Privacy policy

This policy is published by 1stRound AI (“TracBrand”, “we”, “us”), registered at 16, Krishna Garden, Singanallur, Coimbatore, Tamil Nadu 641005, India. TracBrand is a product of 1stRound AI, the same entity behind Agentic Observe. Our GSTIN is 33AAEFZ1871A1ZH and our PAN is AAEFZ1871A. If you have questions about anything below, contact us at privacy@tracbrand.com or call +91 98653 32622.

1. Two different roles

TracBrand handles personal data in two distinct capacities, and your rights differ depending on which applies.

• As a controller — for data about visitors to this website and about the individuals at our customer and prospect organisations. We decide why and how that data is used.
• As a processor — for data our customers put into or generate inside the platform, including material gathered about suspected infringers. Our customer decides why and how that data is used; we act on their instructions under a data processing agreement.

2. Data we collect as a controller

Information you give us

• Demo and contact requests — your name, work email, company, optionally your website, team, portfolio size, channels of concern and message.
• Account registration — your name, email address, organisation name and a hashed password.
• Correspondence — the content of emails and support requests you send us.

Information collected automatically

• Technical data — IP address, browser and device type, referring page and pages viewed. We use this for security, abuse prevention and aggregate traffic understanding.
• Rate limiting — we hold a short-lived record of request timing per IP address on our form endpoints to prevent abuse. These records are not retained beyond a few minutes.

3. Why we use it

• To respond to your enquiry and prepare a demonstration session — our legitimate interest in responding to a request you initiated.
• To provide the platform — performance of our contract with your organisation.
• To secure our systems and investigate abuse — our legitimate interest in operating a safe service.
• To meet legal obligations — where we are required to retain or disclose information by law.

We do not sell personal data, and we do not use demo request details to add you to a marketing list without asking you separately.

4. Data processed inside the platform

The platform gathers publicly available material — listings, profiles, pages, app records, certificate records and published scan data — in order to identify suspected brand infringement on behalf of a customer. That material may include personal data about the individuals operating the accounts or sites concerned, such as a display name, a handle, a profile image or a seller identity.

Where TracBrand processes that material, we do so as a processor on our customer’s instructions. Our customer is responsible for having a lawful basis for the monitoring and for responding to requests from the individuals concerned. If you believe your personal data is held in the platform, contact us at privacy@tracbrand.com and we will route your request to the relevant controller.

5. Subprocessors and third parties

We rely on third-party services to operate. Categories include cloud hosting and infrastructure, email delivery, external data sources used for detection, and an AI model provider used for image and document analysis. A current list of subprocessors is available to customers on request.

We only share personal data with these providers to the extent needed to deliver the service, and under contractual terms requiring appropriate safeguards. Where data is transferred outside your jurisdiction, we rely on the transfer mechanisms permitted by applicable law.

6. Cookies

This website does not set advertising or cross-site tracking cookies. Any cookies used are strictly necessary for the site to function. Where we introduce analytics in future, we will update this policy and, where required, request consent before any non-essential cookie is set.

7. Retention

• Demo and contact requests — retained for up to 24 months from last contact, then deleted.
• Account data — retained for the life of the account and for a limited period afterwards to meet legal and accounting obligations.
• Platform data — retained according to the customer’s configuration and contract, and deleted or returned on termination as agreed.
• Audit records — retained for the period required to evidence enforcement actions taken.

8. Your rights

Depending on where you are, you may have the right to:

• Access the personal data we hold about you
• Have inaccurate data corrected
• Have data erased, where no overriding obligation or interest applies
• Restrict or object to certain processing
• Receive your data in a portable format
• Lodge a complaint with your local data protection authority

To exercise any of these, email privacy@tracbrand.com. We will respond within the period required by applicable law, and within one month where the GDPR applies.

9. Security

We apply technical and organisational measures appropriate to the risk, including encryption in transit, password hashing, tenant isolation, role-based access control and audit logging. Our security and trust page describes these in more detail, including what we do not yet have.

10. Children

The platform is a business tool and is not directed at children. We do not knowingly collect personal data from anyone under 16 as a controller.

11. Changes

We may update this policy as the service or the law changes. Material changes will be communicated to customers directly, and the date at the top of this page will always reflect the current version.