Privacy notice

This is a draft for publication. It should be reviewed by Kenyan and, where relevant, EU counsel and updated with the final legal entity, hosting providers, subprocessors, retention schedules and DPO details.

1. Our privacy promise

Brand254 uses personal data to provide, secure, support and improve the service. We do not sell customer personal data. We do not use customer data for unrelated advertising. We aim to collect only what is needed for the stated purpose.

Our approach is informed by the Kenya Data Protection Act, 2019 and, where applicable, the EU GDPR: lawful, fair and transparent processing, purpose limitation, data minimisation, accuracy, storage limitation and security.

2. Information we collect

• Account information: name, company, work email, role and authentication data.
• Billing information handled by the selected payment provider where possible, rather than stored as raw card data by Brand254.
• Product usage: workspace settings, searches, alerts, reports and technical activity needed to operate the service.
• Support communications you send to sales or support.
• Listening data: publicly available or lawfully accessible conversation data for topics customers configure.
• Technical data: device, browser, security and diagnostic information.

3. How we use information

We use information to provide the service, authenticate users, process payments, deliver alerts and reports, provide support, secure the platform, troubleshoot, and improve features. We do not use customer content for unrelated commercial purposes. Aggregated or anonymised analytics, if used, should not reasonably identify individuals or specific customers.

4. Security

We intend to use encryption in transit, access controls, least-privilege permissions, authentication controls, logging, backups and security monitoring. Access should be limited to authorised personnel under confidentiality obligations. See also the security page.

5. AI assistance

Brand254 AI is designed to help users interpret their own workspace data. Customer content should not be used to train a general-purpose model for unrelated customers without an explicit contractual basis. AI outputs are decision-support, not a substitute for human judgement.

6. Your rights

Depending on applicable law, you may have rights to be informed, access, correction, deletion, objection, restriction, portability and withdrawal of consent. Contact [email protected] to make a request. We may need to verify identity.

7. Retention

We retain personal data only as needed for the stated purpose, contracts, legitimate business needs or law. When no longer required it should be deleted, anonymised or securely disposed of.

8. International transfers

Some infrastructure providers may process information outside Kenya or the EEA. Where that occurs, Brand254 will use safeguards required by applicable law and processor contracts.

9. Cookies and analytics

Essential cookies may be used for security. Optional analytics, including Vercel Analytics in production, should follow applicable consent rules when non-essential tracking is added.

10. Contact

Brand254 · Nairobi, Kenya
[email protected] · +254 708 635 789
Last updated: 24 August 2026