Brandrisor Privacy Policy
1. Who we are and what this covers
This policy explains how Brandrisor collects, uses, shares and protects personal information about Shoppers, Brand contacts, and website visitors. One policy covers everyone; where practices differ, the section says so.
Brandrisor is operated by Brandrisor, [ADDRESS], Quebec, Canada. We are responsible for the personal information we hold.
Person in charge of personal information. Under Quebec's privacy law, our [Founder/President], [NAME], is responsible for protecting personal information at Brandrisor. Contact: hello@brandrisor.com.
This policy does not cover retailers such as Amazon or Walmart, payment processors, or gift card providers, which have their own privacy policies.
2. What we collect
| Who | What we collect | Where it comes from |
|---|---|---|
| Shoppers | Name, email, city, province/state, country, age confirmation; deals opted into and approval history; order number, price paid and purchase date from your proof of purchase; links or screenshots of your reviews and retailer profile name; photos or videos you submit; reward history | You, when you sign up, opt in, and submit proof |
| Brand contacts | Name, business name, work email, phone, role; campaign details; billing information (card details are handled by Stripe, not stored by us) | You or your colleagues |
| Everyone | Email engagement (opens, clicks), IP address, browser and device type, pages visited, referring site | Automatically, through cookies and our email platform |
| Everyone | Messages you send us | You |
We do not ask for government ID, full payment card numbers, or sensitive information such as health data. Please blur anything of this kind (and your full home address) in screenshots before sending them.
3. How we use it
We use personal information only for purposes you would reasonably expect, and with your consent:
- Running deals: sending deal alerts, reviewing opt-ins, sending approval instructions, validating proof, and paying rewards.
- Running campaigns: setting up and billing Brand campaigns and reporting results.
- Preventing fraud: detecting duplicate accounts, altered proof, and review trading.
- Improving Brandrisor: understanding which deals and emails perform, in aggregate.
- Legal and accounting: keeping records the law requires and enforcing our Terms.
We do not sell personal information, and we do not use it to make decisions about you based solely on automated processing. If that changes, we will tell you first.
Email. Deal alerts are commercial emails, so we send them only with your consent, given when you sign up. Every email identifies Brandrisor, includes our mailing address, and has an unsubscribe link that works within 10 business days. Approval, reward and account emails are transactional and continue while you participate in a deal, even if you unsubscribe from alerts.
Withdrawing consent. You can withdraw consent at any time by unsubscribing or emailing us. Withdrawing may mean we can't approve you for deals or pay a pending reward, and we will explain that if it applies.
4. Who we share it with
Brands. We share campaign results with the Brand that ran the deal: typically aggregate numbers and links to published reviews, which are already public. We share a Shopper's first name, last initial and city alongside bonus content only where the deal says so. We do not give Brands Shopper email addresses or contact details without the Shopper's consent.
Service providers. We use trusted providers who process information on our behalf and under contract, only as needed to provide their service:
| Provider | Purpose | Location |
|---|---|---|
| Mailercloud | Email delivery and deal alerts | [confirm] |
| Stripe | Brand payments | United States |
| Tango Card (Blackhawk Network) | Reward credits and gift card redemption | United States |
| Lovable, Supabase and Resend | Website and app hosting, accounts and database, transactional emails | [confirm] |
| [Analytics, e.g. Google Analytics] | Website usage statistics | United States |
Legal reasons. We may disclose information if required by law, to respond to valid legal requests, to protect the rights or safety of Brandrisor, our users or others, or to investigate fraud.
Business transfers. If Brandrisor is merged, sold or reorganized, personal information may be transferred to the new owner, who will be bound by this policy.
Outside Quebec and Canada. Some providers store or process information outside Quebec, including in the United States, where it may be accessible to local authorities under local law. Before transferring personal information outside Quebec, we assess whether it will receive adequate protection and put contractual safeguards in place.
5. Cookies, retention and security
Cookies. We use essential cookies to keep you logged in and secure. With your consent, we also use analytics cookies to understand how the site is used. Non-essential cookies are off by default for Quebec visitors and can be changed at any time through the cookie banner or your browser settings. Our emails use tracking pixels to measure opens and clicks; you can block them by turning off images in your email app.
Retention. We keep personal information only as long as needed:
| Information | How long |
|---|---|
| Shopper account and deal history | While your account is active, then [24] months after your last activity |
| Proof of purchase and review records | [3] years after the reward is paid, for fraud prevention and accounting |
| Brand billing records | 6 years, as tax law requires |
| Email engagement data | [24] months |
After that, we delete or anonymize it.
Security. We use reasonable safeguards, including encrypted connections, access limited to staff who need it, and providers with recognized security standards. No system is perfectly secure.
Incidents. If a confidentiality incident creates a risk of serious injury, we will notify the affected people and Quebec's Commission d'accès à l'information (and the Privacy Commissioner of Canada where required) promptly, and keep a record of all incidents.
6. Your rights
Wherever you live, you can ask us to:
- tell you what personal information we hold about you and how we use it;
- correct information that is inaccurate or incomplete;
- delete your information or close your account;
- stop sending you marketing emails; and
- withdraw consent to optional uses.
Quebec residents can also ask us to stop disseminating your information, to receive computerized information you gave us in a structured, commonly used format, and to be informed of the main factors behind any automated decision.
US residents in states with privacy laws (such as California) have similar rights to know, correct, delete and opt out. We do not sell or share personal information for cross-context behavioural advertising, and we will not treat you differently for exercising your rights.
How to ask. Email hello@brandrisor.com. We may need to verify your identity. We will reply within 30 days. If you are not satisfied, you can complain to Quebec's Commission d'accès à l'information, the Office of the Privacy Commissioner of Canada, or your local regulator.
7. Minors
Brandrisor is only for people aged 18 and over. We do not knowingly collect information from minors, and we delete it if we learn we have.
8. Changes to this policy
We will post any update here with a new date and, for significant changes, tell you by email before they take effect.
9. Contact
[NAME], Person in charge of personal information
Brandrisor, [ADDRESS]
hello@brandrisor.com
Last updated: [DATE]