Welcome to Bragly.io. We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how Bragly ("Bragly", "we", "us", or "our") collects, uses, shares, and safeguards information when you use our website and services.

1. Who We Are

Data Fiduciary: Bragly
Email: [email protected]

2. The Data We Collect

Category	Typical examples	Source
Account data	Name, email, password, company, role	You
Billing data	Payment method, GSTIN or other applicable tax ID, billing address, transaction history	You / Payment provider
Imported review content	Reviews from connected platforms (e.g., Google, Facebook, G2, Trustpilot), reviewer name, rating, review text	Review platform APIs
Usage data	Log files, IP address, browser type, device identifiers, pages viewed, clicks, referring URLs	Your browser / cookies
Marketing preferences	Newsletter choices, opt-in records	You

We do not knowingly collect information about children under 18. Where required, we obtain verifiable parental or guardian consent before processing the personal data of a child, in accordance with Section 9 of the DPDP Act, 2023.

3. Why We Use Your Data (Legal Bases)

Purpose	Legal basis (DPDP Act, 2023)
Provide and maintain the Bragly platform	Consent (Section 6)
Import, display, and manage your reviews from connected platforms	Consent (Section 6)
Improve features, troubleshoot, and analyse usage	Consent (Section 6); anonymised data may be used under legitimate use (Section 7)
Send product updates and service notices	Consent (Section 6); or legitimate use for existing customers (Section 7)
Send newsletters and promotional offers	Consent (Section 6) – you can withdraw anytime
Create aggregated statistics and case studies	Consent (Section 6); data is anonymised where possible
Meet legal obligations (e.g., accounting, taxes)	Legitimate use – compliance with applicable law (Section 7)

4. How We Share Your Data

We only share personal data when necessary:

Service providers – hosting (e.g., AWS or similar), email delivery, payment processors, analytics, customer-support platforms.
Integrations – Google APIs to fetch reviews you authorise.
Professional advisers – lawyers, accountants, auditors.
Authorities – if required by law or court order.
Business transfers – in connection with a merger, acquisition, or asset sale, we will notify you before data is transferred.

We do not sell your personal data.

5. International Transfers

We may transfer personal data outside India to service providers and partners in other countries. Such transfers are carried out in accordance with the Digital Personal Data Protection Act, 2023 (DPDP Act) and only to countries not restricted by the Government of India. Where required, we ensure appropriate contractual or technical safeguards are in place to protect your data.

6. Cookies & Similar Technologies

We use cookies and local storage to:

keep you logged in
remember preferences
measure site performance
support marketing campaigns

On your first visit you will see a cookie banner. You can adjust or withdraw consent at any time via the banner or your browser settings. For details, see our separate Cookie Notice.

7. Retention

We keep personal data only as long as needed:

Data type	Standard retention
Account data	While your account is active plus 3 years
Billing records	As required by applicable law and our payment processor's policies; typically 3–7 years
Imported reviews	Until you disconnect the source or delete them
Marketing consent logs	Until you unsubscribe plus 2 years
Usage logs	12 months (diagnostics), then aggregated or deleted

Back-ups may persist for up to 30 days.

8. Your Rights

Under the Digital Personal Data Protection Act, 2023 (DPDP Act), you have the following rights as a Data Principal:

Access – obtain a summary of personal data being processed and the processing activities undertaken by us.
Correction and Erasure – request correction of inaccurate or incomplete data, or erasure of personal data that is no longer necessary for the purpose for which it was collected.
Grievance Redressal – have grievances addressed by our Grievance Officer in a timely manner.
Nominate – nominate another individual to exercise your rights on your behalf in the event of your death or incapacity.
Withdraw Consent – withdraw consent at any time; this does not affect the lawfulness of processing carried out before withdrawal.

To exercise any right, email [email protected]. We will respond within the timelines prescribed under applicable law. You may also lodge a complaint with the Data Protection Board of India once operational, as established under the DPDP Act, 2023.

9. Marketing Communications

We love to share tips, product news, and special offers. Under the DPDP Act, 2023, marketing communications require your explicit consent. You will receive these only if you have provided explicit consent — either by opting in when creating an account or by separately subscribing to our marketing communications.

You can withdraw consent and opt out at any time by clicking "unsubscribe" in any email or by adjusting your account preferences. Service-related messages (e.g., invoices, security alerts) are operational in nature and are not subject to marketing opt-out.

10. Security

We apply technical and organisational measures such as encryption in transit, role-based access controls, regular penetration tests, and staff training. No system is ever 100 percent secure, so we maintain incident response procedures and will notify you and the Data Protection Board of India of any personal data breach when required by law.

11. Third-Party Links

Our site may link to external pages (for example, Google). We do not control their privacy practices, so please review their policies.

12. Changes to This Policy

We may update this Privacy Policy to reflect new features, legal requirements, or other changes. If modifications are material, we will give at least 30 days' notice by email or in-app. The latest version is always available at bragly.io/privacy.

13. Contact Us

Questions, comments, or concerns?

Email [email protected]

By using Bragly you acknowledge that you have read and understood this Privacy Policy and agree to its terms.

Privacy Policy