PRIVACY POLICY

Last Updated: 09/07/2026

Brandesia LLP (“Brandesia”, “we”, “us” or “our”) respects your privacy and is committed to processing personal data responsibly, transparently and securely.

This Privacy Policy explains how we collect, use, store, disclose and protect personal data when you:

• visit our websites;
• create an account;
• use our SaaS Products;
• purchase software or Services;
• communicate with us;
• request support;
• participate in a demonstration or trial; or
• otherwise interact with Brandesia.

1. Scope

This Policy applies to personal data processed by Brandesia for its own business purposes.

Where Brandesia processes personal data solely on behalf of a business Customer through a SaaS Product or IT Service, that Customer may determine the purpose and means of processing. In such cases, the Customer’s own privacy notice may also apply.

2. Personal Data We May Collect

Depending on your interaction with us, we may collect:

Identity and Contact Information

• name;
• business name;
• designation;
• email address;
• phone number; and
• postal or billing address.

Account Information

• username;
• encrypted or hashed authentication credentials;
• account preferences;
• user roles; and
• subscription details.

Transaction Information

• purchases;
• subscription plan;
• invoices;
• billing status;
• payment references; and
• tax-related information.

Complete payment card or banking information may be processed directly by authorised payment service providers.

Technical Information

• IP address;
• browser type;
• operating system;
• device information;
• login records;
• security logs;
• diagnostic information; and
• usage data.

Communications

We may collect information contained in:

• emails;
• support tickets;
• feedback;
• sales enquiries;
• chat communications; and
• other correspondence.

Customer Data

Our SaaS Products may process data uploaded or submitted by Customers and their authorised users.

The nature of such data depends on the Product and the Customer’s use of it.

3. How We Collect Personal Data

We may collect data:

• directly from you;
• from your organisation;
• automatically through our Products and websites;
• through cookies and similar technologies;
• through authorised integrations;
• from payment providers;
• from business partners; and
• from publicly available business sources where lawful.

4. Purposes of Processing

We may process personal data to:

• create and manage accounts;
• provide Products and Services;
• authenticate users;
• process payments and subscriptions;
• provide customer support;
• maintain and improve software;
• prevent fraud and security incidents;
• communicate service updates;
• respond to enquiries;
• comply with legal obligations;
• maintain business records;
• enforce agreements;
• analyse Product usage; and
• send marketing communications where legally permitted.

We seek to process personal data only for lawful and specified purposes.

5. Consent and Other Lawful Processing

Where consent is required, we will seek consent through appropriate means.

You may withdraw consent through the available account controls or by contacting us, subject to:

• legal requirements;
• contractual obligations;
• fraud prevention;
• security requirements; and
• processing otherwise permitted by applicable law.

Withdrawal of consent does not affect processing lawfully carried out before withdrawal.

6. Cookies and Similar Technologies

Our websites and Products may use:

• essential cookies;
• authentication cookies;
• preference cookies;
• analytics technologies; and
• other similar tools.

Essential technologies may be required for security and core functionality.

Where legally required, non-essential technologies will be used based on appropriate notice or consent.

7. How We Share Personal Data

We may share personal data with:

• cloud hosting providers;
• payment processors;
• communication service providers;
• analytics providers;
• security providers;
• professional advisers;
• authorised contractors;
• integration partners;
• government or regulatory authorities where legally required; and
• successors in connection with a lawful business restructuring.

We do not authorise service providers to use personal data for unrelated purposes merely because they process it on our behalf.

8. Data Processed on Behalf of Customers

When a Customer uses our SaaS Product to process personal data, Brandesia may act as a processor or service provider.

In such cases:

• the Customer determines what data is collected;
• the Customer is responsible for its own legal basis and notices;
• Brandesia processes the data to provide the contracted Services; and
• requests concerning such data may need to be directed to the relevant Customer.

9. International and Cross-Border Processing

Our service providers or infrastructure may process data in India or other jurisdictions.

Where personal data is transferred or processed across borders, we will take reasonable measures required by applicable law and contractual arrangements.

10. Data Security

We use reasonable technical and organisational safeguards appropriate to the nature of the data and Services.

These may include:

• access controls;
• authentication mechanisms;
• encryption where appropriate;
• network security;
• logging and monitoring;
• backup controls;
• vulnerability management; and
• employee or contractor access restrictions.

No electronic system can be guaranteed to be completely secure. Users should also protect their passwords, devices and credentials.

11. Data Breach Management

Where we become aware of a personal data breach, we will investigate and take reasonable containment and remediation measures.

Where required by applicable law, we will provide notifications to affected persons and relevant authorities.

12. Data Retention

We retain personal data only for as long as reasonably necessary for:

• providing Services;
• maintaining accounts;
• fulfilling contractual obligations;
• legal and tax compliance;
• resolving disputes;
• preventing fraud;
• maintaining security; and
• enforcing agreements.

Data may remain temporarily in secure backups until overwritten or deleted according to standard backup cycles.

13. Your Rights

Subject to applicable law, you may have rights relating to:

• access to information about your personal data;
• correction of inaccurate data;
• updating incomplete data;
• deletion or erasure;
• withdrawal of consent;
• grievance redressal; and
• nomination of another person to exercise rights in specified circumstances.

Requests may be subject to identity verification and lawful limitations.

14. How to Exercise Your Rights

You may submit a privacy request to:

Please provide sufficient information to identify your account and request.

We may request reasonable verification to protect against unauthorised access or fraudulent requests.

15. Children’s Data

Our business and enterprise Products are generally not intended for direct use by children unless expressly stated.

We do not knowingly process children’s personal data in a manner prohibited by applicable law.

Where a Product is intended to process children’s data, appropriate consent and safeguards may be required.

16. Marketing Communications

Where legally permitted, we may send information about Products, Services or offers.

You may opt out using:

• an unsubscribe option;
• account communication settings; or
• a request sent to us.

Service, security, billing and transactional communications may still be sent where necessary.

17. Third-Party Websites and Services

Our Products may contain links to or integrations with third-party services.

Their privacy practices are governed by their own policies. We recommend reviewing those policies before providing personal data.

18. Business Transfers

If Brandesia undergoes a merger, acquisition, restructuring or transfer of business assets, information may be transferred as part of that transaction, subject to applicable law and appropriate safeguards.

19. Grievance Redressal

For privacy-related complaints or concerns, contact:

Email: Grievance@brandesia.com

We will review and respond to legitimate grievances in accordance with applicable law.

20. Changes to This Privacy Policy

We may update this Policy to reflect changes in:

• law;
• technology;
• Products;
• data practices; or
• business operations.

The updated version will be posted with a revised “Last Updated” date.

21. Contact Us

Brandesia LLP

Email: Info@brandesia.com
Website: www.Brandesia.com