HomePrivacy Policy

Legal, Security & Data Protection Charter

BrandSpyre Privacy Policy

How we protect, isolate, and responsibly process your organization’s workforce records, sales leads, financial ledgers, and client deliverables across our multi-tenant cloud platform.

Last Updated: September 24, 2026|v2.4 (Enterprise Multi-Tenant Release)|GDPR & DPDP Act (India) Compliant

Contact DPO

Executive Summary: 4 Core Pillars of BrandSpyre Trust

Zero-Trust Multi-Tenancy

Tenant data is strictly isolated by tenantId and branch matrices. No cross-organization leakage.

No Data Reselling

We never monetize or sell customer leads, staff lists, or client databases. Inter-tenant referrals happen solely via affirmative mutual consent.

Bank-Grade Encryption

TLS 1.3 encryption in transit, AES-256 token and storage encryption at rest, and salted bcrypt password hashing for all user accounts.

Meta Platform Compliance

Direct Meta Graph API integration with signed webhooks, encrypted OAuth credentials, and automated User Data Deletion Request procedures.

OVERVIEW•3 min read

1. Introduction & Operational Scope

Roles under global privacy frameworks and architecture boundaries

Welcome to BRANDSPYRE (“BrandSpyre”, “we”, “our”, or “us”). BrandSpyre operates a unified cloud enterprise resource planning (ERP) and customer relationship management (CRM) software platform, encompassing sales pipelines, human resource management (HRMS), project collaboration, point-of-sale (POS), billing, and inter-organizational commerce networks.

This Privacy Policy establishes how we collect, store, process, transfer, and protect personal and proprietary business data across our web application (accessible via our primary domains and subdomains), APIs, background worker daemons, and connected third-party integrations.

Our Legal Roles under Data Protection Regulations (GDPR & Indian DPDP Act 2023)

BrandSpyre as Data Processor / Service Provider

When your company (“Tenant Organization”) registers an account and uses our CRM, HRMS, employee roster, project files, or client billing tools, your organization acts as the Data Controller / Data Fiduciary. BrandSpyre processes that data strictly on your instruction and under the terms of our Master Services Agreement.

BrandSpyre as Data Controller / Data Fiduciary

BrandSpyre acts as the Data Controller exclusively for information collected directly from prospective customers, platform tenant administrators (account signup, billing credentials, subscription management), and public marketing website visitors.

SECURITY•3 min read

2. Zero-Trust Multi-Tenancy & Data Isolation

Logical and cryptographic separation of organization assets

BrandSpyre is architected from the ground up on strict Zero-Trust Multi-Tenancy principles. We understand that your customer leads, employee payroll numbers, trade pricing, and intellectual work products must remain confidential from all other organizations using BrandSpyre.

Tenant Isolation Enforcement

Every inbound request across all API endpoints requires a validated cryptographic session context (securityContext.tenantId). Query engines programmatically inject tenant parameters to ensure cross-tenant data traversal is structurally impossible.

Granular Branch & Role Isolation (RBAC / PBAC)

Within an organization, branch codes and user permission matrices restrict internal access. Users assigned to a designated branch or department cannot query or inspect other branch records without explicit administrator authorization.

IDOR (Insecure Direct Object Reference) Protection

All object identifiers for invoices, documents, employee profiles, and payment requests are checked against the calling tenant’s scope. Access attempts outside valid tenant boundaries are rejected and logged in immutable security audit trails.

COLLECTION•5 min read

3. Categories of Information We Collect

Comprehensive breakdown of user, operational, and financial data

Depending on your subscription tier, enabled modules, and organizational role, BrandSpyre collects and processes the following categories of information:

Account & Credentials

Full name, business email address, phone number, designated company role, and salted bcrypt cryptographic password hashes. We never store or transmit plaintext passwords.

HRMS & Employee Records

Designations, departments, joining dates, salary compensation structures, generated payslips, leave balances, clock-in/attendance timestamps, and emergency contact details supplied by your HR team.

CRM & Customer Inquiries

Prospect names, corporate emails, phone numbers, deal stages, client interaction histories, minutes of meetings (MOM), call summaries, and project scope notes.

Invoicing, GST & Tax Data

Billing address, GSTIN, PAN, TDS/TCS rates, payment requests, and itemized invoices. Payment transactions are executed via PCI-DSS Level 1 certified gateways; BrandSpyre does not store complete card numbers or CVVs.

