Privacy Policy
Last updated: 6 September 2026
This Privacy Policy explains how Brandesia LLP (“Brandesia”, “we”, “us”) collects, uses, discloses and protects information in connection with the Autopublish AI platform at autopublish.brandesia.com and its WordPress plugin (the “Platform”). It should be read together with our Terms & Conditions. We are committed to handling personal data in accordance with applicable Indian law, including the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000.
1. Roles
For information about our own subscribers and website visitors, Brandesia acts as a data fiduciary/controller. For content and data that a subscriber creates or publishes through the Platform to its own website, Brandesia acts as a data processor on that subscriber’s behalf, and the subscriber remains responsible for what is published under its name.
2. Information We Collect
- Account & business information: name, company name, GSTIN, email, phone, address, and login credentials.
- Connected site information: the domain of the WordPress site you activate your licence on, and the categories and settings you configure.
- Subscriber content: the topics, keywords and prompts you enter, and the articles and images generated for you.
- AI provider API keys: the keys you supply for third-party AI and image providers, stored encrypted at rest and used only to make requests on your behalf. They are never displayed back to you in full and are never returned by our API.
- Payment information: transactions are processed by our payment processor (Razorpay). We do not store full card numbers; we retain limited transaction references for accounting and support.
- Usage & technical data: log data, device/browser information, IP address and actions taken on the Platform, used for security, diagnostics and improvement.
3. How We Use Information
- to provide, operate, secure and support the Services;
- to generate and publish content to your connected website at your direction;
- to process payments, subscriptions and licence issuance;
- to send service, transactional and account communications;
- to prevent fraud and abuse and to comply with legal obligations;
- to analyse and improve the Platform (in aggregated or de-identified form where feasible).
4. Location and Currency
To show prices in a currency appropriate to you, we determine the approximate country associated with your IP address. This is done using a local database on our own servers — your IP address is not sent to any third party for this purpose. We derive only a country, never a precise location, and you can override the result at any time using the currency selector on the pricing page. Your choice is stored in your session on your own device.
IP geolocation data by DB-IP, used under the Creative Commons Attribution 4.0 International Licence.
5. Sub-Processors & Third Parties
We use trusted third-party service providers to deliver the Services, including:
- Payments: Razorpay (payment processing);
- Hosting/Infrastructure: cloud hosting providers on which the Platform runs;
- Email/Messaging: providers used to send transactional emails and notifications;
- AI and image providers: you connect your own provider keys. The topics, prompts and related text needed to produce an article are sent to the provider you have chosen in order to generate it. You select your own providers and are responsible for their terms and their handling of that data.
We share personal data with these providers only as necessary to provide the Services, and under appropriate safeguards.
6. Security
We apply reasonable technical and organisational measures to protect data, including encryption of traffic in transit (HTTPS/TLS), encryption of AI provider API keys at rest, tenant isolation at the database level, licence binding to a single site, access controls, and rate limiting. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
7. Data Retention
We retain personal data for as long as your account is active or as needed to provide the Services, and thereafter as required to comply with legal, tax and accounting obligations or to resolve disputes. Subscriber content may be deleted after a reasonable period following account termination. Articles already published to your own website are held by you, on your website, and are not deleted by us.
8. Your Rights
Subject to applicable law, you may request access to, correction of, or deletion of your personal data, and may withdraw consent where processing is based on consent. You may remove your stored AI provider keys from your account at any time.
9. Cookies
We use strictly necessary cookies and similar technologies to keep you signed in, to remember your chosen display currency, and to operate the Platform securely. We do not use them to build advertising profiles.
10. Children
The Platform is intended for businesses and is not directed at children. We do not knowingly collect personal data from children.
11. Grievance / Contact
For any privacy questions, data-rights requests or grievances, contact the Grievance Officer of Brandesia LLP at support@brandesia.com. We will address valid requests within the timelines prescribed by applicable law.
12. Changes
We may update this Privacy Policy from time to time. Material changes will be notified via the Platform or by email, and the “Last updated” date above will be revised.