Privacy Policy

Who we are

The Brownie Media client portal (app.browniemedia.co) is run by Brownie Entertainment LLP (LLPIN ADB-2426), 62/63 Commercial Complex, The Pavilion, Church Street, Bangalore 560001, Karnataka, India. In this policy, "we" means Brownie Entertainment LLP, trading as Brownie Media.

The portal is a working tool for our client engagements. It is used by our clients and the people they invite, and by the Brownie Media team. It is not open to the public.

What we collect

• Account details: your name, work email, job title, role and the client account you belong to, plus a phone number, profile photo and password if you choose to add them. Passwords are stored only as a one-way hash, never as text.
• Sign-in records: when you signed in and how (password, sign-in link or Google). Brownie Media staff sign in with their company Google account, which shares their name and email with us.
• Your work in the portal: approvals, change requests and comments, weekly and general feedback, questions you send to the team through Mason, and anything you add to Brand Guidelines.
• An activity log of actions taken in the portal: who did what, and when.
• Content we manage for you: your content calendar, documents and links, shoot details (dates, locations, who attends, what to prepare) and the performance numbers and charts of your social accounts.
• Meeting notes: all client calls with us are recorded and transcribed with Fireflies for documentation and operational purposes. The summaries, attendee names and transcripts are stored in Notion and copied into the portal.
• Security records: if a password sign-in fails, we keep the email and network (IP) address for 15 minutes to stop password guessing.
• Mason, the portal assistant: questions it could not answer and the helpful or not helpful votes on its answers, so we can improve the Help Centre. Mason's answers are written by us; it does not use AI.

We do not collect payment details, government ID numbers or other sensitive personal data in the portal. Please do not add any.

How we use it

• To deliver the services your organisation has engaged us for: planning, approvals, shoots, reporting and feedback.
• To sign you in and keep your account and your organisation's data secure.
• To email you about your work: your invitation and sign-in links, items ready for your review, reminders before a reply-by date, monthly reports, our replies to your feedback, and shoot details.
• To tell our team when you act in the portal, by email and in our internal Slack.
• To fix problems and improve the portal and its Help Centre.

We use your data only for these purposes. We do not sell it, we do not use it for advertising, and the portal does not use it to train AI models. There are no advertising or analytics trackers in the portal.

Cookies and browser storage

The portal sets one cookie, cp_session, which keeps you signed in for up to 30 days. It is essential, cannot be read by scripts, and is removed when you sign out.

Your browser also stores a few preferences on your device: light or dark mode, your calendar and table view settings, and whether you have seen Mason's welcome hint. These never leave your device.

The sign-in page loads Google's sign-in button, which is subject to Google's own privacy policy.

Who we share it with

Only with the service providers that run the portal, each for its own part of the work:

• MongoDB Atlas: the database, hosted in Mumbai, India.
• Vercel: hosting for the portal.
• Resend: sends the portal's emails.
• Slack: our team's internal notifications about portal activity.
• Notion: where meeting notes and many working documents live.
• Fireflies: records and transcribes all client calls.
• Google: sign-in for Brownie Media staff.
• Our private backup server, which keeps daily backups of the database.

Some of these providers may process data outside India. Each is bound by its own terms and privacy policy. We may also disclose data where the law requires it.

Inside the portal, people only see their own organisation's workspace. The Brownie Media team can see every client workspace in order to do the work.

How long we keep it

• Account and work records, including meeting recordings, transcripts and notes: kept indefinitely, during and after our engagement, as the permanent record of the work we did together. You can still ask us to delete your personal data (see Your rights below).
• Database backups: 14 days.
• Items moved to Trash: deleted permanently after 30 days.
• Failed sign-in records: 15 minutes.

How we protect it

The portal runs only over HTTPS. Passwords are hashed. Every request is checked against your current login, so access ends as soon as a login is switched off or removed. Each person only sees their own organisation's workspace, and actions are limited by role (Client Admin, Editor or Viewer). Sign-in attempts are limited, the database is backed up daily, and the portal's code is checked automatically for known security problems on every change.

No system is perfectly secure. If a breach affects your personal data, we will tell you and the authorities as the law requires.

Your rights

Under India's Digital Personal Data Protection Act, 2023 and other applicable laws, you can ask us to tell you what personal data we hold about you, correct or update it (you can change most of it yourself on your Profile page), delete it or close your login, withdraw your consent, and nominate someone to exercise these rights on your behalf. If your login was created by your organisation, we may check with your organisation's Client Admin first.

To make a request or raise a complaint, email deepak@browniemedia.co. We will respond as soon as we can and within the time the law requires. If you are not satisfied with our answer, you may complain to the Data Protection Board of India.

Children

The portal is for business use and is not meant for anyone under 18.

Changes to this policy

We will update this page when the portal changes how it handles personal data, and change the date at the top. If a change is significant, we will tell our clients by email.

Contact

Deepak Jiji, Designated Partner, Brownie Entertainment LLP: deepak@browniemedia.co.