Documents & Deliverables

Client brief documents, draft deliverables, signed PDF contracts, design schematics, offer letters, and experience certificates uploaded directly by authorized team members.

Device Telemetry & Logs

IP addresses, browser client fingerprints, access timestamps, HTTP referrer, rate-limiting counters, and immutable administrative audit logs recorded for compliance and threat mitigation.

META•4 min read

4. Meta / Facebook Graph API & Lead Ads Integration

Specialized disclosures pursuant to Meta Platform Terms & Developer Policies

Meta Developer Compliance Disclosure

BrandSpyre provides a multi-tenant OAuth and Webhook integration with the Meta Graph API (including Facebook Lead Ads). If your organization connects its Facebook Business Pages to BrandSpyre, the following specific terms govern all data received through Meta platforms:

How Meta Lead Data is Ingested and Processed:

Tenant-Controlled OAuth: When your organization connects a Facebook Page, OAuth access tokens are generated specifically for your workspace and stored in encrypted form using AES-256 in your tenant partition.
Cryptographic Webhook Verification: Inbound Meta lead notifications are validated against your tenant’s SHA-256 HMAC signature. Unsigned or mismatched payloads are instantly discarded.
Lead Data Scope: We only fetch form response fields configured by your marketing team on Meta (e.g., prospect name, phone number, email address, campaign ID, form ID).
Strict Tenant Partitioning: Meta lead data received for Organization A is never visible, accessible, or shared with Organization B or any other tenant on BrandSpyre.
No Data Reselling or External Profiling: BrandSpyre strictly prohibits using Meta lead data for cross-tenant algorithmic profiling, commercial reselling, or unauthorized third-party marketing.

User Data Deletion Callback & Policy

In accordance with Meta Platform Terms Section 4.b, individuals who submitted personal information through a Facebook Lead Ad connected to BrandSpyre can request immediate deletion at any time. Detailed instructions are provided in Section 13 below.

OVERVIEW•3 min read

5. Inter-Organization Lead Exchange & Referral Marketplace

Rules governing optional cross-tenant commercial collaborations

BrandSpyre includes an optional B2B Lead Exchange and Referral Marketplace module that enables verified organizations to collaborate, exchange qualified business opportunities, and settle referral commissions.

Strict Rules Governing the Lead Exchange:

Explicit Mutual Consent

Leads are never shared automatically. Lead transfer requires affirmative, manual action by an authorized user of the originating tenant and an established commercial relationship.

Immutable Audit Trails

Every shared lead event records a tamper-resistant timestamp, sending user ID, originating tenant, recipient tenant ID, and accepted commission agreement in the settlement ledger.

End-User Notice Compliance

Organizations participating in the exchange warrant that they have provided adequate notice and obtained valid legal consent from prospects prior to referring their information to partner organizations.

Immediate Revocation Capability

A tenant may sever an inter-organizational relationship at any time, terminating future data sharing pipelines immediately.

COMPLIANCE•3 min read

6. Legal Bases for Processing (GDPR & Indian DPDP Act)

Statutory justifications under modern data governance laws

Under Article 6 of the General Data Protection Regulation (GDPR) and the Digital Personal Data Protection Act 2023 (DPDP Act, India), BrandSpyre processes personal data only where a legitimate legal basis exists:

1. Contractual Necessity (Art. 6(1)(b) GDPR)

To create tenant workspaces, authenticate staff, generate customer invoices, process salary slips, and render the core software modules requested under your active subscription.

2. Statutory & Legal Obligations (Art. 6(1)(c) GDPR)

To retain tax invoices, compute GST and TDS/TCS records, comply with mandatory accounting and corporate audit standards, and respond to lawful subpoenas or court directives.

3. Legitimate Interests (Art. 6(1)(f) GDPR)

To enforce rate-limiting against automated brute-force attacks, monitor system latency, ensure tenant isolation, and safeguard platform infrastructure against malicious intrusions.

4. Explicit Consent (Art. 6(1)(a) GDPR & Sec. 6 DPDP Act)

For non-essential marketing newsletters, third-party marketplace referrals, and optional pilot feature participation. Consent may be withdrawn at any time.

