Privacy Policy

Owner / Data Controller

BrandVerita is operated by Thitiphan Phiphatthaloengkun, based in 537, 700 PI RD - Chiang Mai - Thailand (the “Owner” or “BrandVerita”).

Questions, requests, or notices relating to this Privacy Policy may be sent to [email protected].

Scope

This Privacy Policy applies to information collected through the Service, including account creation, login and authentication, review imports, content management workflows, widgets and embeds, QR links, review collection forms, support interactions, analytics, and subscription billing.

It applies to the BrandVerita application and to the BrandVerita websites at brandverita.io and brandverita.com, including their subdomains.

This Privacy Policy does not apply to third-party websites, platforms, or services that may be linked to, embedded into, connected with, or used alongside the Service, including payment providers, external review platforms, and third-party websites where users choose to publish or display content.

Types of Data Collected

Depending on how the Service is used, BrandVerita may collect or process the following categories of information:

• Account data, such as first name, last name, display name, email address, password, organization or business name, account preferences, and user identifiers.
• Profile and business information, such as business details, profile settings, widget settings, review request settings, branding preferences, tags, notes, and metadata.
• Content and submitted data, such as reviews, ratings, testimonials, imported third-party review content, uploaded media, form submissions, and related metadata.
• Usage data, such as IP address, browser type, device information, operating system, timestamps, referral URLs, pages visited, feature interactions, and approximate geolocation inferred from technical data.
• Billing and subscription data, such as billing status, subscription plan, renewal dates, invoices, country, tax-related information, and limited transaction information received from payment processors.
• Support and communication data, such as emails, chat messages, contact requests, feedback, and troubleshooting details submitted to BrandVerita.
• Cookie, session, and tracker data used for authentication, security, preferences, analytics, and performance measurement.

Mandatory and Optional Data

Some information requested by BrandVerita is necessary to create accounts, authenticate users, provide the Service, process subscriptions, maintain security, or perform contractual obligations. If required information is not provided, some or all parts of the Service may be unavailable.

Where BrandVerita specifically identifies information as optional, users may choose not to provide it, although doing so may limit certain features, personalization options, or support capabilities.

How Data Is Collected

BrandVerita may collect personal information directly from users, automatically through use of the Service, and from third parties or integrations enabled by users. Data may be collected during signup, login, subscription checkout, review import workflows, widget or embed configuration, form submissions, support requests, and normal use of the Service.

Where users connect third-party services or import data from external sources, BrandVerita may receive content, metadata, public business information, and other data made available through those integrations or sources.

How Information Is Used

BrandVerita may use information to create and manage user accounts, authenticate access, provide and operate the Service, render widgets and embeds, generate review request links and forms, process subscriptions, send transactional communications, respond to support requests, and maintain the security and integrity of the Service.

Information may also be used to monitor usage, improve the Service, troubleshoot problems, develop new features, enforce the Terms of Service, investigate abuse or misuse, prevent fraud, comply with legal obligations, and protect the rights, property, and safety of BrandVerita, users, and third parties.

Legal Bases for Processing

Depending on the user’s location and applicable law, BrandVerita may process personal information where: (a) processing is necessary to provide the Service or perform a contract; (b) processing is necessary to comply with a legal obligation; (c) processing is necessary for BrandVerita’s legitimate interests, such as security, fraud prevention, product improvement, service administration, and enforcement of its agreements; or (d) the user has given consent, where consent is required by law.

Where BrandVerita relies on consent, users may withdraw that consent at any time, subject to the lawfulness of processing carried out before withdrawal.

Review Imports and Third-Party Data

The Service may allow users to import, collect, organize, display, or publish review content and related data from third-party sources. Those third-party sources are not owned or controlled by BrandVerita, and BrandVerita does not guarantee the availability, legality, continued access, completeness, or accuracy of any third-party source, import method, or integration.

Users are solely responsible for ensuring that they have the rights, permissions, notices, consents, and lawful basis needed to access, import, store, publish, display, share, or otherwise use any third-party content or third-party personal data through the Service.

Cookies and Similar Technologies

BrandVerita may use cookies, local session identifiers, pixels, scripts, and similar technologies for authentication, session management, fraud prevention, security, analytics, feature performance, and user preferences.

Some cookies or trackers may be necessary for the Service to function properly. Others may be used to understand traffic, measure product performance, or improve user experience.

Users may be able to control cookies through browser settings or device settings, but disabling certain cookies may limit the functionality or availability of some parts of the Service. Where required by applicable law, BrandVerita may provide additional notices, controls, or consent mechanisms.

Payments and Billing

Paid subscriptions may be processed through Stripe or another third-party payment provider. BrandVerita does not directly store full payment card details and instead receives limited billing, subscription, and transaction status information needed to activate plans, manage renewals, prevent fraud, respond to billing issues, and maintain subscription records.

Payment providers process payment information under their own terms and privacy practices, and users should review those providers’ policies for more information about how payment data is handled.

