Privacy Policy

1. Information We Collect

We collect information in the following ways:

a) Information you provide directly

• Account details: name, email address, phone number, and business name when you register or book a demo.
• Business data: orders, customer details, payment records, product or service information, and team member details that you enter into the platform.
• Communications: messages you send us via email or contact forms, including demo booking requests and support queries.
• Sign-up, demo and support forms: the details you give when you sign up, request a demo or contact support (such as name, email, phone number and business type).
• Billing details: the legal or business name, address, state, PIN code, billing email and (if you are GST-registered) GSTIN that you give us, which are printed on the GST tax invoices we issue to you.
• Payout details: if you set up payouts, your bank account number, IFSC, bank name, account holder name and PAN, which we use to create your payout account with our payment processing provider and have it verified. The account number and PAN are stored encrypted.

b) Information collected automatically

• Usage data: pages visited, features used, session duration, and in-app actions — used to understand how users interact with H4B and to improve the product.
• Device & browser information: IP address, browser type, operating system, and device type — collected for security and analytics purposes.
• Cookies & local storage: we use cookies to maintain your session and remember your preferences. You can control cookies through your browser settings, though disabling them may affect platform functionality.
• Website analytics: on our public website (handforbrand.com) and the sign-up page of the H4B app we use Google Analytics 4 to count visits and see which pages are read. See Section 8.
• Advertising measurement (pixel): on our public website and our sign-up and login pages, an advertising measurement pixel records that a page was viewed and when a demo request or sign-up is completed. See Section 8 for exactly what it collects and where it is used.

c) Information from third parties

• Scheduling provider: when you book a demo, it shares your name, email, and scheduled time with us.
• Payment processing provider: we receive transaction confirmation and billing details (amount, date, masked card/UPI identifier) from it when you make a payment.

2. How We Use Your Information

We use the information we collect to:

• Create and manage your H4B account and provide the Service.
• Conduct the onboarding demo and personalise your setup experience.
• Process payments and manage your subscription through our payment processing provider.
• Send transactional emails — such as account confirmations, payment receipts, and service updates.
• Respond to your support requests, questions, and feedback.
• Monitor platform usage to identify bugs, improve performance, and develop new features.
• Detect and prevent fraud, abuse, or security incidents.
• Comply with applicable Indian laws and regulations.

We do not sell your personal information, and we never use the business data you enter into H4B (orders, customers, payments, team details) for advertising. The one exception to "no advertising" is measuring our own advertising: on our public website and sign-up pages we use an advertising measurement pixel (Section 8), which tells our advertising provider that someone visited or signed up so we can see which of our ads work and show them to relevant people.

3. Your Business Data

All business data you enter into H4B — including orders, customer information, payment records, and team data — belongs to you. We process this data solely to provide the Service. We do not access, analyse, or use your business data for any purpose other than operating the platform on your behalf, unless required to do so by law or with your explicit consent.

Your customers' data (names, contact details, order history) that you add to H4B is your responsibility. You must ensure you have the appropriate consent from your customers to store and process their information within the platform.

4. Payment Processing

Payments are processed securely by a PCI DSS-compliant payment gateway. This covers your subscription to H4B and, if you use H4B's payment gateway, your customers' online payments to you. H4B does not store card numbers, UPI IDs or other payment credentials on our servers. The payment gateway handles payment data under its own privacy policy; ask us if you would like to know which provider processes your payments.

Your customers' online payments are sent to the bank account you have verified with us; H4B does not hold your customers' money. We deduct our platform fee, plus GST on that fee, from each online payment, and we issue you GST tax invoices for your subscription and for these fees. To set up payouts we collect the payout details described in Section 1 and share them with our payment processing provider for verification. Your account number and PAN are stored encrypted in our database; only the last four digits of the account number are kept readable, so we can show you which account is connected.

5. Data Sharing & Third-Party Services

We do not sell, rent, or trade your personal information. We share data only with the following service providers — to operate the H4B platform, apart from the advertising measurement provider, which receives data only for the advertising measurement described in Section 8:

• Database and hosting providers — store and serve the H4B application and your data, with encryption at rest and in transit, plus network protection against attacks.
• Payment processing provider — processes subscription billing and your customers' online payments, and verifies your payout account.
• Scheduling provider — handles demo booking and calendar scheduling.
• Email delivery provider — sends the transactional emails we and your shop send (account emails, receipts, tax invoices, order updates).
• Website analytics provider (Google LLC) — receives Google Analytics 4 data from our public website and the sign-up page of the H4B app (Section 8).
• Advertising measurement provider (Meta Platforms, Inc.) — receives Meta Pixel data from our public website and sign-up pages, for advertising measurement only (Section 8).

We may also disclose your information if required to do so by law, court order, or government authority, or if we believe disclosure is necessary to protect the rights, property, or safety of H4B, our users, or the public.

6. Data Storage & Security

Your data is stored on managed cloud infrastructure with the following protections in place:

• Encryption in transit (TLS/HTTPS) for all data exchanged between your browser and our servers.
• Encryption at rest for all data stored in our database, and additional application-level encryption for payout bank account numbers and PAN.
• Daily automated backups to protect against data loss.
• Role-based access controls within the platform so team members only see what they are permitted to.

