Privacy Policy & Data Transparency
At Brand Verse Agency, we respect your privacy and are committed to protecting the personal information you share with us. This Privacy Policy details how we collect, handle, protect, and process data across our website, contact forms, digital marketing campaigns, and client engagements.
Privacy At A Glance
Key commitments we guarantee to every visitor and client
We will never sell, rent, or lease your personal information, contact records, or project specs to data brokers or third parties.
All communications and uploaded RFP documents are guarded with modern 256-bit TLS/SSL encryption and restricted access controls.
Full disclosure of Google Ads & Meta measurement pixels, with clear, direct one-click opt-out mechanisms provided.
Exercise your GDPR, CCPA, or DPDP rights at any time to access, modify, export, or permanently erase your data.
Overview & Data Controller
This Privacy Policy describes how Brand Verse Agency (“we”, “our”, or “us”) operates as the designated Data Controller for personal data collected through our official website (brandverseagency.com), our client proposal workflows, hero lead submission forms, newsletter enrollments, and interactive consultations.
We are a premier software development agency delivering bespoke web applications, mobile platforms, enterprise software, cloud infrastructure, and UI/UX design. Because we run paid advertising campaigns (including Google Ads, Meta Ads, and LinkedIn campaigns), we maintain strict compliance with global digital advertising privacy frameworks, data protection laws, and industry transparency standards.
Registered Entity Details:
Brand Verse Agency
Office: Candor TechSpace, Tower B, Sector 48, Sohna Road, Gurugram, Haryana 122018, India
Official Inquiries: connect@brandverseagency.com
Information We Collect
We collect information in three ways: information you directly provide to us, information collected automatically when you visit our website, and information from trusted third-party security and attribution tools.
A. Information You Voluntarily Provide
- Contact & Identity Details: Full name, professional or personal email address, telephone number, job title, and company name.
- Project & Commercial Details: Selected services (Mobile App, Website, Custom Software, UI/UX, etc.), budget estimates (custom figures or tier ranges), expected project deadlines, and specific functional requirements.
- Uploaded Project Documents: Request for Proposal (RFP) files, specification briefs, architectural drafts, or design assets uploaded via our secure file transfer inputs (.pdf, .docx, .zip, etc.).
- Communications: Inquiries sent through email, contact forms, or phone conversations with our engineering and project management leads.
B. Information Collected Automatically
- Device & Technical Identifiers: IP address (anonymized where applicable), browser type, browser version, operating system, device manufacturer, screen resolution, and language settings.
- Approximate Geolocation: Non-precise country and region level determination (via privacy-compliant IP lookup services such as country.is) used solely to pre-select international dialing codes and display relevant regional currencies.
- Usage & Interaction Data: Pages viewed, session duration, referring website/source (such as Google Search or digital ads), scroll depth, button clicks, and error telemetry.
C. Automated Anti-Spam & Bot Defense
To prevent distributed denial of service (DDoS) attacks, brute-force spam, and fraudulent bot form submissions, we use invisible behavioral signals, cryptographic challenge-response tokens (such as Cloudflare Turnstile), and invisible form honeypots. These tools assess visitor authenticity without collecting intrusive biometric data.
How We Use Your Information
We process your data strictly for legitimate business, contractual, and technical operational purposes:
Proposal & Scope Delivery
To review your project requirements, estimate engineering timelines, calculate resource budgets, and provide formal development proposals.
Contractual Execution
To draft statements of work, formalize master services agreements, communicate development milestones, and issue invoices.
Website Optimization
To monitor server latency, troubleshoot software bugs, improve interface accessibility, and enhance user experience.
Ad Measurement & Attribution
To evaluate the performance of our marketing campaigns on Google and Meta, measure cost-per-lead, and optimize marketing spend.
Advertising, Remarketing & Google Ads Disclosures
Google Ads & Conversion Tracking
Our website implements Google Ads Conversion Tracking (Google Tag ID: AW-17853725161) and Google Analytics 4 (Measurement IDs: G-M94CGENRLS, G-10VBYC7MG8).
When you click on one of our advertisements on Google Search or YouTube and perform an action on our site (such as submitting a quote request), Google records this conversion event. Google Ads may also use remarketing cookies to display our agency's advertisements to you on other websites participating in the Google Display Network.
Where enabled, Google Enhanced Conversions transmits securely hashed (SHA-256 one-way cryptographic hashing) first-party data (such as email addresses) to Google. This allows accurate conversion matching without sharing raw, readable personal information with third parties.
