Sign inSign up

Privacy Policy

Effective date: 7 September 2026

This policy explains how Jugraj Solutions LLP ("we", "us"), the operator of Brand Scalers, collects, uses, stores and deletes personal data. It covers our website at https://brandscalers.in, our web application, and the services we provide through them. We have written it in plain language on purpose. If anything is unclear, write to kushagra@brandscalers.in and we will explain.

1. Who we are

Brand Scalers is a marketing platform operated by Jugraj Solutions LLP, based in India. For the purposes of applicable data protection law, including India's Digital Personal Data Protection Act, 2023, Jugraj Solutions LLP is the data fiduciary for data collected through this website, and processes customer campaign data on our customers' instructions.

2. What data we collect

Data you give us directly

  • Contact details when you fill a form or book a demo: name, phone number, email, business type and anything you write in a message.
  • Account details when you sign up: name, email, business name and password (stored only in hashed form).
  • Billing details when you subscribe: plan, invoices and payment status. Card and bank details are handled by our payment processor and never touch our servers.

Data from connected platform accounts

When you connect your Amazon, Meta or Google accounts to the platform, we access data through their official APIs, only with your explicit authorisation and only to provide the service:

  • Ad account structure: campaigns, ad sets, ads, budgets and settings.
  • Performance metrics: impressions, clicks, spend, conversions and similar statistics.
  • Lead data submitted by your potential customers through lead forms you run, which we deliver to you.
  • Page and business profile information needed to run campaigns on your behalf.

Amazon seller data

If you connect an Amazon seller or advertising account, we use Amazon's official APIs to retrieve only the data needed for the features you enable. The initial service does not request restricted Orders roles or Amazon buyer personally identifiable information.

  • Seller account and marketplace identifiers needed to maintain the authorised connection.
  • Catalog and listing data, including SKUs, ASINs, titles, attributes and listing status.
  • Inventory quantities, prices and fulfilment or availability status.
  • Advertising campaign structure, budgets, status and aggregated performance metrics.
  • Aggregated business and product-performance reports made available by the permissions you approve.

We use Amazon data only to show your own reports and to perform actions you explicitly request or approve. We do not sell it, use it to advertise unrelated products, build profiles of Amazon buyers, or share one seller's data with another seller. Disconnecting the integration stops new API access; you can also revoke authorisation in Amazon Seller Central.

We request the minimum permissions needed for the features you use. An available Disconnect control removes the credential stored by Brand Scalers and stops new API access by our product; it does not cancel the permission at the connected platform. You can revoke that permission in the platform's account settings. If a connection has no Disconnect control, or you want associated stored data deleted, use our data deletion process.

Enquiries on tenant business websites

A contact form on a website built with BrandScalers identifies the receiving business. It collects your name, email, optional phone number and message, and stores them as that business's leads in its BrandScalers CRM for handling your enquiry. BrandScalers supplies the platform and processes these leads to provide that service; the business is responsible for its lawful collection, use and follow-up communications. Sending an enquiry does not opt you into promotional messages, and this form does not send automated advertising or marketing messages.

Do not submit sensitive medical, financial or legal information, passwords, payment details or emergencies. To ask about access, correction or deletion, contact the receiving business or follow our data deletion process. You do not need a BrandScalers account to request deletion of an enquiry. We may need to verify the request.

Data collected automatically

  • Basic usage data: pages visited, features used, approximate location from IP address, browser and device type.
  • Cookies as described in our cookie policy.

3. How we use data

  • To provide the service: planning, running and reporting on your campaigns.
  • To deliver leads from your campaigns to you quickly.
  • To respond to enquiries and provide support.
  • To bill you and maintain business records required by law.
  • To improve the platform, using aggregated and de-identified information wherever possible.
  • To keep the service secure and prevent abuse.

We do not sell personal data. We do not use your customers' lead data for anything except delivering it to you and showing you your own reporting.

4. Platform-specific commitments

Amazon seller data is handled in accordance with the Amazon Selling Partner API policies and Acceptable Use Policy. Amazon credentials are encrypted separately from application data, access is logged, and only authorised members of your workspace can view or act on the connected account. Brand Scalers is an independent service and is not endorsed by or affiliated with Amazon.

Google user data

BrandScalers' use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In plain terms, for everything we receive from Google:

  • We use it only to provide the features you can see and use in Brand Scalers, for the account and resource you selected.
  • We do not sell it, and we do not use or transfer it for advertising to you, retargeting, or interest-based advertising.
  • We do not use it to build or train a general-purpose AI model.
  • We do not allow people at Jugraj Solutions LLP to read it, except with your consent for a specific support request, where needed for security or abuse investigation, or where the law requires.
  • We do not share it with anyone except the service providers that run the platform (hosting, database and the AI model provider that processes your requests) and where the law requires.
  • Every Google connection is optional, belongs to one BrandScalers workspace, and is never shared with another customer.

We store the selected resource identifiers (for example the chosen Analytics property, Tag Manager container, Search Console site, Business Profile location, YouTube channel or Google Ads advertiser account), an encrypted OAuth refresh token, and audit records of changes made through the platform. We request read access by default and ask for write access only when you turn on a feature that needs it; every write is shown to you for confirmation first. We do not request Gmail, Drive, Calendar, contacts, Merchant Center or any Google data other than the products below.

