1. Our privacy promise
Brand254 uses personal data to provide, secure, support and improve the Brand254 service. We do not sell customer personal data. We do not use customer data for unrelated advertising. We aim to collect only the information needed for the purpose for which it was provided and to keep it only for as long as reasonably necessary.
Our approach is informed by the Kenya Data Protection Act, 2019 and, where applicable, the EU General Data Protection Regulation (GDPR). Both frameworks emphasise lawful, fair and transparent processing, purpose limitation, data minimisation, accuracy, storage limitation and security.
2. Information we collect
- Account information: name, company, work email, role and authentication information.
- Billing information: payment and transaction details required to process a subscription. Card details should be handled by the selected payment provider rather than stored directly by Brand254.
- Product usage: workspace settings, searches, alerts, reports and technical activity needed to operate the service.
- Support communications: information you send to sales or support.
- Listening data: publicly available or lawfully accessible conversation data relating to the topics configured by customers. We process this data to provide monitoring and intelligence features.
- Technical data: device, browser, security and diagnostic information needed to keep the platform reliable and secure.
3. How we use information
We use information to provide the service, authenticate users, process payments, deliver alerts and reports, provide support, secure the platform, troubleshoot problems, understand product usage and improve features. Where we rely on consent, you can withdraw it. Where we rely on another lawful basis, we will explain that basis where required.
We do not use customer content for unrelated commercial purposes. If aggregated or anonymised information is used for analytics or product improvement, it is designed so that individuals and specific customers are not reasonably identifiable.
4. Security
We intend to use appropriate technical and organisational safeguards such as encryption in transit, access controls, least-privilege permissions, authentication controls, logging, backups and security monitoring. Access to customer information should be limited to authorised personnel who need it to perform their responsibilities and who are subject to confidentiality obligations.
5. AI assistance and customer data
Brand254 AI is designed to help users interpret their own workspace data: summarising conversations, identifying themes, explaining changes and answering questions about monitored topics. Customer content should not be used to train a general-purpose model for unrelated customers without an explicit contractual basis or permission. AI outputs are decision-support, not a substitute for human judgement.
Where third-party AI or infrastructure providers are used, Brand254 will select providers that offer appropriate privacy and security commitments and will document relevant processing arrangements as required.
6. Your privacy rights
Depending on applicable law, you may have rights to be informed about processing, access your personal data, request correction, request deletion, object to processing, restrict processing, receive portable data and withdraw consent where consent is the legal basis. You may also have rights relating to automated decision-making.
To make a request, contact [email protected]. We may need to verify your identity before fulfilling a request.
7. Retention and deletion
We retain personal data only for as long as needed for the stated purpose, contractual obligations, legitimate business needs or legal requirements. When data is no longer required, it should be deleted, anonymised or securely disposed of in accordance with our retention schedule.
8. International transfers and service providers
Some infrastructure or service providers may process information outside Kenya or the European Economic Area. Where this occurs, Brand254 will use appropriate safeguards required by applicable law and maintain contracts with processors that set out security, confidentiality and processing obligations.
9. Cookies and analytics
We may use essential cookies for authentication and security and, where implemented, optional analytics technologies to understand product and website performance. Non-essential tracking should be activated only in accordance with applicable consent requirements.
10. Changes to this policy
We may update this policy when the service, law or processing activities change. Material changes will be communicated through the website or other appropriate channels.
11. Contact
Brand254
Westlands, Nairobi, Kenya
Email: [email protected]
Phone: +254 708 635 789
Last updated: 20 August 2026