We collect personal information to operate, improve, and secure our services:

• Account & Identity Data: name, email address, company details, role or title, and authentication identifiers.
• Transaction & Order Data (eCommerce): order details, billing and shipping information, limited payment metadata provided by payment partners, and fulfillment data.
• Product & Usage Data (SaaS): feature usage, session metadata, device and browser data, approximate location (from IP), log information, and diagnostic data.
• Communications: messages you send us (e.g., support tickets, emails, form submissions) and related metadata.
• Marketing Preferences: newsletter opt-ins, unsubscribe status, campaign interactions.
• Cookies & Similar Technologies: identifiers and preference data used to enable core functionality, analytics, personalization, and security. See our Cookie Policy for details.

We use personal information to provide, secure, and improve our services; process transactions and deliver orders; operate our SaaS platforms; provide support; send important notices; conduct analytics and product-led improvements; personalize experiences; and comply with laws.

Lawful Bases (where applicable): contract performance, legitimate interests (e.g., service improvement, fraud prevention), consent (e.g., marketing or certain cookies), and legal obligations (e.g., tax and accounting).

We do not sell or rent your personal information. We share information only as necessary with:

• Service Providers and Sub‑Processors: hosting, infrastructure, analytics, customer support, email delivery, payment processing, logistics and fulfillment partners.
• Legal, Compliance, and Safety: to comply with applicable law, enforce agreements, or protect rights, security, and safety of users and the public.
• Business Transfers: in connection with a merger, acquisition, or asset transfer, subject to continuity of protections.

Depending on your jurisdiction, you may have the following rights over your personal information:

• Access, correction, and deletion
• Objection and restriction of processing
• Data portability (machine-readable copy)
• Withdraw consent (where processing relies on consent)
• Complain to a data protection authority (where applicable)

To exercise rights, contact us at hello@brandzos.com. We may ask for verification to protect your account.

Our services are not directed to children under 13 (or under 16 in certain jurisdictions). We do not knowingly collect data from such individuals. If you believe a child provided data to us, contact us and we will take appropriate action.

We retain personal information only as long as needed for the purposes outlined in this Policy, and to the extent required by law. Illustrative examples:

• Account data: for the life of the account and a reasonable period thereafter (e.g., 24 months).
• Transaction and invoicing records: for the period required by tax, accounting, and compliance laws.
• Support communications: typically up to 24 months, unless longer retention is required.
• Marketing data: until you opt out or until data is no longer necessary.

We implement administrative, technical, and organizational safeguards to protect personal information. While we strive for strong protection, no method of transmission or storage is 100% secure.

We may process information in the United States and other countries. Where required, we implement appropriate safeguards for cross-border transfers (e.g., contractual commitments) to help ensure your information remains protected.

We may update this Policy from time to time. If changes are material, we will provide reasonable notice (e.g., by updating the effective date or posting a notice). Your continued use of our services after such changes constitutes acceptance.