1. Introduction
BrandRed ("we," "us," or "our") operates the brandred.net website, mobile application, and related services (collectively, the "Platform"). We are committed to protecting your privacy and being transparent about how we collect, use, and share your personal information.
This Privacy Policy explains our privacy practices for users of our independent customer review platform, including both individual customers who read and write reviews and businesses that manage their profiles and respond to feedback.
By using BrandRed, you acknowledge that you have read, understood, and agree to the collection, use, and disclosure of your information as described in this Privacy Policy.
2. Information We Collect
2.1 Information You Provide Directly
Account Registration:
- Full name and display name
- Email address
- Password (encrypted and stored securely)
- Profile photo (optional)
- Location/country (for verification purposes)
Review Content:
- Written reviews and ratings
- Photos and videos uploaded with reviews
- Purchase verification information
- Response to verification questions
Business Account Information:
- Business name and description
- Business contact information
- Business address and location
- Tax identification numbers (for subscription billing)
- Business logos and branding materials
- Website and social media links
Communication with Us:
- Support requests and correspondence
- Feedback and survey responses
- Report submissions for policy violations
Payment Information (Business Subscribers):
- Billing address
- Payment method details (processed securely through third-party providers)
- Subscription preferences and history
2.2 Information We Collect Automatically
Usage Data:
- Pages visited and features used
- Time spent on the Platform
- Click patterns and navigation paths
- Search queries and filters used
- Device and browser information
Technical Information:
- IP address and general location
- Device type, operating system, and browser version
- Screen resolution and device identifiers
- Referral sources and exit pages
- Date and time of access
Cookies and Similar Technologies:
- Authentication tokens
- Preference settings
- Analytics and performance data
- Security and fraud prevention information
2.3 Information from Third Parties
Purchase Verification:
- Order confirmation emails (when provided by users)
- Purchase receipts (when uploaded by users)
- Third-party verification services (when used)
Business Verification:
- Business registration databases
- Professional licensing information
- Public business directories
Social Media Integration:
- Profile information when logging in through social platforms
- Public business information from social media profiles
3. How We Use Your Information
3.1 Platform Operations
For All Users:
- Provide and maintain our review platform services
- Authenticate user accounts and prevent unauthorized access
- Process and display reviews and ratings
- Facilitate communication between businesses and customers
- Ensure platform security and prevent fraud
For Customer Users:
- Verify the authenticity of reviews
- Personalize content and recommendations
- Send notifications about review responses
- Provide customer support
For Business Users:
- Verify business identity and legitimacy
- Process subscription payments and billing
- Provide access to premium features and analytics
- Send account updates and service notifications
- Generate reports and insights about review performance
3.2 Communication
Service Communications:
- Account verification and security notifications
- Review publication confirmations
- Response notifications from businesses
- Platform updates and policy changes
Marketing Communications (with consent):
- Newsletter and platform updates
- Feature announcements and tips
- Industry insights and best practices
- Promotional offers for business subscriptions
3.3 Legal and Safety
- Comply with legal obligations and court orders
- Investigate and prevent fraudulent activity
- Enforce our Terms of Use and community guidelines
- Protect the rights, property, or safety of BrandRed and our users
- Resolve disputes and respond to legal requests
3.4 Analytics and Improvement
- Analyze platform usage patterns and trends
- Improve our services and user experience
- Develop new features and functionality
- Conduct research on review authenticity and quality
- Generate aggregated insights (without personal identification)
4. How We Share Your Information
4.1 Public Information
Publicly Visible Content:
- Reviews and ratings you publish
- Your display name (not full name unless you choose)
- Profile photo (if provided)
- General location (country/region, not specific address)
- Review publication dates
Business Profile Information:
- Business name and description
- Business location and contact information
- Business responses to reviews
- Aggregate rating and review statistics
4.2 With Your Consent
- Third-party integrations you authorize
- Social media sharing when you choose to share
- Marketing communications to businesses (when you opt-in)
4.3 Service Providers
We share information with trusted third-party service providers who help us operate our Platform:
Technology Providers:
- Cloud hosting and infrastructure services
- Email delivery and communication platforms
- Analytics and monitoring tools
- Security and fraud prevention services
Business Services:
- Payment processing (for business subscriptions)
- Customer support platforms
- Legal and compliance services
- Professional services (auditing, consulting)
All service providers are contractually bound to protect your information and use it only for the specific services they provide to us.
4.4 Legal Requirements
We may disclose information when required by law or when we believe disclosure is necessary to:
- Comply with legal process or government requests
- Investigate potential violations of our Terms of Use
- Protect against fraud, security threats, or illegal activity
- Protect the rights, property, or safety of BrandRed, our users, or the public
4.5 Business Transfers
If BrandRed is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change in ownership or control.
5. Data Security
5.1 Security Measures
We implement industry-standard security measures to protect your information:
- Encryption of data in transit and at rest
- Two-factor authentication options
- Regular security audits and assessments
- Access controls and employee training
- Secure payment processing through certified providers
5.2 Account Security
You can help protect your account by:
- Using a strong, unique password
- Enabling two-factor authentication
- Keeping your contact information updated
- Reporting suspicious activity immediately
- Logging out from shared devices
5.3 Data Breach Response
In the event of a data breach that affects your personal information, we will:
- Notify affected users promptly (within 72 hours when possible)
- Provide details about what information was involved
- Explain the steps we're taking to address the breach
- Offer guidance on protecting yourself from potential harm
6. Your Privacy Rights and Choices
6.1 Account Management
Access and Update:
- View and edit your profile information
- Update communication preferences
- Manage review visibility settings
- Download your account data
Account Deletion:
- Delete your account at any time through settings
- Request complete data removal (subject to legal retention requirements)
- Transfer or export your data before deletion
6.2 Communication Preferences
Email Controls:
- Unsubscribe from marketing emails
- Manage notification settings
- Choose communication frequency
- Opt-out of non-essential communications
6.3 Regional Privacy Rights
European Union (GDPR):
- Right to access your personal data
- Right to rectify inaccurate information
- Right to erase your data ("right to be forgotten")
- Right to restrict processing
- Right to data portability
- Right to object to processing
California (CCPA/CPRA):
- Right to know what personal information we collect
- Right to delete personal information
- Right to opt-out of sale of personal information
- Right to non-discrimination for exercising privacy rights
- Right to correct inaccurate personal information
Other Jurisdictions:
We comply with applicable privacy laws in all regions where we operate and will honor equivalent rights where legally required.
