Privacy Notice

Operator and data fiduciary

BRANK is operated under the BRAPPIFY brand in India. Legal entity: [LEGAL BUSINESS NAME REQUIRED]. Business address: [BUSINESS ADDRESS REQUIRED]. Support: rabu@brappify.com. Support hours: [SUPPORT HOURS REQUIRED]. GSTIN: [GSTIN IF APPLICABLE]. Grievance officer: [GRIEVANCE OFFICER REQUIRED]. Grievance email: [GRIEVANCE EMAIL REQUIRED].

Data and purposes

We process product content and links for discovery and moderation; order/payment IDs, status, amount, timestamps and policy acceptance for delivery, reconciliation and legal obligations; reports and correspondence for safety and support. We process keyed IP hashes, browser identifiers, event kind, product/campaign ID, source page and timestamp for abuse controls and aggregate engagement analytics. We do not sell personal data.

Country analytics

Cloudflare supplies an approximate country for each browser session. We store the country code and session timestamps for up to 90 days and show aggregate country counts publicly. We do not collect precise location or request device location permission. VPNs may affect accuracy.

Browser storage

Private shortlist notes and snapshots and theme preference remain in local browser storage, with no cross-device sync. Clearing browser storage deletes them. CSV exports remain on your device. Planner inputs remain in the current view unless downloaded. Save/comparison additions may send the product ID and event type; private notes are never sent.

Cookies and qualified visits

Essential secure HttpOnly cookies identify visit sessions (30 minutes) and engagement browser identities (30 days). Session counts are not unique people. Qualified outbound visits count eligible navigation actions, not confirmed destination loads, customers or unique persons. Basic bot filtering and repeat-action limits can reject legitimate shared-network activity and cannot stop all abuse.

Providers

Netlify hosts code and PostgreSQL data. Razorpay handles payment details and its own checkout processing; BRANK does not store full card numbers, CVV, OTPs or UPI PINs. Icon Horse and optional external image requests receive network information. Owner-provided links are separate sites. Service providers may process outside India, subject to applicable safeguards and their terms.

Retention

Engagement and session records are purged after 90 days during normal service requests. Rate-limit buckets are removed after one day during visitor requests. DNS challenges expire after 24 hours and are deleted on successful verification. Product, audit, complaint and financial records are retained for service, dispute and legal needs; the operator must set a reviewed retention schedule before launch. No automatic deletion is promised for legally required transaction records.

Rights and contact

Request access, correction, erasure or grievance review by contacting support; we may need proportionate identity checks. Withdraw consent where processing relies on it, without affecting prior lawful processing. Required financial/security records may be retained on other applicable grounds.

Children, security and incidents

This service is intended for adult makers and visitors. Do not submit children’s personal data; contact us for removal if found. Access controls, secure transport, parameterized queries and signature checks reduce risk but cannot guarantee security. Incidents are assessed, contained and notified to affected people and authorities when required by applicable law.

Updates and launch status

This is a compliance-oriented draft, not final legal approval. Complete operator details, retention decisions and applicable Indian privacy-rule review before launch. Changes will be dated on this page.