Privacy Policy

1. Who this policy covers

This policy covers personal data processed through the Mitra application at brain-wise.com. The Service is provided by Brainwise Solutions, a sole proprietorship at Aliabad Jhanda, Charminar, Hyderabad, Telangana – 500053, India ("Mitra by BrainWise"; BrainWise is the brand identity used by Brainwise Solutions).

2. Data we process

3. Third parties who process your data

• Firebase / Google Cloud Platform — hosting, authentication (including, if you choose it, "Continue with Google" sign-in), database (Firestore), file storage, and bot/abuse protection (App Check).
• Google Gemini — receives business/product information and images you submit, to generate marketing copy and analyze product photos.
• OpenAI — receives prompts derived from your business/campaign information to generate campaign images.
• Paddle — Merchant of Record for our orders; receives your payment details directly and confirms payment status to Mitra via a signed server-to-server webhook.
• Cloud Run (Google Cloud) — a separate hosted service that renders your uploaded video clips into a finished Reel (video compositing, logo overlay, captions); it processes the same video files already covered above under Firebase Storage.

We have not been able to confirm the presence of signed data-processing agreements (DPAs) with each of these providers in the materials available to this audit — subprocessor DPA status: not verified. No cookie-consent or ad-tracking analytics tools (e.g. Google Analytics, Meta Pixel) are currently integrated.

4. India Digital Personal Data Protection (DPDP) framework

Mitra primarily serves customers in India and treats the Digital Personal Data Protection Act, 2023 and its notified Rules as the primary applicable data-protection framework. This policy gives you notice of what data is collected and why (section 2), identifies the entities we share data with (section 3), and provides a contact channel for questions and requests (section 8). Because the DPDP Act and Rules commence in phases, we do not claim blanket "DPDP compliance"; obligations are being implemented as they come into force.

5. GDPR

Mitra is built and marketed for the Indian market. We do not knowingly target, market to, or monitor users located in the EU/EEA. Accordingly, GDPR is treated as not currently in scope for this service. If that changes, this policy will be updated with a full GDPR applicability assessment.

6. Your access, correction, and deletion rights

You can request account deletion yourself from the Billing page in the app. Doing so deletes your login (Firebase Authentication account) and archives the businesses you own. It does not currently delete: your campaign, product, and generated-asset records; files in Cloud Storage; usage/credit history; or transaction/billing records. Billing, transaction, and tax records are not deleted immediately on account deletion where they must be kept (see section 7). If you want other non-deleted data removed as well, email support@brain-wise.com and we will review the request manually. You can also request access to or correction of your personal data via the same email address.

7. Data retention

Billing, transaction, accounting, tax, and related business records may be retained for as long as required by applicable law and legitimate accounting/business purposes. Other data is retained for as long as your account remains active plus the time needed to respond to support, legal, or security requirements.

8. Grievance / privacy contact

For privacy questions, data requests, or grievances, contact support@brain-wise.com. This is the grievance and support contact for Brainwise Solutions.

9. Children's data

Mitra is a business marketing tool intended for business owners and marketers, not children. We do not knowingly collect personal data from children.

10. Changes to this policy

We may update this policy as the product or our data practices change. The "Effective date" above reflects the last update. When you sign up, your acceptance of this policy's then-current version (and the Terms of Service's) is recorded on your account with a server-generated timestamp. Re-acceptance: users may be required to acknowledge or consent to material changes where required by applicable law or the applicable consent mechanism.