Sharing of Information

BrandVerita may share information with third-party service providers, contractors, subprocessors, and advisers that support the operation of the Service, such as hosting providers, infrastructure providers, authentication services, database providers, analytics providers, email or communications tools, payment processors, support tools, legal advisers, and security providers.

Information may also be shared where reasonably necessary to detect, prevent, or investigate fraud, security incidents, abuse, unlawful activity, or violations of the Terms of Service; to protect rights, safety, and property; to comply with law, regulation, legal process, or lawful requests from public authorities; or to enforce agreements.

If BrandVerita is involved in a merger, acquisition, financing, reorganization, sale of assets, business transfer, or similar transaction, information may be disclosed or transferred as part of that process subject to applicable legal and confidentiality protections.

Third-Party Services and Processors

BrandVerita may use third-party providers to operate the Service. These may include providers for hosting, infrastructure, authentication, databases, analytics, billing, email delivery, customer support, security, and embedded content delivery.

Where relevant, users may request more information about the categories of processors used by BrandVerita or, where appropriate, an updated list of major service providers involved in processing personal information for the Service.

Methods and Place of Processing

BrandVerita processes information using computers, software systems, cloud infrastructure, and related organizational and technical procedures reasonably necessary for the purposes described in this Privacy Policy.

Data may be processed by BrandVerita and by authorized persons or service providers involved in administration, product development, customer support, billing, security, legal compliance, analytics, and system operations.

Processing may take place in the country where the Owner is based and in other countries where BrandVerita or its service providers operate.

International Transfers

The Service may be operated from different locations and may rely on service providers in multiple countries. As a result, personal information may be transferred to, processed in, or stored in a jurisdiction other than the user’s own jurisdiction, where privacy laws may differ.

Where required by applicable law, BrandVerita will take steps intended to use an appropriate legal basis or safeguard for such transfers, which may include contractual protections, consent, necessity for the performance of a contract, or other lawful transfer mechanisms.

Data Retention

BrandVerita retains personal information for as long as reasonably necessary for the purposes for which it was collected, including to provide the Service, maintain accounts, process transactions, support business operations, enforce agreements, resolve disputes, comply with legal obligations, protect the Service, and maintain appropriate records.

In general, account-related data may be retained while an account remains active and for a reasonable period afterward. Billing, tax, fraud-prevention, legal, security, backup, and dispute-related records may be retained for longer where reasonably necessary or required by law.

After applicable retention periods expire, BrandVerita may delete, anonymize, or de-identify data, subject to technical limitations, backups, archives, and legal requirements.

Data Security

BrandVerita uses reasonable administrative, technical, and organizational safeguards designed to protect information against unauthorized access, disclosure, alteration, misuse, or destruction.

However, no method of transmission over the internet and no method of electronic storage is completely secure, and BrandVerita cannot guarantee absolute security.

User Rights and Choices

Subject to applicable law, users may have the right to request access to personal information, request correction or updating of inaccurate information, request deletion of certain information, object to certain processing, request restriction of processing, withdraw consent where consent applies, and request export or portability of certain data where technically feasible and legally required.

Users in certain jurisdictions may also have the right to lodge a complaint with a competent data protection or privacy authority.

Users may also update some account information directly through available account settings.

How to Exercise Rights

Requests relating to privacy rights, account closure, access, deletion, correction, or other privacy matters may be sent to [email protected].

BrandVerita may request information reasonably necessary to verify the identity and authority of the requestor before fulfilling a request. BrandVerita will respond within the time required by applicable law, or within a reasonable time where no specific legal deadline applies.

System Logs and Maintenance

For operation, maintenance, debugging, and security purposes, BrandVerita and third-party service providers may collect system logs and technical records that record interactions with the Service, such as IP address, error logs, request metadata, browser information, and similar technical information.

Legal Disclosures and Enforcement

BrandVerita may use or disclose personal information where reasonably necessary in connection with legal claims, dispute resolution, enforcement of its agreements, fraud prevention, abuse investigation, or protection of BrandVerita, users, or third parties.

BrandVerita may also disclose personal information if required to do so by law, regulation, court order, subpoena, or other lawful request from public authorities.

Do Not Track

The Service does not currently respond to browser “Do Not Track” signals unless and until required by applicable law. Users should review the privacy policies of third-party services used with the Service to determine whether those services honor such signals.

Children

The Service is not directed to children under 13, and children under 13 may not use the Service. If BrandVerita becomes aware that personal information has been collected from a child under 13 without appropriate authorization where required, BrandVerita may take steps to delete that information.

Changes to This Policy

BrandVerita may update this Privacy Policy from time to time to reflect changes in the Service, legal requirements, technology, provider relationships, or business practices. Updated versions will be posted with a revised “Last updated” date.

Where appropriate, BrandVerita may also provide notice of material changes through the Service or by email or other account contact information.

Contact

Questions or requests regarding this Privacy Policy should be sent to [email protected].