top of page

Privacy Policy

Effective Date: February 2, 2026

1. Introduction

Brand Amplify, an India-based company, respects your privacy and is committed to protecting the personal information of businesses and individuals who interact with our services.

This Privacy Policy explains how we collect, use, store, and share your information when you visit our website or use our Instagram-based automation services.

By accessing our website or using our Services, you agree to the terms of this Privacy Policy.

2. Who This Policy Applies To

This policy applies to:

  • Business owners and representatives who contact us or use Brand Amplify services.

  • Customers of our client businesses who voluntarily interact with Instagram automation.

  • Website visitors who submit forms or subscribe to updates.

3. Information We Collect

We collect only the information necessary to provide our services. As a Data Fiduciary under the Digital Personal Data Protection Act, 2023 (DPDP Act), we process data lawfully.

Information Collected from Businesses

  • Business name

  • Contact person name

  • Email address

  • Phone number

  • Instagram business handle

  • Business category

Information Collected from Customers of Our Clients

  • Instagram display name

  • Instagram story interaction confirmation

  • Rewards claimed

  • Review submission confirmation

Optional Information (Collected Only with Consent)

  • Email address

  • Phone number

  • Birthday or special dates

Customers are never required to share personal information to receive a reward. Any information shared is voluntary. We obtain verifiable parental consent for processing data of children (under 18).

4. How Information Is Collected

Information is collected through:

  • Website forms

  • Instagram messaging automation

  • Voluntary responses inside Instagram conversations

  • Direct communication with Brand Amplify

We do not collect information through hidden methods, scraping, or any non-transparent means.

5. How We Use Information

Information collected is used for legitimate uses (as defined under DPDP Act), including:

  • Providing and operating Brand Amplify services

  • Automating reward delivery and follow-up messages

  • Generating performance reports for client businesses

  • Sharing customer interaction summaries with client businesses

  • Improving service performance and user experience

  • Responding to enquiries and support requests

We do not sell personal data to third parties.

6. Instagram and Platform Compliance

Brand Amplify uses Instagram messaging automation that complies with Meta's policies and terms of service.

  • Automation is triggered only after a user takes a clear action, such as tagging a business or responding to a message.

  • Users can stop receiving messages at any time using Instagram's built-in opt-out options.

  • Brand Amplify does not access private accounts or private content unless explicitly permitted by platform rules.

7. Sharing of Information

Information may be shared only with:

  • The client business for whom the interaction was initiated (as Data Processor)

  • Service providers involved in data storage, reporting, and operations (bound by Data Processing Agreements)

  • Legal authorities if required by law, regulation, or to protect our rights

Client businesses receive customer interaction data only related to their own business.

8. Data Storage, Security, and International Transfers

  • We take reasonable technical and organizational measures (including safeguards under DPDP Act) to protect personal data, such as encryption, access controls, and regular security audits.

  • Data is stored securely using industry-standard platforms (e.g., AWS with India regions where possible).

  • For international transfers (e.g., to servers outside India), we ensure compliance with DPDP Act restrictions and obtain necessary consents/government approvals. For global users (e.g., EU), we use GDPR-equivalent safeguards like Standard Contractual Clauses (SCCs).

9. Data Retention

We retain information only as long as necessary to:

  • Provide services

  • Meet legal obligations (e.g., 7 years for financial records)

  • Resolve disputes

  • Generate reports

Data is erased or anonymized post-retention. Businesses and customers may request deletion (subject to legal holds).

10. Your Rights

As an India-based Data Fiduciary, we comply with the DPDP Act, 2023 and applicable global laws (e.g., GDPR for EU users, CCPA for California residents). Key rights include:

  • Access and obtain details of your personal data

  • Correction of inaccurate/incomplete data

  • Erasure (where lawful)

  • Nomination of another person to exercise rights (DPDP-specific)

  • Grievance redressal

  • Withdrawal of consent (without affecting prior lawful processing)

  • Restriction/objection/portability (per GDPR/CCPA)

To exercise rights: Email contact@brandamplify.digital or our Grievance Officer. Response within 30 days (72 hours for sensitive data under DPDP). No fee unless excessive.

For California: We do not "sell" or "share" data. Opt-Out.

Grievance Officer:
Email: contact@brandamplify.digital
Details published on website per DPDP rules.

11. Cookies and Tracking

Our website uses essential cookies for functionality and performance. Optional analytics cookies require consent.

Cookie TypePurposeManaged ByConsent Required

EssentialSite operationBrand AmplifyNo

AnalyticsUsage insightsGoogle AnalyticsYes

Manage via cookie banner or browser.

12. Children's Privacy

Services not for children under 18. We process children's data only with verifiable parental consent (DPDP/COPPA-compliant). Report/remove via contact.

13. Third-Party Links and Services

Links to Instagram/Google: Review their policies; we are not liable.

14. Changes to This Policy

Updates posted here with new effective date. Notification for material changes. Continued use = acceptance.

15. Contact Information

16. Governing Law and Jurisdiction

Governed by the laws of India, including the Digital Personal Data Protection Act, 2023. Disputes subject to exclusive jurisdiction of courts in Goa, India.

bottom of page