Privacy Policy

Last updated: September 24, 2026

1. Scope

This Privacy Policy explains how Brands Nexus Network Limited, operating as BrandsTrack ("we", "us"), collects, uses, and protects information when you use our website, console, and API (the "Service"). Brands Nexus Network Limited is a private company limited by shares incorporated in the Federal Republic of Nigeria, registration number 9736925. This Policy covers two different kinds of information: information about you, our customer, and information our Service surfaces about third parties – such as executives – that you choose to monitor.

2. Information we collect about you

  • Account information: name, email address, company name, and password. Passwords are stored hashed; we never store or can see your plaintext password.
  • Billing information: processed directly by our payment partners (Paystack, Flutterwave, and/or Stripe, depending on which are enabled for your account). We receive confirmation of payment and a reference ID, not your full card number.
  • Configuration data: the brands, executives, and search queries you set up for monitoring.
  • Usage data: log-in activity, feature usage, and messages you send to our AI assistant, kept to operate and improve the Service.
  • Communications: messages you send us through the contact form or support email.

3. Information the Service collects about monitored third parties

When you configure the Service to monitor a brand or an executive, the Service collects and analyzes information that is already publicly available: news articles, media coverage, and outputs from AI systems responding to public queries. We do not collect private, non-public information about monitored individuals, and we do not obtain any information directly from those individuals – everything is sourced from public media and public AI outputs. This data is kept for the retention period attached to your subscription plan (ranging from 90 days to several years depending on plan) and removed on a rolling basis once that period passes.

4. How we use information

  • To provide, maintain, and bill for the Service;
  • To generate the monitoring, alerting, and reporting features you configure;
  • To respond to support and sales enquiries;
  • To detect, prevent, and address fraud, abuse, and security issues; and
  • To comply with our legal obligations.

5. Who we share data with

We use the following third-party service providers to operate the Service. Your data may pass through them as a normal part of running BrandsTrack:

  • OpenAI, Anthropic, and Perplexity (AI providers, United States) – to generate analysis, summaries, and answer assistant questions. Prompts sent to these providers may include your configured brand/executive names and the public media text being analyzed.
  • Paystack and Flutterwave (payment processors, Nigeria) and/or Stripe (payment processor, United States) – to process subscription payments, depending on which are enabled for your account.
  • Our web hosting and email delivery infrastructure – to run the website, database, and transactional email.

We do not sell your personal information, and we do not share it with any third party for that third party's own independent marketing purposes.

6. Data retention

Account information is kept for as long as your account is active, and for a reasonable period after cancellation to meet our legal, accounting, and billing-dispute obligations. Monitored media and AI-mention data is kept for the retention period attached to your plan, then removed on a rolling basis.

7. Security

We use industry-standard measures to protect data, including encrypted storage of sensitive credentials, hashed passwords, and access controls that keep each customer's data visible only within their own organization. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security.

8. Your rights

If you are located in Nigeria, the Nigeria Data Protection Act 2023 ("NDPA") gives you the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing. You also have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC), the regulator responsible for enforcing the NDPA. If you are located elsewhere, you may have similar rights under the law that applies to you. To exercise any of these rights, contact us through our Contact page. We will respond within a reasonable time and may need to verify your identity first.

9. International data transfers

Brands Nexus Network Limited is incorporated in Nigeria and BrandsTrack serves customers primarily in Nigeria and across Africa. Some of our service providers – including our AI providers (OpenAI, Anthropic, Perplexity) and, where enabled, Stripe – are based in the United States, meaning your data may be processed there as part of delivering the Service. Where we transfer personal data outside Nigeria, we do so in a manner consistent with the NDPA's requirements for cross-border transfers, and we select providers that maintain their own industry-standard security and data-handling practices. We only send each provider the data it needs to perform its specific function – for example, an AI provider receives the media text being analyzed, not your payment details.

10. Cookies

We use only essential cookies required to keep you signed in and to protect the Service from cross-site request forgery. We do not currently use analytics or marketing cookies. If that changes, we will update this section.

11. Children's privacy

The Service is intended for business use by adults and is not directed at children. We do not knowingly collect personal information from children.

12. Changes to this policy

We may update this Privacy Policy from time to time. We will post changes on this page with a new "Last updated" date.

13. Contact

Questions about this Privacy Policy, or requests regarding your personal data, can be sent through our Contact page.