How Bandico Ventures collects, uses and protects personal data on BrandSquare. We collect as little as the product can work with, and we do not sell it.
Last updated 30 September 2026 · Bandico Ventures
Bandico Ventures operates BrandSquare and is the data fiduciary for the personal data described here. Contact us at admin@bandicoventures.com.
When you create an account: your email address. Customers are additionally asked once, on first sign-in, for a name and mobile number so a Brand can identify them at a counter.
When you list a Brand: business name, category, description, service area, website and Instagram links, logo image, the Reward you offer, and your redemption instructions.
When you pay: the listing fee amount, a payment reference, and the payment status. We do not receive or store card numbers, CVVs, UPI PINs, or banking credentials — those go directly to our payment gateway.
When you use the platform: which Brand tiles you open, the rounds you play and their outcomes, Rewards issued to you and whether they were redeemed, and any wishes you post.
Automatically: a random visitor identifier stored in a first-party cookie so a repeat visit on the same day is counted once, plus ordinary server logs. We do not use third-party advertising trackers, and we do not build advertising profiles.
To create and secure your account; to run the daily round and issue Rewards; to let a Brand verify a Reward at redemption; to take and confirm payments; to show Brands aggregate counts of tile opens, Rewards won and Rewards redeemed; to prevent fraud and abuse; and to meet legal and tax obligations.
We process this data to perform our contract with you, to pursue our legitimate interest in operating and securing the platform, to comply with law, and — where required — on the basis of the consent you give when you provide it. You may withdraw consent at any time by deleting your account.
Our database is hosted in the Asia-Pacific (Singapore) region, and some providers listed above operate globally, so your data may be processed outside India. Where that happens we rely on the provider’s contractual safeguards for protection equivalent to that required by Indian law.
Account data is kept while your account is open. Sign-in codes expire in minutes and are stored only as a one-way hash — never in readable form. Sessions expire automatically. Reward and transaction records are retained for as long as required for accounting, tax and dispute-resolution purposes, typically eight years. Aggregate and anonymised counts, which cannot identify you, may be kept indefinitely.
Under the Digital Personal Data Protection Act, 2023 you may ask us to give you a copy of your personal data, correct or complete it, erase it, or tell you who we have shared it with. You may also nominate someone to exercise these rights if you are unable to.
Write to admin@bandicoventures.com from your registered email address. We respond to verified requests within 30 days. Some data must be retained where the law requires it.
Email admin@bandicoventures.com from your registered address asking for deletion. We remove your account and personal data within 30 days, apart from records we must keep by law.
Deletion ends any active listing and forfeits unredeemed Rewards, and does not entitle you to a refund of amounts already paid — see our Terms & Conditions.
Sign-in codes are stored as salted one-way hashes. Sessions use opaque, HTTP-only cookies. All traffic is encrypted in transit. Payment credentials never reach our servers. No system is perfectly secure; if a breach affects your personal data we will notify you and the Data Protection Board of India as the law requires.
The platform is not for anyone under 18. We do not knowingly collect data from children. If you believe a child has given us personal data, write to admin@bandicoventures.com and we will delete it.
We may update this policy by posting a revised version with a new date. Where a change materially affects you, we will make reasonable efforts to notify you by email.
[NAME — to be completed]
Bandico Ventures
8-2/1 Main Road, Maddulagudem, Dammapeta, Khammam - 507306, Telangana
Email: admin@bandicoventures.com
Phone: +91 81061 36228
Complaints about how we handle personal data are acknowledged within 48 hours and resolved within 30 days. If you remain dissatisfied you may complain to the Data Protection Board of India.