Meta / Facebook Ads & Social Attribution
We may utilize Meta Pixel and Meta Conversions API to measure the effectiveness of our software development ads on Facebook and Instagram, understand visitor actions after viewing our ads, and display tailored advertisements to audiences interested in custom engineering.
How You Can Opt Out of Personalized Advertising
You have complete control over whether ad networks use your data for interest-based advertising. You can opt out at any time using any of the following independent consumer opt-out portals:
Google Ad Settings
Manage Google personalized ads
Google Analytics Opt-Out
Install browser opt-out add-on
Meta Ad Preferences
Manage Facebook & Instagram ads
Network Advertising Initiative
Opt out of member ad networks
Digital Advertising Alliance
Consumer choice opt-out tool
Your Online Choices (EU/EDAA)
European advertising opt-out
Communications & Zero-Spam Policy (CAN-SPAM & TCPA)
We maintain an uncompromising anti-spam policy and strictly abide by the CAN-SPAM Act and the Telephone Consumer Protection Act (TCPA):
Direct Response Only
When you submit your phone number or email address via our quotation forms, our senior engineering and business leads will only use those credentials to discuss your specified project requirements, send requested proposals, or coordinate an introductory discovery call.
No Unsolicited Telemarketing or Robo-Calls
We do not engage in automated robo-calling, cold SMS blasts, or aggressive unsolicited outreach. We never share, sell, or rent phone numbers to third-party telemarketers or list aggregators.
Effortless Opt-Out
Every marketing email or newsletter contains a one-click “Unsubscribe” link. For SMS or WhatsApp messages, replying with “STOP” or sending an email to connect@brandverseagency.com immediately revokes communication consent.
Third-Party Service Providers & Sub-processors
To deliver modern cloud services, secure form handling, and reliable infrastructure, we partner with industry-leading third-party sub-processors. Each sub-processor is bound by rigorous Data Processing Agreements (DPAs) requiring adherence to high confidentiality and security standards:
Vercel Inc. (United States)
Web Hosting & Edge Infrastructure
Hosts our serverless API routes, web pages, and CDN assets with DDoS defense.
Google Cloud & Firebase (Google LLC)
Encrypted Database & Auth
Stores client proposal submissions and administrative records in encrypted Firestore clusters.
Cloudflare Inc. (United States)
Bot Defense & Edge Security
Provides invisible Cloudflare Turnstile token validation to filter automated spam.
Cloudinary Ltd. (United States / Israel)
Secure RFP File Storage
Stores client-uploaded proposal briefs, RFP attachments, and images in isolated encrypted buckets.
Google LLC (United States)
Analytics & Ad Conversion Tracking
Processes web interaction signals and advertising conversions (Google Ads & GA4).
Country.is (Privacy Geolocation)
Anonymous IP Country Lookup
Provides lightweight, privacy-friendly ISO country code detection without storing user IPs.
European Privacy Rights (GDPR & UK GDPR)
If you reside in the European Economic Area (EEA) or the United Kingdom, you are entitled to statutory rights under the General Data Protection Regulation (Regulation (EU) 2016/679) and UK GDPR:
1. Right of Access (Art. 15)
Obtain confirmation of whether we process your data and receive a copy of your records.
2. Right to Rectification (Art. 16)
Request correction of inaccurate, incomplete, or outdated personal information.
3. Right to Erasure (Art. 17)
Request the permanent deletion (“Right to be Forgotten”) of your records when data is no longer necessary.
4. Right to Restriction (Art. 18)
Request suspension of data processing while a dispute or objection is investigated.
5. Right to Data Portability (Art. 20)
Receive your personal information in a structured, commonly used, and machine-readable format.
6. Right to Object (Art. 21)
Object to data processing based on legitimate interests or direct marketing at any time.
To exercise any GDPR right, email connect@brandverseagency.comwith the subject line “GDPR Request”. We fulfill verified requests free of charge within 30 calendar days.
California Privacy Rights (CCPA / CPRA)
Under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CPRA), California residents enjoy specific rights regarding their personal information:
Right to Know: You may request the categories and specific pieces of personal information collected about you, the categories of sources, and the business purpose for collecting it.
Right to Delete: You have the right to request deletion of personal information collected from you, subject to legal recordkeeping exemptions.
Right to Correct: You have the right to request the correction of inaccurate personal information.
