This policy explains what personal data Brand360x collects, why, and your rights. It is written to align with India’s Digital Personal Data Protection (DPDP) Act; if you operate in other regions, additional local rights may apply.
1. Data we collect
- Account & signup data: name, email, phone number, business name, chosen subdomain.
- Verification & consent data: OTP verification status, and — as an audit record of the consent you give — the IP address, browser/user-agent, timestamp, and the version of the Terms/Privacy documents in force when you consented.
- Billing data: plan, subscription status, and payment-mandate references. Card/UPI credentials are handled by our payment processor (Razorpay); we do not store full payment credentials.
- Usage data: activity needed to operate, secure, and support your account.
- Cookies & local storage: we use cookies and browser local storage to keep you signed in, remember your progress through signup, and operate the store.
2. Why we use it
To create and operate your store, verify your identity, process subscription payments, provide support, comply with legal obligations, and — only if you opt in — send you marketing.
3. Marketing communications & channels (opt-in)
- Transactional messages (account, order, payment, and setup notifications) are part of the service and are sent regardless of marketing preferences.
- Marketing messages (updates, tips, offers) are sent only if you opt in, and may be delivered by WhatsApp, email, SMS, and voice call. Your opt-in is optional and is not a condition of using the service.
- You can withdraw marketing consent at any time (per channel) via the unsubscribe/opt-out method in each message or by contacting support. Withdrawal is recorded and takes effect promptly.
4. How we store consent
We keep a permanent, append-only record of the consents you give (Terms/Privacy acceptance and each marketing channel), including document version, timestamp, IP address, and device information, so we can demonstrate that consent was given. Withdrawals are recorded as new entries; history is preserved.
5. Sharing
We share data with service providers who help us run the platform (cloud infrastructure, payment processing, and messaging providers) under appropriate safeguards, and where required by law. We do not sell your personal data.
6. Your customers’ data
Data your customers provide to your store is processed by us on your behalf. You are responsible for giving your own privacy notice to your customers.
7. Retention
We retain personal data for as long as your account is active and as needed for legal, tax, and audit purposes. Consent audit records are retained as long as legally required. Store data on cancellation is handled as described in Terms §5 (retained while paused; removed when the store’s slot is released).
8. Your rights
Subject to law, you may request access to, a copy/export of, correction of, or deletion of your personal data, and may withdraw consent at any time. Contact support@brand360x.com.
9. Security
We use reasonable technical and organisational measures — including encryption in transit (SSL/TLS) and access controls — to protect your data. No system is perfectly secure and we cannot guarantee absolute security.
10. Changes
We may update this policy; the effective date and version will change. Material changes will be notified.
11. International data transfers
Your data may be stored and processed on servers located outside your state or country (for example, our cloud infrastructure provider’s data centres). Where data is transferred, we take reasonable steps to keep it protected.
12. Children’s privacy
The service is intended for business owners aged 18 and over and is not directed to children. We do not knowingly collect personal data from anyone under 18.
13. Grievance / Data protection contact
Grievance / data-protection contact: support@brand360x.com · Brand360x Ventures, 2921, Saraswathipuram, Mysuru 570007