What we access in each Google product

Google Ads

  • Permission: adwords.
  • What we access and why: advertiser accounts you can reach, campaign structure, keywords, budgets, conversion settings and performance metrics, to show reports and to prepare and manage Search campaigns. New campaigns are created paused, and every campaign change needs your confirmation. Spend is billed by Google to your own account.
  • Details: see the Google Ads API use disclosure.

Google Analytics 4

  • Permission: analytics.readonly. Optional, only if you enable key-event setup: analytics.edit.
  • What we access and why: the properties and data streams you can access, key events, and aggregated acquisition and landing-page reports, to show how your website performs. With analytics.edit and your confirmation, we create or update a key event in the selected property.

Google Tag Manager

  • Permission: tagmanager.readonly. Optional, only for the changes you approve: tagmanager.edit.containers, tagmanager.edit.containerversions and tagmanager.publish.
  • What we access and why: containers, tags, triggers, variables and versions, to audit your tracking setup. With the optional permissions and your confirmation, we create an unpublished workspace or version, publish the exact version you reviewed, or restore a prior version.

Google Search Console

  • Permission: webmasters.readonly. Optional, only if you approve a sitemap submission: webmasters.
  • What we access and why: the verified sites you can access, search queries and page performance, and indexing checks, to show how your website appears in Google Search. With your confirmation, we submit the exact sitemap URL you approved.

Google Business Profile

  • Permission: business.manage.
  • What we access and why: the locations you manage, profile details, performance insights and reviews, to show your local presence. With your confirmation, we update supported profile fields, publish a post, or post a reply to a review.

YouTube

  • Permission: youtube.readonly and yt-analytics.readonly. Optional, per mode you choose: youtube.upload and youtube.force-ssl.
  • What we access and why: your owned channel, its videos and analytics reports, to show channel performance. With youtube.upload and your confirmation, we upload a private video you reviewed. With youtube.force-ssl, we read comments on your videos and post a reply you reviewed.

Disconnecting Google and revoking access

  • In the app, use the Disconnect control for each Google product on the Integrations screen. It deletes the encrypted credential we hold and stops our access. Disconnecting Search Console also clears the Search Console sites saved for your websites.
  • Separately, you can revoke Brand Scalers's access at any time at myaccount.google.com/permissions. Disconnecting in the app does not itself cancel the grant at Google, so use both if you want to be sure.
  • To have your stored Brand Scalers data deleted, follow our data deletion process. How long we keep Google data is in section 6.

Our use of Meta Platform data complies with the Meta Platform Terms. Lead data retrieved from Meta lead ads is delivered to the business that ran the campaign and is not shared with or sold to anyone else.

5. When we share data

We share data only with:

  • Service providers we use to run the platform, such as cloud hosting, database and email providers, bound by their own confidentiality and data protection obligations.
  • The advertising platforms you connect, to the extent needed to run your campaigns.
  • Authorities, if the law requires it and the request is valid.

6. How long we keep data

  • Enquiry form data submitted directly to BrandScalers for its own sales or support: up to 24 months after last contact, then deleted.
  • Account and campaign data: for as long as your account is active, then deleted within 90 days of account closure, except records we must keep for tax and accounting law.
  • Lead data belonging to your customers: retained while your account is active so your reports stay accurate, deleted on the same schedule, and earlier if you or the person concerned asks.
  • Enquiries through tenant-generated websites are tenant-owned leads under that account schedule, including after the originating website is archived or deleted. Source attribution remains in the tenant CRM. A tenant can delete an enquiry there; valid visitor requests follow our deletion process. Deleting a website alone does not delete its leads.
  • Amazon non-personal seller data: retained only while needed to provide the service and never longer than 18 months, unless law requires a specific record to be kept.
  • Amazon credentials: deleted when you disconnect the integration or close your account. If Amazon directs us to delete Amazon data, we complete the deletion within 30 days.
  • Google OAuth credentials: deleted when you use an available in-product Disconnect control, when we complete a verified deletion request, or when you close your account. Cached Google reporting data and selected resource identifiers follow the account-data schedule above. Revoking permission in your Google Account stops future Google API access but does not itself delete data already stored by Brand Scalers.
  • Security audit records: retained for 12 months or longer where required for investigation, without storing Amazon buyer PII or access tokens in logs.

7. Your rights

You can, at any time:

  • Ask what personal data we hold about you.
  • Ask us to correct it.
  • Ask us to delete it. See our data deletion page for the exact steps and timelines.
  • Withdraw consent for any processing based on consent.
  • Complain to the relevant data protection authority.

To exercise any of these, email kushagra@brandscalers.in. We respond within 7 business days and complete verified requests within 30 days.

8. Security

Data is encrypted in transit, access is restricted to people who need it for their work, and API credentials for your connected accounts are stored encrypted. More detail is on our security page. No system is perfectly secure; if a breach ever affects your data, we will inform you promptly and honestly.

9. Children

The service is for businesses and is not directed at children. We do not knowingly collect data from anyone under 18. If you believe we have, contact us and we will delete it.

10. Changes to this policy

If we change this policy, we will update the effective date at the top and, for significant changes, notify account holders by email before the change takes effect.

11. Contact

Jugraj Solutions LLP
3, Teja 309, My Home Navadweepa, Hitech City Road, HITEC City, Hyderabad, Rangareddy, Telangana, 500081, India
Email: kushagra@brandscalers.in
General contact: getintouch@brandscalers.in