Privacy Policy

Welcome to BrandSync, an AI-powered brand growth and marketing automation platform operated by Oktacon Softwares("Oktacon", "we", "us", or "our").

This Privacy Policy explains how we collect, use, disclose, store, and protect information when you access or use the BrandSync website, web application, products, features, integrations, and related services (collectively, the "Services").

By using BrandSync, you acknowledge that you have read and understood this Privacy Policy.

We may collect the following categories of information:

• Account and profile information such as name, email address, phone number, business name, and login information.
• Business information such as business category, address, website, operating hours, branding assets, and business location information.
• Customer and lead information that you or your business choose to store through BrandSync.
• Review and reputation information obtained through supported third-party services or submitted by you.
• Messaging and engagement information related to supported WhatsApp or other messaging workflows.
• Usage, device, browser, IP address, log, diagnostic, and analytics information.
• Billing and transaction information required to manage subscriptions and payments.
• Content you upload, submit, generate, publish, or otherwise process through BrandSync.

When you create a BrandSync account, we may collect information such as your name, email address, phone number, business name, account credentials, and other profile information you provide.

We use this information to create and manage your account, authenticate you, provide customer support, communicate with you, secure the Services, and provide requested functionality.

BrandSync allows businesses to store and manage information related to their operations, customers, leads, bookings, campaigns, reviews, and marketing activities.

Depending on the features you use, this may include names, email addresses, phone numbers, business information, customer interactions, appointment information, review information, preferences, notes, and other information you choose to enter into the platform.

You are responsible for ensuring that you have the appropriate rights, permissions, notices, and lawful basis required to collect and process personal data that you submit to BrandSync.

If you connect BrandSync to supported Google or reputation features, BrandSync may process business profile information, review content, ratings, review responses, review metadata, location identifiers, and related analytics.

The exact data available depends on the permissions granted to BrandSync and the APIs or services made available by Google or other third parties.

We use this information to provide review management, analytics, review-response assistance, reputation insights, and other features you request.

BrandSync does not claim ownership of third-party platform content that is processed through integrations.

Where you use WhatsApp or other messaging integrations, BrandSync may process business and customer contact information, message-related metadata, message content, templates, campaign information, delivery information, and automation settings.

Your use of these integrations is also subject to the privacy practices, terms, and policies of the applicable messaging provider, including Meta or WhatsApp where applicable.

You are responsible for obtaining any consent or permission required before using BrandSync to send customer communications.

BrandSync uses artificial intelligence and automated systems to provide features such as review writing, review replies, campaign ideas, marketing recommendations, captions, content generation, and other business-assistance functions.

Depending on the feature, information you submit may be processed by BrandSync and selected AI or infrastructure service providers to generate the requested output.

We take reasonable steps to limit processing to what is necessary for the relevant feature, subject to the technical requirements of the Services and our third-party providers.

You should not submit sensitive personal information to AI features unless the relevant feature expressly supports it and you are legally entitled to process that information.

If you purchase a paid BrandSync plan, payment and billing information may be processed through third-party payment providers.

Depending on the payment method, we may receive information such as transaction identifiers, payment status, billing name, billing address, subscription details, and limited payment information.

BrandSync generally does not need to store your full credit or debit card number where payment processing is handled directly by a third-party payment provider.

BrandSync may use cookies, local storage, pixels, SDKs, and similar technologies to provide core functionality, remember preferences, maintain sessions, improve performance, understand usage, and measure the effectiveness of our website and marketing.

Depending on the technologies enabled on our website, we may use analytics providers such as Google Analytics or similar services.

You can control certain browser-based cookies through your browser settings. Disabling certain cookies may affect some functionality.

We may use information to:

• Create, authenticate, and manage your BrandSync account.
• Provide, operate, maintain, and improve BrandSync.
• Process reviews, leads, business data, campaigns, and customer engagement workflows.
• Provide AI-generated content and automated recommendations.
• Process subscriptions, payments, renewals, and billing support.
• Respond to customer support requests and communicate with you about the Services.
• Monitor performance, diagnose errors, prevent fraud, and protect the security of the Services.
• Understand how users interact with BrandSync and improve product design and functionality.
• Comply with legal obligations and enforce our agreements.
• Detect, investigate, and prevent abuse, security incidents, and unauthorized use.

We do not sell your personal information in exchange for money.

We may share information with service providers and partners where reasonably necessary to operate BrandSync, provide requested features, process payments, support communications, protect the Services, or comply with law.

Depending on the features you use, recipients may include cloud infrastructure providers, analytics providers, AI providers, payment processors, communication providers, customer-support systems, and other technology providers.

We may also disclose information when required by law, legal process, court order, governmental request, or to protect the rights, safety, security, and property of BrandSync, our users, or others.

BrandSync may integrate with third-party services such as Google, WhatsApp/Meta, payment providers, calendar services, mapping providers, analytics services, AI providers, cloud infrastructure providers, and other external platforms.

Third-party services may collect, process, or store information according to their own policies and terms.

We recommend reviewing the privacy policies of any third-party service you connect to BrandSync.

We retain information for as long as reasonably necessary to provide the Services, maintain accounts, fulfil contractual and legal obligations, resolve disputes, enforce agreements, prevent fraud, and maintain security.

Retention periods may vary depending on the type of information, the purpose for which it was collected, account status, legal requirements, and operational needs.

When information is no longer required, we may delete it, anonymize it, or securely dispose of it, subject to applicable legal and technical requirements.

We use reasonable technical and organizational measures designed to protect information against unauthorized access, modification, disclosure, loss, or destruction.

Security measures may include access controls, authentication controls, encryption where appropriate, logging, monitoring, backups, infrastructure security, and internal security procedures.

No internet-based service can guarantee absolute security. You are responsible for protecting your account credentials and using BrandSync in a secure manner.

Depending on your location and applicable law, you may have rights regarding your personal information, which can include rights to:

• Request access to personal information we hold about you.
• Request correction of inaccurate or incomplete information.
• Request deletion of information, subject to legal and operational requirements.
• Request restriction or limitation of certain processing.
• Object to certain processing activities where applicable.
• Request a copy of certain information in a portable format where legally required.
• Withdraw consent where processing is based on consent.

Requests may be subject to verification and applicable legal limitations.

To exercise a privacy right, contact us at contact@oktacon.com.

BrandSync is intended for businesses and business users. The Services are not directed toward children who are not legally permitted to use such services.

We do not knowingly collect personal information from children in violation of applicable law.

Depending on the infrastructure and third-party services used, information may be processed or stored in countries other than the country where you live or operate.

Where required by applicable law, we take reasonable steps to support appropriate safeguards for international data transfers.

We may update this Privacy Policy from time to time to reflect changes in our Services, data practices, technology, legal requirements, or business operations.

When material changes are made, we may provide notice through BrandSync, our website, email, or another reasonable method.

The "Last Updated" date at the top of this page indicates when this Privacy Policy was most recently revised.