with personal information, please contact us immediately.
12. Third-Party Links and Services
The Service may contain links to third-party websites or integrate with third-party services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal information.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will notify you via email or through a prominent notice on the platform. We encourage you to review this page periodically. Your continued use of the Service after any changes constitutes acceptance of the updated policy.
14. Contact Us
If you have any questions about this Privacy Policy, your personal data, or wish to exercise your rights, please contact us at: