Privacy Policy

01Scope

This Privacy Policy explains how The Brands List (“we”) collects, uses, shares and protects personal data when you use The Brands List. It is issued in accordance with India’s Digital Personal Data Protection Act, 2023 and the Information Technology (Reasonable Security Practices) Rules, 2011. By using the Platform you consent to the practices described here.

02What we collect

03How we use it

• to create and operate your account and your business listing;
• to process subscription payments, issue invoices and prevent fraud;
• to show businesses their leads, views and analytics;
• to build a creator’s public marketplace profile and let businesses discover, compare and contact creators for paid collaborations;
• to send transactional email (confirmations, receipts, review and lead notifications);
• to moderate reviews and listings and enforce our Terms;
• to improve the Platform and understand which features are used;
• to comply with legal obligations and respond to lawful requests.

04Why we are allowed to process it

We process personal data to perform our contract with you (running your account and listing), to comply with law (tax and accounting records), and for our legitimate interests in securing and improving the Platform. Where the law requires consent — for example certain analytics — we rely on the consent you give by using the Platform, which you may withdraw as described below.

05Who we share it with

We do not sell your personal data. We share it only with:

We may also disclose data if required by law, to enforce our Terms, or in connection with a merger or acquisition (you will be notified). Your public business or creator profile and published reviews are, by their nature, visible to everyone.

06Instagram data

This section applies only to creators who choose to connect an Instagram account from their creator dashboard. It is provided to meet Meta’s Platform requirements.

• What we obtain: your Instagram username and account type, follower count, media count, the like and comment counts of your recent posts, your 28-day reach, and the play counts of your recent reels.
• Why: to display a verified follower count, engagement rate and average views on your public creator profile and in marketplace search results, so businesses can evaluate your audience before offering a paid collaboration.
• Refresh: these numbers are refreshed about once per day; we keep only the latest values plus a short history of past snapshots for trend display.
• Sharing: this data is shown on your profile and to businesses browsing the marketplace. It is never sold, shared with advertisers or data brokers, or used for ad targeting.
• Your control: click Disconnect on your Social accounts page, or remove our app from Instagram’s settings, at any time. Either action immediately deletes the stored access token and stops all further syncing. To delete the metrics already collected, or your whole creator profile, email info@thebrandslist.online.

07Cookies & local storage

We use a small number of essential cookies and browser localStorage to keep you signed in and remember preferences (such as your active business). You can clear these from your browser settings; essential storage is required for the Platform to function.

Analytics is opt-in. Google Analytics and PostHog are not loaded and set no cookies unless you choose “Accept analytics” in the banner. You can change your choice at any time from Cookie settings in the footer, and we honour a browser’s Global Privacy Control signal as a decline.

To keep the Platform safe we also use Cloudflare Turnstile on sign-up, log-in and contact forms (bot detection), and an error-monitoring service that receives technical details about crashes (browser, page and error message — not form contents).

08How long we keep it

We keep account and listing data for as long as your account is active. After you delete your account we remove or anonymise personal data within 90 days, except records we must retain for legal, tax or dispute-resolution purposes (typically up to 8 years for financial records under Indian law).

09Your rights

Subject to law, you can:

• access the personal data we hold about you and ask for a copy;
• correct inaccurate data — most of it you can edit yourself in your dashboard;
• ask us to delete your account and data;
• withdraw consent for non-essential processing;
• nominate another person to exercise your rights in the event of death or incapacity.

To exercise any of these, email info@thebrandslist.online. We respond within 30 days.

10Security

Data is encrypted in transit (TLS) and at rest by our infrastructure providers. Access is role-based and every database table is protected by row-level security. No system is perfectly secure — if we become aware of a breach affecting your data, we will notify you and the Data Protection Board of India as required.

11Children

The Platform is not directed to anyone under 18. We do not knowingly collect data from children. If you believe a child has given us data, contact us and we will delete it.

12Grievance officer

In accordance with the Information Technology Act, 2000 and the DPDP Act, 2023, our Grievance Officer is Nirmal Kanani. Write to info@thebrandslist.online or to The Brands List, Surat, Gujarat 395004, India. We acknowledge grievances within 24 hours and resolve them within 15 days.

13Changes

We may update this policy. Material changes will be notified by email or an in-app notice, and the “last updated” date above will change. See also our Terms of Service.