BRANDWARDEN
DraftThis text is waiting for review by our lawyer and is not in force. Details in square brackets are left out of this draft.
Privacy

How we handle your data.

We collect as little personal data as we can. This site uses two cookies it cannot work without, and no advertising or tracking cookies. Brandwarden AI checks the pages and screenshots you add, never types anything into a page and never asks for your customers' details.

  1. 01Who we are

    Brandwarden is run by [company name, registration number and address]. For anything about your data, write to hello@brandwarden.cloud.

  2. 02What we collect on this site

    • When you sign up or log in: your email address and the set up of your authenticator app. Sign in is handled by our cloud provider's sign in service [provider named in the final text], in its Cape Town region. We never see your password or your authenticator codes.
    • While you are signed in: a signed session cookie holding your account number and email address, for up to 12 hours.
    • While you sign in: a short cookie that protects the sign in from forgery, for up to 30 minutes.
    • While you use the workspace: the brands, logos, screenshots and web addresses you add, the results Brandwarden AI gives for them, the authorised addresses you list, and the decisions, approvals and reports you save, each with your email address and any reason or note you write.
    • A record of each action: we keep it with your account number and not your email address.
    • In your browser: two small notes, never sent to us: the kind of test page each case used, while the tab is open, and which cases you have opened again.
    • When you email us: your message and the contact details you give us.
    • When you visit: our web server keeps your IP address, the time, the kind of request and the answer for up to 30 days, to keep the site secure. It does not keep the address of the page you asked for.

  3. 03What Brandwarden collects when it looks for fakes

    In the workspace, Brandwarden AI checks the test pages and screenshots you add, and keeps them with its results as evidence for your account only, behind access controls. Our tests also read public certificate logs and public pages from separate test machines. A captured fake page can show personal data that a scammer put there. We never type into, submit or log in to any page.

    We do not collect your customers' details, and we never ask for them.

  4. 04Why we use your data

    • To give you an account and keep it secure (our contract with you).
    • To answer your messages and requests for a demo (your request).
    • To find and report fake pages for a brand that has authorised us in writing (our legitimate interest in preventing fraud, and the brand's instructions).
    • To meet our duties under Nigerian law.

  5. 05Where your data is kept

    Our systems run with our cloud provider [named in the final text] in Cape Town, South Africa. Moving personal data outside Nigeria needs a basis under sections 41 to 43 of the Nigeria Data Protection Act 2023; the basis we rely on is [named in the final text].

  6. 06How long we keep it

    • Session cookie: up to 12 hours. Sign in cookie: up to 30 minutes.
    • Emails: as long as we need them to answer you and keep a record of what was agreed.
    • What you add in the workspace: nothing deletes it automatically. Nightly backups of it are kept for up to 21 days.
    • Evidence of fake pages: for the period agreed in each brand's contract, then deleted. [Retention periods to be confirmed.]

  7. 07Who we share it with

    • Service providers that run our systems for us, under contract [named in the final text].
    • The registry, web host or platform we report a fake page to, and only the evidence about that page, for a brand that has authorised us.
    • Authorities, when Nigerian law requires it.

  8. 08Your rights

    Under the Nigeria Data Protection Act 2023 you can ask to see, correct or delete your data, to limit or object to how we use it, to receive it in a portable form, and to withdraw consent where we rely on it. Write to hello@brandwarden.cloud.

    You can also complain to the Nigeria Data Protection Commission.

  9. 09We never sell your data

    We do not sell personal data, and we do not use it for advertising.

  10. 10Changes to this page

    If we change how we handle your data, we update this page and, for account holders, tell you by email before the change applies.

Questions about this page: hello@brandwarden.cloud