Privacy Policy — BrandSmith

BrandSmith Technologies Ltd (“BrandSmith”, “we”, “us”) operates the BrandSmith platform accessible at brandsmith.ke and related subdomains. This Privacy Policy explains how we collect, use, and protect your personal information.

1. Information We Collect

We collect information you provide directly, including:

Account details: name, email address, password (hashed)
Profile information: business name, bio, portfolio, service categories, location
Transaction data: subscription payments, billing records
Communications: briefs, proposals, and messages sent through the platform

We also collect data automatically: IP address, browser type, pages visited, and usage analytics through Cloudflare Web Analytics (privacy-first, no cookies).

2. How We Use Your Information

To provide and improve the BrandSmith platform
To match businesses with relevant providers in their region
To process payments and manage subscriptions
To send transactional emails (account activity, new briefs, proposals)
To detect fraud and ensure platform security

3. Data Sharing

We do not sell your personal data. We share data only with:

Service providers — Neon (database), Cloudflare (hosting), Resend (email), Paystack (payments). Each is bound by data processing agreements.
Other platform users — Provider profiles are visible to businesses on the platform. Brief details are shared with relevant providers.
Legal requirements — Where required by applicable law or court order.

4. Data Retention

We retain your account data for as long as your account is active. You may request deletion at any time by emailing privacy@brandsmith.ke. Deleted accounts are purged within 30 days, except where retention is required by law.

5. Security

We use industry-standard encryption (TLS) for data in transit and at rest. Passwords are hashed using bcrypt. Access to production systems is restricted to authorised personnel only.

6. Your Rights

Depending on your jurisdiction, you may have rights to access, correct, port, or delete your personal data. To exercise any of these rights, contact us at privacy@brandsmith.ke.

7. Cookies

BrandSmith uses only essential session cookies required for authentication. We do not use advertising or tracking cookies. Our analytics (Cloudflare Web Analytics) are cookieless.

8. Changes to This Policy

We may update this policy from time to time. We will notify registered users of material changes by email. Continued use of the platform after changes constitutes acceptance.

9. Contact

For privacy-related enquiries: privacy@brandsmith.ke
BrandSmith Technologies Ltd, Nairobi, Kenya.