While we implement industry-standard security measures, no system is completely impenetrable. We encourage you to use a strong, unique password and to notify us immediately if you suspect any unauthorised access to your account.

7. Data Retention

We retain your account and business data for as long as your subscription is active. If you cancel your subscription or your account is terminated, we will retain your data for up to 30 days to allow you to export it. After this period, your data will be permanently deleted from our systems, except where we are required by law to retain it for a longer period (e.g. financial records under Indian tax law). This includes the GST tax invoices we issue to you, which we keep for the period the law requires, together with the billing details printed on them, even after your account is closed.

To request an export of your data before deletion, please contact us at hello@handforbrand.com.

8. Cookies & Tracking

H4B uses cookies and similar technologies to keep you logged in, remember your preferences, and understand how the platform is used. We use:

• Session cookies: temporary cookies that expire when you close your browser, used for authentication.
• Preference cookies: remember settings such as language and display preferences.
• Analytics: we may use privacy-friendly analytics to understand aggregate usage patterns. On our public website we use Google Analytics, described below. We do not use advertising-based tracking inside the logged-in H4B platform or on shop storefronts; the only advertising technology we use is the measurement pixel described below, on our public pages.

You can disable cookies in your browser settings, but this may prevent certain features of H4B from working correctly.

Website analytics (Google Analytics 4)

On our public website (handforbrand.com) and the sign-up page of the H4B app we use Google Analytics 4 (GA4), a web analytics service from Google LLC, to understand how many people visit, which pages they read and how many start and finish signing up. It is not loaded in the logged-in H4B dashboard, on shop storefronts, or on the order pages your customers see.

• What it collects: the pages you view, how you arrived, your browser and device type, and your approximate location. Google works this out from your IP address.
• Cookies it uses: first-party cookies that tell visits apart (they last up to two years).
• Events we send: page views, and when someone starts signing up, finishes signing up, books or requests a demo, sends a support message, or clicks a call-to-action in a blog post. We send no names, email addresses, phone numbers, message text or ticket numbers, and we remove everything after the "?" in a page address before it is sent.
• Across our sites: a visit to handforbrand.com is joined to the sign-up on app.handforbrand.com so that we can see which pages led to a signup. If you arrive from a campaign link, the campaign tags in it (utm_source, utm_medium, utm_campaign, utm_term, utm_content, and ad click ids) are kept and saved with your business account when you sign up, so that we know which campaign brought you.
• Who receives it: Google LLC, under its own privacy policy.

Your choices:you can block or delete these cookies in your browser settings, use a tracking-protection extension, or use Google's opt-out browser add-on. Blocking it does not stop you using our website.

Advertising measurement (Meta Pixel)

We use the Meta Pixel, a tracking tool from Meta Platforms, Inc. (Facebook and Instagram), to measure how well our advertising works and to show our ads to people likely to be interested in H4B.

• Where it is used: our public website (handforbrand.com), and the sign-up, login and onboarding pages of the H4B app. It is not loaded in the logged-in H4B dashboard, on shop storefronts, or on the order pages your customers see — those belong to you and your customers, not to our advertising.
• What it collects: the page address and referring page, your IP address, browser and device information, and the events we send it: PageView (a page was viewed), Lead (a demo request was submitted) and CompleteRegistration (a business account was created). We do not send your name, email address, phone number, or any business data to the advertising provider.
• Cookies it uses: first-party cookies that identify your browser to the advertising provider (they last up to 90 days) and, if you arrive from one of our ads, record which ad brought you. The provider may also read its own cookies in your browser when the pixel sends data to it.
• Who receives it: Meta Platforms, Inc., which handles that data under its own privacy and cookie policies.

Your choices:you can block or delete the pixel's cookies in your browser settings, use a tracking-protection extension, or change your ad preferences with the advertising platform you use. Blocking the pixel does not stop you using our website or the H4B platform. To ask us anything about it, write to hello@handforbrand.com.

9. Children's Privacy

H4B is intended for use by adults running businesses. We do not knowingly collect personal information from anyone under the age of 18. If we become aware that a minor has provided us with personal information, we will take steps to delete it promptly. If you believe a child has submitted data to us, please contact us at hello@handforbrand.com.

10. Your Rights

You have the following rights regarding your personal information:

• Access: request a copy of the personal data we hold about you.
• Correction: ask us to correct any inaccurate or incomplete information.
• Deletion: request that we delete your personal data, subject to legal retention requirements.
• Portability: request an export of your business data in a common format.
• Withdrawal of consent: where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, please email us at hello@handforbrand.com. We will respond within 7 business days.

11. Links to Other Websites

The H4B website or platform may contain links to external websites. We are not responsible for the privacy practices of those sites. We encourage you to review their privacy policies before providing any personal information.

12. Changes to This Policy

We may update this Privacy Policy from time to time as our practices evolve or as required by law. When we make significant changes, we will update the "Last updated" date at the top of this page and notify you by email if the changes materially affect how we handle your data. Your continued use of H4B after such changes constitutes your acceptance of the updated policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your data, please contact us:

HandForBrand (H4B)
Bhagalpur, Bihar, India
Email: hello@handforbrand.com

We aim to respond to all privacy-related enquiries within 2 business days.