Privacy policy
Last updated 31 October 2026
BrandXen is a CRM and advertising platform operated by Technical Ventures & Management LLP, Pine 1612, 16th Floor, Paramount Golf Foreste, Zeta - 1, Greater Noida, Uttar Pradesh 201310, India (“we”, “us”). This policy explains what we collect, why, where it is kept and the choices you have. It is written to meet India’s Digital Personal Data Protection Act, 2023.
Two kinds of data
- Your account data: your name, work email, password (stored only as a one-way hash), two-factor settings, the organizations you belong to, billing details for GST invoices, and records of sign-ins and changes kept for security.
- Your customers’ data: the leads, contacts, companies, deals, notes and files your organization adds or imports, and data from advertising accounts you connect. For this data your organization decides what is collected and why; we process it on your instructions only.
How we use data
- To run the service you signed up for, keep it secure and give you support.
- To send service emails such as sign-in links, invitations and invoices. We send no marketing email without your consent.
- To bill you and meet tax and legal duties.
- For AI features you choose to use, such as lead scoring: business facts about a record (company, role, industry, website, place) are sent to Anthropic for an answer. A person’s name, email address and phone number are not sent.
We do not sell personal data, and we do not use your customers’ data for our own advertising.
Connected advertising accounts
When you connect Meta, Google or LinkedIn, we receive access tokens and the data those platforms allow for the permissions you approve: ad accounts, campaigns, performance figures and lead-form submissions. We use it only to show and manage your advertising inside BrandXen. Tokens are stored encrypted. You can disconnect at any time in BrandXen, or remove the app from the platform’s own settings; either stops further access. BrandXen’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.
Where data is kept and who helps us
Data is stored on servers we operate in India, with encrypted backups held by Cloudflare. We use these service providers, each bound to protect data and use it only for us: Cloudflare (network and backup storage), Amazon Web Services (email delivery), Anthropic (AI features), and Razorpay (payments). Card and UPI details are handled by Razorpay and never reach our servers.
How long we keep data
We keep data while your organization’s account is active. After an account is closed we delete or anonymize it within 90 days, except where law requires us to keep records, such as invoices for eight years. Backups age out within 30 days.
Security
Data is encrypted in transit; secrets and tokens are encrypted at rest; each organization’s data is kept apart by database-level controls; and two-factor sign-in is available to everyone and can be required by an organization.
Your rights
You can ask to see, correct or delete your personal data, withdraw consent, or nominate someone to act for you. See how to delete your data. If your data is in a BrandXen customer’s account, contact that organization first; we will help them answer you.
Grievance officer and contact
Grievance Officer, Technical Ventures & Management LLP, at the address above. Email [email protected]. We acknowledge complaints within 48 hours and resolve them within 30 days. You may also approach the Data Protection Board of India.
Changes
We will post any change here and, for significant changes, email account owners beforehand.