Privacy Policy

This Privacy Policy explains how BrainCrop (“we,” “us,” or “our”) collects, uses, shares, and protects information when you visit our website at www.braincrop.io, contact us, or engage with our services. We aim to be clear and brief — if anything here is unclear, write to info@braincrop.io and we’ll explain.

1. Who we are

BrainCrop is a software services firm headquartered in Pakistan with operations across Pakistan, the United States, Canada, the United Kingdom, Saudi Arabia, and Australia. We build, integrate, and operate production software for banks, educational institutes, retail businesses, and enterprises.

For the purposes of data protection law, BrainCrop is the data controller of any personal information you provide through our website or directly to us.

2. Information we collect

Information you provide

When you contact us through our website forms, email, or phone, you may share:

• Your name, job title, and company name
• Your email address and phone number
• A description of what you’d like to discuss
• Any other information you choose to include

Information collected automatically

When you visit our website, we (or our service providers) automatically collect:

• Your IP address and approximate location (country / region)
• Your device type, browser, and operating system
• Pages visited, time spent, and referring URLs
• Cookie identifiers (see Cookies and tracking, below)

Information from third parties

We do not buy personal data from third parties. If we engage with you through a referral or partner agency, that party may share your contact details with us with your knowledge.

3. How we use information

We use the information we collect to:

• Respond to your inquiry. Most contact-form submissions are read by a human within 24 hours and replied to directly.
• Provide and improve our services. Once you become a client, your information is used to deliver the project or service we’ve agreed to.
• Improve the website. Aggregate analytics help us understand which pages are useful and which need work.
• Communicate with you. If you’ve consented to marketing communications, we may occasionally send updates. You can opt out at any time.
• Meet legal and regulatory obligations. Including responding to lawful requests from authorities where required.

We do not use your information for automated decision-making or profiling that produces legal or similarly significant effects.

4. Cookies and tracking

Our website uses a minimal set of cookies and similar technologies:

• Strictly necessary cookies for the site to function correctly.
• Analytics cookies to understand how visitors use the site (page views, traffic sources). These are anonymized where possible.
• Preference cookies to remember non-essential settings.

We do not use third-party advertising cookies or tracking pixels on this site. Your browser settings can block or delete cookies at any time — doing so will not prevent the site from working.

5. Third-party services

Our website loads resources from the following third parties, which may receive your IP address and basic technical information as part of normal web traffic:

• Google Fonts (fonts.googleapis.com) — to display web fonts
• jsDelivr CDN (cdn.jsdelivr.net) — to display brand-logo SVGs
• Cloud hosting providers — for site delivery
• Analytics services (where applicable) — for aggregate usage measurement

We do not sell, rent, or share your personal information with third parties for their own marketing purposes.

6. Sharing and disclosure

We share personal information only in these limited cases:

• Service providers who help us operate the website, deliver services, or process inquiries — under contractual confidentiality obligations.
• Legal obligations — where required by law, court order, or to protect our rights, safety, or property.
• Business transfers — in the unlikely event BrainCrop is acquired or merged, your information may transfer to the successor entity subject to this policy.
• With your consent — for any other purpose, with your explicit consent.

7. Data retention

We retain personal information only as long as we have a legitimate reason to keep it:

• Contact-form submissions — typically up to 24 months from the last interaction, unless we’re in active conversation.
• Client records — for the duration of our engagement plus the period required by tax and contract law (typically 5-7 years).
• Website analytics — aggregate analytics are retained for up to 26 months.
• Marketing-consent records — until you withdraw consent or we have no continuing relationship.

When retention periods expire, we delete or anonymize the information.

8. Your rights

Depending on your location, you may have the following rights over your personal information:

• Access — request a copy of the personal information we hold about you
• Correction — request that we fix incomplete or inaccurate information
• Deletion — request that we delete your information (subject to legal retention requirements)
• Portability — request a machine-readable copy of your information
• Objection — object to or restrict our processing of your information
• Withdraw consent — withdraw any consent you previously gave

To exercise any of these rights, email info@braincrop.io. We respond to requests within 30 days. If you’re in the UK or EU, you also have the right to lodge a complaint with your local data protection authority.

9. Data security

We use industry-standard technical and organizational measures to protect personal information against unauthorized access, alteration, disclosure, and destruction. Measures include:

• Encryption in transit (TLS) for the website and email
• Access controls and authentication for internal systems
• Routine security reviews and dependency updates
• Staff training on data protection and confidentiality

No method of transmission or storage is perfectly secure. If we become aware of a personal data breach affecting you, we’ll notify you as soon as reasonably possible.

10. International data transfers

BrainCrop operates across multiple countries. Your information may be processed in Pakistan or in any country where our service providers operate. Where we transfer personal information across borders, we ensure appropriate safeguards are in place — including contractual protections aligned with applicable data protection law.

11. Children’s privacy

Our website and services are not directed to children under 16. We do not knowingly collect personal information from children. If you believe we may have collected information from a child, contact us and we’ll delete it.

12. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we’ll update the “Last updated” date at the top of this page. For material changes, we’ll provide additional notice — either through the website or by email if we have your address.