Privacy Policy

BrandCatch (“Company,” “we,” “us,” or “our”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the BrandCatch platform at brandcatch.ai (the “Service”). Please read this policy carefully. By using the Service, you consent to the practices described herein.

1. Information We Collect

1.1 Account Information

When you create an account, we collect information you provide directly, including your name, email address, and password. If you sign in through a third-party authentication provider (such as Google or GitHub), we receive your name, email address, and profile image from that provider.

1.2 Usage Data

We automatically collect information about how you interact with the Service, including pages visited, features used, search queries, domains viewed, watchlist activity, time spent on pages, referring URLs, and interaction timestamps.

1.3 Device and Technical Data

We collect device information such as your IP address, browser type and version, operating system, device identifiers, screen resolution, and language preferences.

1.4 Payment Information

If you subscribe to a paid plan, our third-party payment processor collects your payment card details. We do not store your full credit card number on our servers. We may receive and retain limited billing information such as the last four digits of your card, card type, and billing address for record-keeping purposes.

1.5 Cookies and Similar Technologies

We use cookies and similar tracking technologies to collect data as described in Section 4 below.

2. How We Use Your Information

We use the information we collect for the following purposes:

• To provide, maintain, and improve the Service, including domain scanning, trademark monitoring, and AI-powered insights.
• To create and manage your account and process transactions.
• To personalize your experience, including delivering customized domain recommendations and watchlist notifications.
• To communicate with you, including sending service-related emails, security alerts, and account notifications.
• To analyze usage patterns and trends to improve the Service and develop new features.
• To detect, prevent, and address fraud, abuse, security issues, and technical problems.
• To comply with legal obligations and enforce our Terms & Conditions.

3. Data Sharing and Disclosure

We do not sell your personal information. We share your data only with the following categories of service providers who assist us in operating the Service:

• Supabase (Authentication & Database): Provides user authentication, account management, and database hosting services.
• Vercel (Hosting): Hosts the application and processes incoming web requests. Vercel may collect access logs including IP addresses.
• Anthropic (AI Services): Powers AI-generated insights and domain analysis features. We may send domain names, trademark data, and related contextual information to Anthropic’s API to generate analysis. We do not send your personal account information to Anthropic.
• Domain Registrars (Affiliate Partners): When you click affiliate links to register a domain, the registrar may receive referral information indicating you arrived from BrandCatch. Your subsequent interactions with the registrar are governed by their privacy policy.

We may also disclose your information if required by law, in response to a valid legal process, or to protect the rights, property, or safety of BrandCatch, our users, or the public.

4. Cookies and Tracking Technologies

We use the following types of cookies and tracking technologies:

• Essential Cookies: Required for the Service to function, including authentication tokens and session management.
• Analytics Cookies: Help us understand how visitors interact with the Service so we can improve performance and user experience.
• Preference Cookies: Remember your settings and preferences, such as display options and notification preferences.

You can control cookies through your browser settings. Disabling certain cookies may limit your ability to use some features of the Service.

5. Data Security

We implement industry-standard security measures to protect your personal information, including encryption of data in transit (TLS/SSL), encryption of sensitive data at rest, secure authentication mechanisms, and regular security assessments. However, no method of electronic transmission or storage is 100% secure. While we strive to use commercially acceptable means to protect your personal data, we cannot guarantee its absolute security.

6. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Deletion: Request that we delete your personal data, subject to certain legal exceptions.
• Right to Data Portability: Request that we provide your data in a structured, commonly-used, machine-readable format.
• Right to Opt-Out: Opt out of certain data processing activities, including marketing communications and analytics tracking.
• Right to Rectification: Request correction of inaccurate or incomplete personal data.
• Right to Restrict Processing: Request that we limit how we use your data in certain circumstances.

To exercise any of these rights, please contact us at privacy@brandcatch.ai. We will respond to your request within 30 days, or sooner if required by applicable law.

7. Children’s Privacy

The Service is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal data from a child under 13, we will take immediate steps to delete that information. If you believe that a child under 13 has provided us with personal information, please contact us at privacy@brandcatch.ai.

8. International Data Transfers

Your information may be transferred to and processed in countries other than the country in which you reside, including the United States. These countries may have data protection laws that differ from your jurisdiction. When we transfer data internationally, we implement appropriate safeguards, including standard contractual clauses approved by relevant data protection authorities, to ensure your data receives an adequate level of protection consistent with applicable law.

9. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you the Service. We may retain certain data after account deletion as necessary to comply with legal obligations, resolve disputes, enforce our agreements, and for legitimate business purposes such as fraud prevention. Usage data and analytics may be retained in anonymized or aggregated form indefinitely.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by updating the “Last updated” date at the top of this page and, where required, providing additional notice (such as an email or in-app notification). We encourage you to review this policy periodically to stay informed about how we protect your information.

11. California Privacy Rights (CCPA)

If you are a California resident, the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA) grant you additional rights regarding your personal information:

• Right to Know: You have the right to request that we disclose what categories and specific pieces of personal information we have collected about you, the categories of sources from which the information was collected, the business purpose for collecting the information, and the categories of third parties with whom we share the information.
• Right to Delete: You have the right to request deletion of personal information we have collected from you, subject to certain exceptions.
• Right to Opt-Out:We do not sell your personal information. If this practice changes, we will update this policy and provide a “Do Not Sell My Personal Information” link.
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights, including by denying you access to the Service, charging you different prices, or providing a different level of service.
• Right to Correct: You have the right to request that we correct inaccurate personal information we maintain about you.
• Right to Limit Use of Sensitive Information: You have the right to limit the use and disclosure of sensitive personal information, if applicable.

To exercise your California privacy rights, please contact us at privacy@brandcatch.ai. We will verify your identity before processing your request and respond within 45 days as required by law.

12. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR):

Legal Basis for Processing

We process your personal data on the following legal bases:

• Contract Performance: Processing necessary to provide the Service under our Terms & Conditions.
• Legitimate Interests: Processing necessary for our legitimate business interests, such as improving the Service, preventing fraud, and ensuring security, provided these interests are not overridden by your rights.
• Consent: Processing based on your explicit consent, which you may withdraw at any time.
• Legal Obligation: Processing necessary to comply with applicable laws and regulations.

Your GDPR Rights

In addition to the rights listed in Section 6, you have the right to:

• Withdraw consent at any time where processing is based on consent.
• Object to processing based on legitimate interests.
• Lodge a complaint with your local data protection supervisory authority.

Data Protection Officer

For GDPR-related inquiries, please contact us at privacy@brandcatch.ai.

13. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Email: privacy@brandcatch.ai

Website: brandcatch.ai