COMPLIANCE•3 min read

7. Third-Party Sub-Processors & Infrastructure Providers

Verified service partners assisting in platform delivery

BrandSpyre engages vetted, SOC 2 and ISO 27001-certified third-party sub-processors to furnish underlying hosting, networking, payment processing, and messaging infrastructure. All sub-processors are bound by strict Data Processing Agreements (DPAs):

Sub-Processor	Purpose / Service	Data Transferred	Location / Certification
Razorpay Software Pvt Ltd	Payment gateway & subscription processing (India)	Transaction amounts, invoice ID, billing name/email	India / PCI-DSS Level 1
Stripe, Inc.	International payment processing & card vault	Payment tokens, billing address, currency	USA / PCI-DSS Level 1
Meta Platforms, Inc.	Lead Ads integration & Webhooks via Graph API	Form leads (name, email, phone) upon user configuration	USA / Meta Platform Terms
Cloud Hosting & Database Clusters	Encrypted database storage, Docker runtime & API clusters	Encrypted multi-tenant records, database snapshots	Secure Data Centers / SOC 2 Type II
Transactional SMTP Providers	Password resets, onboarding verification, invoice alerts	Recipient email address, system notification payload	Global / TLS 1.3 encrypted

SECURITY•4 min read

8. Technical Security Safeguards & Encryption Standards

Bank-grade defenses protecting systems, databases, and networks

We implement comprehensive organizational and technical security controls designed to prevent accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access to your data:

Encryption in Transit & at Rest

All communications between client browsers and BrandSpyre servers mandate TLS 1.3 / HTTPS with high-grade ciphers. Database volumes, backups, and sensitive credentials (including OAuth tokens and integration secrets) are encrypted at rest using AES-256.

Bcrypt Password Cryptography

User passwords are processed through salted bcrypt key derivation functions. We never store reversible passwords. Password reset tokens are short-lived (15–60 minutes) and single-use only.

Adaptive Rate Limiting & DoS Defense

Strict request limiters protect authentication endpoints (maximum 10 attempts per 15 minutes), password reset endpoints (5 attempts per hour), and file upload gateways to thwart automated dictionary and brute-force attacks.

Continuous Audit Logging

Every critical administrative operation (such as role modifications, branch deactivations, billing alterations, and document deletions) is permanently recorded in tenant audit logs with actor identity, timestamp, and source IP.

OVERVIEW•3 min read

9. AI Assistant & Dynamic Engine Privacy

Zero-training guarantee for proprietary business context and prompts

BrandSpyre incorporates intelligent AI Copilot services to assist team members with task generation, lead summarization, report analysis, and meeting synthesis:

Our Core AI Privacy Commitments:

No Public Model Training: Your business records, project documents, employee names, and proprietary client proposals are never used to train, retrain, or improve public AI foundation models.
Context Scoped to Session: Prompts sent to AI microservices only receive runtime context authorized for the requesting user’s tenant and branch.
Tenant-Controlled Activation: Tenant administrators maintain full administrative power to disable AI modules across their workspace at any time via Settings > Module Settings.

OVERVIEW•3 min read

10. Data Retention, Backups & Deletion Lifecycles

Policies governing active data, disaster recovery, and account termination

We retain your data for the duration of your active subscription and as required to fulfill statutory tax and legal recordkeeping duties:

Active Subscription Period

Data is preserved in real time across active database partitions and encrypted volume storage to support continuous platform functionality.

Account Cancellation & 30-Day Export Grace Window

Upon cancellation or non-renewal of an organization subscription, account data enters a 30-day grace period during which tenant administrators may export complete records (invoices, reports, employee registers). After 30 days, tenant databases are scheduled for permanent, irreversible cryptographic wiping.

Backup Snapshots & Disaster Recovery Cycles

Automated encrypted database backups are taken on daily and weekly rotations strictly for disaster recovery and operational continuity (as documented in our Disaster Recovery Protocol). Backup snapshots expire and overwrite automatically after 30 to 90 days.

Statutory Financial Record Retention

Invoices, payment logs, and tax computations (GST/TDS) are retained for up to 7 years to satisfy mandatory commercial statutory obligations under applicable financial regulations.

RIGHTS•4 min read

11. Your Privacy Rights & Data Subject Access (DSAR)

Universal rights granted under GDPR, DPDP Act, and international standards

Depending on your jurisdiction, you enjoy specific legal entitlements regarding the personal information maintained by BrandSpyre:

Right of Access

Request a copy of the personal information we process concerning your account.

Right of Rectification

Correct inaccurate, outdated, or incomplete personal data via Workspace Settings or official support channels.

Right to Erasure (“Right to be Forgotten”)

Request permanent deletion of your personal records, subject to statutory retention obligations.

