# Privacy Policy

> How Be1st.ai collects, uses, and shares information when you use our website and services.

Privacy Policy for Be1st.ai (operated by Brand 360 s.r.o.). What data we collect, how we use Google user data, your rights and how to contact us.

## Quick summary

- **Service operator:** Brand 360 s.r.o.
- **Contact:** via contact form
- **Google scopes:** openid, email, profile
- **Sensitive Google data:** Never accessed

## 1. Who we are

Be1st.ai is operated by **Brand 360 s.r.o.**, a company registered in the Slovak Republic.
Contact: [our contact form](/contact)

## 2. What data we collect

### A) Account data

### B) Website audit data

### C) Billing data (when payments are enabled)

We do **not** store full credit card numbers, CVV codes, or other complete payment-card details. Card data is handled directly by our payment provider, which is PCI-DSS compliant.

### D) Technical data

## 3. How we use Google user data

Be1st.ai uses Google user data only to authenticate users, create and manage user accounts, display basic profile information inside the application, and secure access to the service.

We request the following Google OAuth scopes:

We do **not** request access to Gmail, Google Drive, Google Calendar, Google Ads, Google Analytics, Search Console, or any other restricted Google scopes. We do not use Google user data for advertising, profiling, or any purpose unrelated to authentication and providing the service.

## 4. How we use other data

We use the data described above to:

## 5. Data sharing

We do **not** sell users' personal data. We only share data with service providers necessary to operate the service, such as:

These providers are contractually bound to protect personal data and may only process it on our instructions for the purposes described above.

## 6. Google API Limited Use statement

Be1st.ai's use and transfer of information received from Google APIs will adhere to the [Google API Services User Data Policy](https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.

## 7. Data retention

You can request deletion of your data at any time by contacting us.

## 8. User rights

If you are located in the EU/EEA, you have the following rights under the GDPR:

To exercise any of these rights, contact us at [our contact form](/contact).

## 9. Cookies and tracking

Be1st.ai uses cookies, local storage, and session cookies for: login and session management, security (CSRF protection, abuse prevention), traffic and conversion measurement, and remarketing. Strictly necessary cookies are always active; analytics and marketing cookies are used **only with your consent**, granted via the cookie banner (Consent Mode v2).

For measurement we use the following third-party tools:

**Server-side measurement:** in addition to browser cookies, we send conversion events (sign-up, contact, payment) from our server directly to providers via their APIs (Meta Conversions API, Google Measurement Protocol) for more accurate conversion measurement. Marketing events without your consent are processed in a restricted mode (Limited Data Use); payment-related events are processed on the basis of contract performance. The email sent this way is **hashed** (SHA-256) before transmission.

## 10. Security

We apply reasonable technical and organizational measures to protect your data, including:

No method of transmission or storage is 100 % secure. While we work to protect your data, we cannot guarantee absolute security.

## 11. Children

Be1st.ai is not directed to or intended for use by children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

## 12. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will update the "Effective date" at the top of this page. Material changes will be communicated through the service or by email where appropriate.

## 13. Contact

For questions about this Privacy Policy, contact us at [our contact form](/contact).