Right to Non-Discrimination: We will never discriminate against you (through service denial, altered pricing, or reduced quality) for exercising any California privacy rights.
India Digital Personal Data Protection Act (DPDP Act 2023)
As an entity operating from Gurugram, Haryana, India, Brand Verse Agency adheres to the principles of the Digital Personal Data Protection Act, 2023 (DPDP Act):
- Lawful Processing: Personal data is processed solely on the basis of clear affirmative consent or legitimate uses specified under the Act.
- Right to Information & Summary: Data Principals have the right to obtain a summary of digital personal data being processed and the identities of any data fiduciaries with whom data is shared.
- Right to Correction & Erasure: You may request correction of inaccurate data, completion of incomplete data, updating of records, and erasure of data no longer required for the purpose for which it was collected.
- Right of Grievance Redressal: Data Principals have direct access to our designated Data Protection Grievance Officer detailed in Section 16 below.
International Data Transfers
Because we provide engineering and development services globally to clients across the United States, Europe, the Middle East, and Asia-Pacific, your information may be processed in countries outside your country of residence, including India and the United States (where our cloud database and hosting providers operate).
When transferring personal data across international borders, we ensure adequate legal protections are enforced. For transfers originating in the European Economic Area or United Kingdom, we rely on Standard Contractual Clauses (SCCs) adopted by the European Commission, along with technical safeguards including data encryption and restricted access controls.
Data Security & Encryption Practices
We implement robust technical and organizational security controls designed to safeguard your personal data from unauthorized access, accidental loss, alteration, or disclosure:
End-to-End TLS / SSL Encryption
All data in transit across our website and APIs is protected via modern TLS 1.3 protocol encryption.
Encrypted Cloud Storage
Uploaded proposals and contact database records are protected with AES-256 encryption at rest.
Role-Based Access Control (RBAC)
Access to client proposals and contact submissions is strictly restricted to vetted personnel on a need-to-know basis.
Security Headers & Sandboxing
Enforced X-Content-Type-Options, strict referrer policies, X-Frame-Options DENY, and anti-tamper safeguards.
Data Retention Periods
We retain personal data only for as long as necessary to fulfill the purposes for which it was originally collected, including satisfying legal, accounting, tax, and reporting requirements:
- Prospective Client Inquiries & RFP Submissions: Retained for 24 months to facilitate follow-up discussions, project scoping, and historical reference, unless earlier erasure is requested.
- Active Client Accounts & Contracts: Retained for the duration of the active software agreement plus 7 years following contract termination to comply with commercial tax and auditing laws.
- Web Analytics Logs: Standard aggregate logs in Google Analytics 4 are retained for 14 months before automated deletion.
- Newsletter Subscriptions: Retained until the subscriber initiates an unsubscribe request or revokes consent.
Children's Online Privacy (COPPA Compliance)
Our website, software engineering services, and marketing communications are intended exclusively for businesses, entrepreneurs, and individuals aged 18 and older. We do not knowingly solicit or collect personal information from children under the age of 16 (or 13 in relevant jurisdictions) in compliance with the Children's Online Privacy Protection Act (COPPA).
If we discover that personal information has been inadvertently collected from a minor without verifiable parental consent, we will promptly delete that data from our production databases. If you believe a child has provided us with personal information, please notify us immediately at connect@brandverseagency.com.
Policy Amendments & Updates
We may periodically revise this Privacy Policy to reflect evolving software capabilities, updates to our marketing and advertising platforms (such as changes in Google Ads or Meta Ads policies), or updates to applicable global privacy legislation.
Whenever modifications are made, we will update the “Effective Date” at the top of this page. For material changes that significantly affect how personal data is handled, we will post a prominent notification banner across our website or send direct email notices to active clients.
Contact Our Data Protection Officer
If you have questions, comments, or concerns regarding this Privacy Policy, wish to exercise any of your statutory data privacy rights, or have a grievance regarding personal data handling, please reach out to our dedicated Privacy & Grievance Officer:
Office Location
Candor TechSpace, Tower B, Sector 48, Sohna Road, Gurugram, Haryana 122018, India
Brand Verse Agency HQ
Response Commitment: We acknowledge all privacy inquiries within 24 to 48 business hours and resolve formal rights requests within 30 calendar days as mandated by applicable data protection regulations.
Ready to Build Your Next Digital Product?
Partner with an engineering team that values code craftsmanship and data security in equal measure. Share your project requirements and receive a detailed technical proposal.