Privacy Policy

Effective date: 11 July 2026

This policy explains how Jugraj Solutions ("we", "us"), the operator of Brand Scalers, collects, uses, stores and deletes personal data. It covers our website at https://brandscalers.in, our web application, and the services we provide through them. We have written it in plain language on purpose. If anything is unclear, write to kushagra@brandscalers.in and we will explain.

1. Who we are

Brand Scalers is a marketing platform operated by Jugraj Solutions, based in India. For the purposes of applicable data protection law, including India's Digital Personal Data Protection Act, 2023, Jugraj Solutions is the data fiduciary for data collected through this website, and processes customer campaign data on our customers' instructions.

2. What data we collect

Data you give us directly

Contact details when you fill a form or book a demo: name, phone number, email, business type and anything you write in a message.
Account details when you sign up: name, email, business name and password (stored only in hashed form).
Billing details when you subscribe: plan, invoices and payment status. Card and bank details are handled by our payment processor and never touch our servers.

Data from connected platform accounts

When you connect your Amazon, Meta, Google or LinkedIn accounts to the platform, we access data through their official APIs, only with your explicit authorisation and only to provide the service:

Ad account structure: campaigns, ad sets, ads, budgets and settings.
Performance metrics: impressions, clicks, spend, conversions and similar statistics.
Lead data submitted by your potential customers through lead forms you run, which we deliver to you.
Page and business profile information needed to run campaigns on your behalf.

Amazon seller data

If you connect an Amazon seller or advertising account, we use Amazon's official APIs to retrieve only the data needed for the features you enable. The initial service does not request restricted Orders roles or Amazon buyer personally identifiable information.

Seller account and marketplace identifiers needed to maintain the authorised connection.
Catalog and listing data, including SKUs, ASINs, titles, attributes and listing status.
Inventory quantities, prices and fulfilment or availability status.
Advertising campaign structure, budgets, status and aggregated performance metrics.
Aggregated business and product-performance reports made available by the permissions you approve.

We use Amazon data only to show your own reports and to perform actions you explicitly request or approve. We do not sell it, use it to advertise unrelated products, build profiles of Amazon buyers, or share one seller's data with another seller. Disconnecting the integration stops new API access; you can also revoke authorisation in Amazon Seller Central.

We request the minimum permissions needed for the features you use. You can disconnect any account at any time from your settings page, which revokes our access.

Data collected automatically

Basic usage data: pages visited, features used, approximate location from IP address, browser and device type.
Cookies as described in our cookie policy.

3. How we use data

To provide the service: planning, running and reporting on your campaigns.
To deliver leads from your campaigns to you quickly.
To respond to enquiries and provide support.
To bill you and maintain business records required by law.
To improve the platform, using aggregated and de-identified information wherever possible.
To keep the service secure and prevent abuse.

We do not sell personal data. We do not use your customers' lead data for anything except delivering it to you and showing you your own reporting.

4. Platform-specific commitments

Amazon seller data is handled in accordance with the Amazon Selling Partner API policies and Acceptable Use Policy. Amazon credentials are encrypted separately from application data, access is logged, and only authorised members of your workspace can view or act on the connected account. BrandScalers.ai is an independent service and is not endorsed by or affiliated with Amazon.

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Data obtained through Google APIs is used only to provide user-facing features of the platform, is never sold, and is never used for advertising unrelated to the service you asked us to provide.

Our use of Meta Platform data complies with the Meta Platform Terms. Lead data retrieved from Meta lead ads is delivered to the business that ran the campaign and is not shared with or sold to anyone else.

Our use of LinkedIn data complies with the LinkedIn API Terms of Use and is limited to managing campaigns you authorise.

5. When we share data

We share data only with:

Service providers we use to run the platform, such as cloud hosting, database and email providers, bound by their own confidentiality and data protection obligations.
The advertising platforms you connect, to the extent needed to run your campaigns.
Authorities, if the law requires it and the request is valid.

6. How long we keep data

Enquiry form data: up to 24 months after last contact, then deleted.
Account and campaign data: for as long as your account is active, then deleted within 90 days of account closure, except records we must keep for tax and accounting law.
Lead data belonging to your customers: retained while your account is active so your reports stay accurate, deleted on the same schedule, and earlier if you or the person concerned asks.
Amazon non-personal seller data: retained only while needed to provide the service and never longer than 18 months, unless law requires a specific record to be kept.
Amazon credentials: deleted when you disconnect the integration or close your account. If Amazon directs us to delete Amazon data, we complete the deletion within 30 days.
Security audit records: retained for 12 months or longer where required for investigation, without storing Amazon buyer PII or access tokens in logs.

7. Your rights

You can, at any time:

Ask what personal data we hold about you.
Ask us to correct it.
Ask us to delete it. See our data deletion page for the exact steps and timelines.
Withdraw consent for any processing based on consent.
Complain to the relevant data protection authority.

To exercise any of these, email kushagra@brandscalers.in. We respond within 7 business days and complete verified requests within 30 days.

8. Security

Data is encrypted in transit, access is restricted to people who need it for their work, and API credentials for your connected accounts are stored encrypted. More detail is on our security page. No system is perfectly secure; if a breach ever affects your data, we will inform you promptly and honestly.

9. Children

The service is for businesses and is not directed at children. We do not knowingly collect data from anyone under 18. If you believe we have, contact us and we will delete it.

10. Changes to this policy

If we change this policy, we will update the effective date at the top and, for significant changes, notify account holders by email before the change takes effect.

11. Contact

Jugraj Solutions
Teja 309, My Home Navadweepa, Hitech City, Hyderabad, India 500081
Email: kushagra@brandscalers.in
General contact: getintouch@brandscalers.in