BrandMyX

Privacy Policy

Last updated: 30 August 2026

This Privacy Policy explains how Zenico Technologies SL (“we”, “us”, or “our”) handles personal data when you use BrandMyX (the “Service”). We operate from Spainand process data in line with applicable law, including the EU General Data Protection Regulation (GDPR) where it applies.

This is an MVP policy describing current practice. We may update it; the “Last updated” date will change when we do.

1. Who is responsible

Controller: Zenico Technologies SL, operating BrandMyX. Contact: diego@zenico.ai.

2. Data we collect

Depending on how you use the Service, we may process:

  • Account data — name, username, email, password hash (if you use email/password), profile bio, avatar, social links
  • Marketplace data — Spot listings, media you upload, bids, auction outcomes, messages shown in activity feeds
  • Payment data — transaction amounts, fees, status, and Stripe identifiers (we do not store full card numbers; Stripe processes cards)
  • Payout / Connect data — Stripe Connect account status flags and account IDs needed to pay sellers (identity and bank details are collected by Stripe)
  • Technical data — IP address, device/browser type, approximate location derived from IP, cookies or similar tech needed for sessions and security, basic logs, and analytics events (pages viewed, referral info, engagement signals)

3. How we use data

We use personal data to:

  • Create and secure accounts (including Google sign-in when you choose it)
  • Run listings, auctions, checkout, and seller payouts
  • Show public profiles and Spot pages you choose to publish
  • Prevent fraud, abuse, and security incidents
  • Comply with law and enforce our Terms
  • Measure and improve the Service with Firebase / Google Analytics (traffic, popular pages, and similar product metrics)

Legal bases under GDPR typically include contract performance (providing the marketplace), legitimate interests (security, product improvement, limited marketing of the Service itself), consent where required (e.g. certain non-essential cookies or optional fields), and legal obligation.

4. Processors and sharing

We share data with providers who help us run the Service, including:

  • Google Firebase — Authentication, Firestore database, Cloud Storage, App Hosting / Cloud infrastructure, and Firebase Analytics (Google Analytics for Firebase) to understand how the Service is used
  • Stripe — payments, Connect onboarding, payouts, fraud tools

These providers process data under their terms and data processing terms. Analytics may be processed by Google under the Google Privacy Policy. Some processing may occur outside your country (for example in the United States) with appropriate safeguards as offered by those providers.

We may disclose data if required by law, to protect rights and safety, or in connection with a merger, acquisition, or asset sale (with notice where required).

We do not sell your personal data.

5. Public information

Usernames, Spot listings, bid history on Spot pages, and profile fields you publish are visible to other users and may be indexed or shared outside the Service. Do not post information you want to keep private.

6. Retention

We keep account and marketplace records while your account is active and for a reasonable period afterward for disputes, accounting, fraud prevention, and legal compliance. Payment records may be retained longer as required by financial rules. You can request deletion; we may retain limited data when we must.

7. Your rights

Depending on your location, you may have rights to access, correct, delete, restrict, or port your data, and to object to certain processing. You may also withdraw consent where processing is consent-based. Contact diego@zenico.ai to exercise these rights. You may lodge a complaint with your local data protection authority (in Spain, the AEPD).

8. Cookies and similar technologies

We use essential cookies or local storage for authentication sessions and security. We also use Firebase Analytics (Google Analytics for Firebase), which may set or read cookies / similar identifiers to collect usage metrics such as page views and device information. Analytics helps us operate and improve the Service. You can limit some tracking via your browser settings or Google’s tools (for example the Google Analytics opt-out browser add-on where available). If we add marketing cookies or other non-essential trackers later, we will update this Policy and obtain consent where required.

9. Children

The Service is not directed to children under 18. We do not knowingly collect personal data from children. If you believe we have, contact us and we will delete it.

10. Security

We use industry-standard measures (encryption in transit, access controls via Firebase and Stripe). No method of transmission or storage is 100% secure.

11. Contact

Privacy questions: diego@zenico.ai. See also our Terms of Service.