Right to Data Portability

Export and obtain customer lists, timesheets, and financial logs in machine-readable formats (CSV, XLSX, PDF).

Right to Restrict Processing

Request suspension of automated processing while accuracy or legitimate interest disputes are evaluated.

Right to Withdraw Consent

Revoke previously granted permissions for marketing notifications or optional feature integrations at any time.

How to Submit a Data Subject Request:

To exercise any of these rights, email our Data Protection Team at privacy@brandspyre.com. We will verify your identity and respond within thirty (30) days without undue charge.

META•3 min read

12. Facebook / Meta User Data Deletion Instructions

Explicit procedure for Facebook Lead Ads respondents per Meta Platform Terms

Pursuant to the Meta Platform Developer Policy, BrandSpyre provides this dedicated, publicly accessible instruction set for any individual who submitted a lead form on Facebook or Instagram connected to an organization using BrandSpyre:

Option A: Delete Data Directly via Your Facebook Account

Log into your Facebook Account.
Navigate to Settings & Privacy > Settings.
In the left sidebar, click on Apps and Websites.
Find the relevant business app or BrandSpyre Integration.
Click the Remove button.
Check the box requesting Facebook to notify the developer to delete your activities and data, then click Done.

Option B: Direct BrandSpyre Lead Deletion Request

If you wish to remove your lead record from our servers directly:

Send an email with the subject line “Meta Data Deletion Request” to privacy@brandspyre.com.

Please specify: (1) Your full name, (2) The email address or phone number submitted on the Facebook Lead form, and (3) The name of the business page or ad campaign (if known).

Our team will locate and scrub the lead record within 48 business hours and issue an official deletion confirmation code.

OVERVIEW•3 min read

13. Cookies, Session State & Local Storage Policy

How we utilize necessary session tokens and interface preference keys

BrandSpyre uses first-party cookies and modern browser storage technologies strictly to ensure functional platform operation and secure authentication:

Strictly Necessary Authentication Tokens

Cryptographically signed JSON Web Tokens (JWT) stored in HTTP-only, SameSite secure cookie containers to maintain your authenticated session and verify tenant identity.

Functional Preferences & UI State

Local storage items that remember your selected workspace context, dark/light display mode, sidebar collapsed state, and filter preferences.

No Third-Party Cross-Site Ad Tracking on Workspaces

We do not sell advertising space within your authenticated tenant workspaces, nor do we deploy third-party behavioral advertising trackers across our CRM or HRMS dashboards.

COMPLIANCE•2 min read

14. International Transfers & Cross-Border Processing

Safeguards governing distributed cloud compute and multi-region routing

As a global cloud platform, BrandSpyre may store or process operational data in secure, certified data center facilities located across India, the United States, and European jurisdictions.

Whenever personal data is transferred across international borders, BrandSpyre ensures that appropriate transfer mechanisms are in effect, including:

Standard Contractual Clauses (SCCs) approved by the European Commission.
Adherence to the cross-border data transfer directives under the Digital Personal Data Protection Act (DPDP Act, India).
Mandatory end-to-end TLS 1.3 cryptographic protection during transit.

COMPLIANCE•2 min read

15. Grievance Redressal, DPO & Contact Information

Designated Data Protection Officer and official dispute resolution channel

In compliance with the Information Technology Act 2000, the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules 2021, and the DPDP Act 2023, BrandSpyre has appointed a designated Grievance & Data Protection Officer:

Office of the Data Protection & Grievance Redressal Officer

Designation:Chief Information Security Officer & Data Protection Officer

Direct Privacy Inquiries:privacy@brandspyre.com

General Support Desk:support@brandspyre.com

Official Grievance SLA:Response acknowledged within 24 to 48 business hours

For security vulnerability disclosures or critical infrastructure reports, please reach out directly with cryptographic details to security@brandspyre.com.

Quick Clarifications

Frequently Asked Privacy Questions

Common questions regarding data governance, multi-tenancy, and compliance.

Official Corporate Policy Document

Governed by BRANDSPYRE Information Security & Legal Compliance Directorate.

By creating a tenant account, accessing the BrandSpyre dashboard, or integrating your Meta / payment assets, you acknowledge that you have reviewed, understood, and agreed to the practices outlined in this Privacy Policy.

Document ID: BSP-SEC-POL-2026-V2Effective Date: September 24, 2026

Ready to simplify the way your business operates?

Run CRM, operations, HR, finance, inventory and more from one connected platform.

Get Started Talk to us