Privacy Notice

Last updated: 13 September 2026

Who we are

BrandTalksAI is operated by Brand Talks AI, established in India. We are the data controller for the personal data described here. Contact us at support@brandtalksai.com.

Businesses that run a BrandTalksAI page are separate controllers of their own member lists; we process that data on their behalf as their provider.

What we collect and why

  • Business account data — name, email, password hash, business details and page content. Used to create and run your account (performance of our contract).
  • Member data — the phone number or email a customer enters when joining a loyalty page, their consent flag, visits, points and reward history. Used to operate the loyalty programme (contract and the business's legitimate interest in running its programme).
  • Feedback messages — anything a customer sends privately to a business through the page. Used to deliver that message (legitimate interest).
  • Usage and technical data — page scans, button taps, timestamps, coarse device and network identifiers. Used for analytics, abuse prevention and security (legitimate interest). Device and network identifiers are salted and hashed before storage; we do not keep raw IP addresses.
  • Support messages — what you send us by email. Used to answer you (legitimate interest).

We do not track whether anyone actually left a Google review, and points are never awarded for reviews. Reviews are appreciated but not incentivized.

Who we share it with

  • Service providers that host and run the platform (cloud hosting, database, analytics and email tooling).
  • Paddle.com, our Merchant of Record, for the sale of subscriptions, subscription management, payments, tax compliance and invoicing.
  • The business whose loyalty page a customer joins, for its own members and feedback.
  • Professional advisers (legal, accounting) and authorities where required by law.

We do not sell personal data.

International transfers

Our providers may process data outside your country, including in the EEA, the UK and the United States. Where required we rely on adequacy decisions or Standard Contractual Clauses as safeguards.

How long we keep it

Account and member data is kept while the account is active and for up to 12 months after closure, then deleted or anonymised. Analytics events are kept for up to 24 months. Billing records are retained for as long as tax law requires.

Your rights

Subject to your local law, you can request access to your data, correction, erasure, restriction, portability, or object to processing based on legitimate interests, and withdraw consent at any time. Email support@brandtalksai.com or use the data deletion page. We respond within one month. If you are in the UK or EEA you may also complain to your supervisory authority.

Security and cookies

We use appropriate technical and organisational measures, including encryption in transit, hashed passwords and row-level access controls.

We use essential cookies and local storage to keep you signed in and to keep the service secure. We do not use advertising cookies. You can clear or block cookies in your browser, though sign-in will stop working.