Security at BrandSecurer
How we protect your account and your data, in plain English. We're a new company, so we'd rather tell you exactly what we do than hide behind a badge.
BrandSecurer is operated by PerfectlyOkay Solutions (OPC) Pvt. Ltd., trading as "BrandSecurer". This page describes the practices we follow to keep your account and data safe. If you have a question that isn't answered here, or a specific requirement from your security team, email support@brandsecurer.com and we'll work through it with you.
Encryption
All traffic to and from BrandSecurer is served over HTTPS (TLS), so data is encrypted in transit. Account and violation data is stored on managed cloud infrastructure that encrypts data at rest.
Access control
Access to production systems is limited to the people who need it to run the service, and is removed when it's no longer required. We use strong authentication for administrative access and keep the number of people with production access small.
What we scan, and what we don't touch
Our monitoring runs against publicly available search results and landing pages. We do not place tracking pixels on your site, integrate with your analytics, or access your CRM. We don't collect personal data about your customers or website visitors to run the service.
Payments
Billing is handled by Paddle as our Merchant of Record. Card details are entered with Paddle, not with us, so BrandSecurer never sees or stores your full payment-card numbers.
Data retention and deletion
You can export your violation data at any time. If you close your account or ask us to delete your data, we remove it within a reasonable period, except where we're required to retain certain records (for example, billing records) by law. See our Privacy Policy for the detail.
Incident response
If a material security incident affects your data, we disclose it to affected customers within 72 hours of confirming it, along with what we know and what we're doing about it.
Reporting a vulnerability
If you believe you've found a security issue, please email support@brandsecurer.com. We welcome responsible disclosure, we'll acknowledge your report, and we won't pursue action against good-faith research that respects our users' privacy and doesn't disrupt the service.
Certifications, honestly
We're an early-stage company and we don't yet hold formal certifications such as SOC 2. We'd rather be straight about that than imply otherwise. We've built BrandSecurer with the practices above from day one, and we'll pursue formal audits as we grow. If your procurement process needs something specific in the meantime, talk to us, we're happy to help where we can.