6.4 Exercising Your Rights
To exercise your privacy rights, contact us at:
- Email: privacy@brandred.net
- Privacy request form on brandred.net
- Written request to our address listed in Section 12
We will respond to verified requests within the timeframes required by applicable law (typically 30-45 days).
7. Children's Privacy
BrandRed is not intended for users under 18 years of age. We do not knowingly collect personal information from children under 18. If we discover that we have collected information from a child under 18, we will delete that information promptly.
If you are a parent or guardian and believe your child has provided personal information to BrandRed, please contact us immediately at privacy@brandred.net.
8. International Data Transfers
BrandRed operates internationally and may transfer your information to countries other than your own. When we transfer information internationally, we ensure appropriate safeguards are in place, including:
- Standard Contractual Clauses approved by relevant authorities
- Adequacy decisions by applicable data protection authorities
- Other legally recognized transfer mechanisms
- Additional security measures for sensitive information
9. Data Retention
9.1 General Retention
We retain your information for as long as necessary to provide our services and fulfill the purposes described in this Privacy Policy, unless a longer retention period is required by law.
Account Information:
- Active accounts: Retained while account is active
- Deleted accounts: Most data deleted within 30 days
- Legal holds: Retained as required by law or legal process
Review Content:
- Published reviews: Retained to maintain platform integrity
- Unpublished drafts: Deleted after 1 year of inactivity
- Reported content: Retained for moderation and appeals
Business Data:
- Active subscriptions: Retained while subscription is active
- Cancelled subscriptions: Retained for 7 years for tax/legal purposes
- Analytics data: Aggregated data retained indefinitely
9.2 Legal and Safety Retention
Some information may be retained longer when necessary for:
- Legal compliance and regulatory requirements
- Tax and financial record keeping
- Fraud prevention and security
- Protecting legal rights and resolving disputes
10. Cookies and Tracking Technologies
10.1 Types of Cookies We Use
Essential Cookies:
- Authentication and security
- Platform functionality
- User preferences and settings
Analytics Cookies:
- Usage statistics and performance monitoring
- Feature effectiveness measurement
- User experience optimization
Marketing Cookies (with consent):
- Advertising effectiveness measurement
- Social media integration
- Third-party marketing platforms
10.2 Cookie Management
You can control cookies through:
- Browser settings and preferences
- Our cookie consent manager
- Third-party opt-out tools
- Platform-specific privacy settings
Note that disabling certain cookies may limit Platform functionality.
10.3 Third-Party Analytics
We use analytics services including:
- Google Analytics (with privacy controls enabled)
- Internal analytics tools
- Security monitoring services
These services may collect information about your online activities across different websites and services.
11. Third-Party Links and Integrations
11.1 External Links
Our Platform may contain links to third-party websites, including:
- Business websites mentioned in reviews
- Social media platforms
- Partner services and integrations
We are not responsible for the privacy practices of these third parties. We encourage you to read their privacy policies before providing any information.
11.2 Business Integrations
Businesses may integrate BrandRed widgets on their websites to display reviews. These integrations:
- Display only publicly available review content
- Do not share personal information beyond what's already public
- Are governed by the business's own privacy policy for their website
11.3 Social Media
If you connect your social media accounts or share content through social platforms:
- We may receive basic profile information
- Your activity may be visible to your social media connections
- Social media platforms' privacy policies apply to their handling of your data
12. Contact Information
12.1 Privacy Questions
For questions about this Privacy Policy or our privacy practices:
- Email: privacy@brandred.net
- Privacy Request Form: Available at brandred.net/privacy
- Mail: BrandRed Privacy Team, 7600 Ambergate Pl, Riverside, CA 92504, USA
12.2 Data Protection Officer
For users in the European Union:
- Email: dpo@brandred.net
- Mail: Data Protection Officer, BrandRed, 7600 Ambergate Pl, Riverside, CA 92504, USA
12.3 General Support
For other questions or support:
13. Updates to This Privacy Policy
13.1 Policy Changes
We may update this Privacy Policy from time to time to reflect:
- Changes in our practices or services
- Legal or regulatory requirements
- User feedback and best practices
- Technology improvements
13.2 Notification of Changes
When we make significant changes to this Privacy Policy, we will:
- Post the updated policy on brandred.net
- Send email notification to registered users
- Provide notice through our Platform
- Update the "Last Updated" date at the top of this policy
13.3 Continued Use
Your continued use of BrandRed after we post changes constitutes acceptance of the updated Privacy Policy. If you disagree with changes, you may delete your account before the changes take effect.
14. Legal Basis for Processing (EU Users)
For users in the European Union, we process personal information based on the following legal bases:
Consent: Marketing communications, optional features, cookies (where required)
Contract Performance: Account management, review processing, subscription services
Legitimate Interests: Platform security, fraud prevention, analytics, business operations
Legal Obligation: Compliance with laws, regulations, and legal processes
You have the right to withdraw consent at any time where we rely on consent as the legal basis for processing.
