This Privacy Policy explains what we collect, why we collect it, how we use and share it, and the choices you have—covering all Brandgea websites, apps, AI‑quoting tools, manufacturer search, and related services (the Services).

1) What we collect

We collect information in the following categories:

A. Identification & contact
Name, email, phone number, country/region, business name, role; authentication identifiers (e.g., Google One Tap).

B. Business & project details
Product descriptions, budgets, timelines, sizing/variants, compliance preferences, and messages you send us.

C. Files & media
Images and other files you upload (e.g., reference images for apparel designs). Metadata may be captured by your device or file (e.g., timestamp, dimensions).

D. Technical data
Device/browser information, IP address, cookies, page interactions, session replay events, and diagnostics (see Cookies & Tracking below).

E. Transaction & payment data
Purchase history, invoice details, tax details (e.g., GSTIN if provided). Payment card/UPI details are processed by our payment partners; we do not store full card numbers.

F. Communications
Emails, support chats, WhatsApp/SMS (transactional), and survey responses.

G. AI inputs & outputs
Prompts, text, and images you provide to generate estimates, and the resulting AI‑generated outputs and cost tables.

We may receive the above from you directly, from your devices through cookies/SDKs, or from third‑party sign‑in providers (e.g., Google) and service partners (e.g., payments, logistics).

2) Why we collect it (purposes & legal bases)

We use your data to:

1. Provide and operate the Services (e.g., create accounts, process quotes, generate AI estimates, perform manufacturer search, deliver files). (Contract / Legitimate Interests)

2. Improve safety and quality (fraud prevention, abuse/spam detection, content moderation, debugging, model quality review). (Legitimate Interests / Legal Obligation)

3. Communicate with you about quotes, orders, security alerts, and service updates (transactional communications). (Contract / Legitimate Interests)

4. Process payments & invoices, calculate taxes (e.g., GST), and manage refunds. (Contract / Legal Obligation)

5. Analytics and product improvement—understand usage, fix UX issues, and inform roadmap. (Consent where required / Legitimate Interests)

6. Marketing (optional)—newsletters, feature announcements. (Consent—you can opt out at any time)

We do not sell your personal data.

3) How we use AI & your content

• To generate estimates, we process your text and images with AI models and internal logic.

• We may use aggregate and de‑identified data to improve estimate quality and detect anomalies.

• Where supported by our AI providers, we configure settings to opt out of provider model training on your inputs/outputs. If a provider does not support opt‑out, we will disclose that provider in our Sub‑processor List.

4) Sharing & sub‑processors

We share data with trusted vendors who help us deliver the Services, under contractual confidentiality and data‑protection obligations. Typical categories include:

• Identity & authentication: Google One Tap; (optionally) Clerk or similar.

• Payments: Zoho Payments or equivalent payment gateway.

• Logistics & shipping: Shiprocket (for order fulfilment, where applicable).

• AI model providers: OpenAI or similar providers processing your prompts and files to generate outputs.

• Email & messaging: Email service providers and transactional SMS/WhatsApp providers.

• Analytics & session replay: Google Analytics, Hotjar (or similar).

• Hosting & storage: Cloud hosting, CDN, and database providers.

We also share data when required by law, to protect rights/safety, or in connection with a merger/acquisition/reorganization.

Sub‑processor list. We maintain a current list of key sub‑processors and will update it when we add/replace vendors. You may request the latest list at support@brandgea.com.

5) International transfers

Our vendors and partners may be located outside your country (including outside India). Where we transfer personal data internationally, we take appropriate measures consistent with applicable law (e.g., contractual safeguards). By using the Services, you consent to these transfers as necessary to deliver the Services.

6) Retention

We keep data only as long as necessary for the purposes described above:

• Account & profile data: While your account is active, then up to 24 months after last activity.

• Quotes & AI submissions (text/images/outputs): Up to 24 months to support re‑quotes, dispute resolution, fraud prevention, model quality checks, and product improvement.

• Production/order records & invoices: Up to 8 years to meet tax and regulatory requirements.

• Analytics & logs: Typically 14 months (or provider default, whichever is shorter), unless needed longer for security.

• We may keep limited backups/archives for operational continuity. When data is no longer needed, we delete or de-identify it.

7) Your choices & rights

Depending on your location, you may have rights to access, correct, delete, object to/limit processing, and port your data, and to withdraw consent where processing is based on consent.

• To exercise rights, email support@brandgea.com with the subject “Data Request” and describe your request.

• We may ask for verification and will respond within a reasonable timeframe (aim to acknowledge in 48 business hours and resolve within 30 days, subject to law).

• You can opt out of marketing communications at any time via unsubscribe links; transactional communications will still be sent.

• You can manage cookie preferences via our cookie banner or browser settings (see below).

EU/UK residents may also have the right to complain to a supervisory authority. India residents may escalate grievances to our privacy contact above.

8) Cookies & tracking

We use cookies and similar technologies to run the site, keep you signed in, remember preferences, measure performance, and improve UX (including optional session replay).

• Strictly necessary cookies are essential for core functionality and security.

• Analytics cookies measure usage and help us improve.

• Marketing cookies (if any) help us understand campaign performance.

Where required by law, we present a cookie consent banner allowing you to accept/reject non‑essential cookies and change your choices later.

9) Security

We use technical and organizational safeguards including encryption in transit, restricted access, MFA for admin accounts, logging/monitoring, and regular backups. No system is 100% secure; you are responsible for maintaining the security of your devices and credentials.

10) Children

The Services are intended for adults (18+) and not directed to children. We do not knowingly collect data from children. If you believe a child has provided data, contact us to delete it.

11) Changes to this Policy

We may update this Policy from time to time. The “Last updated” date above reflects the latest version. Material changes will be notified through the Services or by email. Your continued use after changes signifies acceptance.

12) Contact & grievance

MIXBIZ TECHNOLOGY PRIVATE LIMITED
INNOV8 MILLENIA, RMZ Millenia Business Park,
No. 143, Dr. M.G.R. Road (North Veeranam Salai), Perungudi,
Sholinganallur, Chennai — 600096, India
Email: support@brandgea.com

We aim to acknowledge privacy grievances within 48 business hours and endeavor to resolve them within 30 days, subject to applicable law.