1. Information We Collect

We collect several types of information from and about users of our website, including:

1.1 Personal Information

Personal information is data that can identify you individually. We may collect:

• Contact Information: Name, email address (if you subscribe to our newsletter or contact us)
• Account Information: Username, password (if you create an account)
• Communication Data: Comments you post, feedback you provide
• Transaction Information: Payment details (if you make purchases)

1.2 Non-Personal Information

We automatically collect non-personal information when you visit our website:

• Device Information: Browser type, operating system, device type
• Usage Data: Pages viewed, time spent, clicks, navigation paths
• Technical Data: IP address, browser settings, time zone, location (general)
• Referral Information: How you found our website (search engine, link, direct)

1.3 Aggregated Data

We may collect aggregated data such as statistical or demographic information. Aggregated data may be derived from personal information but does not directly identify you.

2. How We Collect Information

2.1 Direct Collection

We collect information directly from you when you:

• Subscribe to our newsletter or email list
• Fill out contact forms
• Leave comments on blog posts
• Create an account or register
• Participate in surveys or promotions
• Make a purchase
• Contact us via email or social media

2.2 Automated Collection

We automatically collect information through:

• Cookies: Small files stored on your device
• Web Beacons: Tracking pixels in emails and web pages
• Log Files: Server logs recording website activity
• Analytics Tools: Google Analytics and similar services
• Advertising Networks: Third-party ad tracking

2.3 Third-Party Sources

We may receive information from:

• Social media platforms (if you interact with us there)
• Analytics providers
• Advertising networks
• Public databases

3. How We Use Your Information

We use collected information for various purposes:

3.1 Website Operations

• Provide, operate, and maintain our website
• Improve, personalize, and expand our services
• Understand how you use our website
• Develop new features and functionality
• Process transactions and manage orders

3.2 Communication

• Send you newsletters and updates (with your consent)
• Respond to your comments and inquiries
• Provide customer support
• Send administrative information and updates
• Request feedback and reviews

3.3 Marketing and Advertising

• Display relevant advertisements
• Measure advertising effectiveness
• Conduct promotional campaigns
• Send promotional emails (you can opt-out anytime)

3.4 Analytics and Improvement

• Analyze website traffic and user behavior
• Monitor and analyze trends
• Optimize content and user experience
• Conduct research and testing

3.5 Legal and Security

• Comply with legal obligations
• Protect against fraud and abuse
• Enforce our Terms and Conditions
• Resolve disputes
• Ensure website security

4. Disclosure of Your Information

We may share your information in the following situations:

4.1 Service Providers

We share information with third-party service providers who perform services on our behalf:

• Web hosting providers
• Email marketing services (e.g., Mailchimp, ConvertKit)
• Analytics providers (e.g., Google Analytics)
• Advertising networks (e.g., Google AdSense)
• Payment processors
• Customer support tools

4.2 Business Transfers

If Pro Brain Rot is involved in a merger, acquisition, or sale of assets, your information may be transferred. We will provide notice before your information becomes subject to a different privacy policy.

4.3 Legal Requirements

We may disclose your information if required by law or in response to:

• Court orders or subpoenas
• Legal processes
• Government or regulatory requests
• Protection of our rights or property
• Prevention of illegal activity

4.4 With Your Consent

We may share your information for any other purpose with your explicit consent.

4.5 Aggregated Data

We may share aggregated or anonymized data that does not identify you personally.

5. Third-Party Services

Our website uses various third-party services that may collect information:

6. Cookies and Tracking Technologies

6.1 What Are Cookies?

Cookies are small text files placed on your device when you visit our website. They help us recognize you and remember your preferences.

6.2 Types of Cookies We Use

6.3 How to Manage Cookies

You can control cookies through your browser settings:

• Chrome: Settings → Privacy and Security → Cookies
• Firefox: Options → Privacy & Security → Cookies
• Safari: Preferences → Privacy → Cookies
• Edge: Settings → Privacy → Cookies

6.4 Do Not Track Signals

Some browsers have “Do Not Track” features. Currently, there is no industry standard for responding to DNT signals. We do not currently respond to DNT signals.

7. Analytics and Advertising

7.1 Google Analytics

We use Google Analytics to track and analyze website traffic. Google Analytics collects information such as:

• How often users visit our website
• What pages they visit and in what order
• How long they stay on pages
• What websites referred them

Google uses this data to provide us with reports about website traffic and usage. Google may also use this data in accordance with its own privacy policy.

Opt-out: Install the Google Analytics Opt-out Browser Add-on

7.2 Google AdSense

We use Google AdSense to display advertisements. Google uses cookies to serve ads based on your prior visits to our website or other websites.

Personalized Ads: You can opt out of personalized advertising by visiting Google Ads Settings

7.3 Affiliate Marketing

We participate in affiliate marketing programs (Amazon Associates, etc.). When you click affiliate links and make purchases:

• We may earn a commission
• Cookies track your visit
• Your purchase information is shared with the merchant
• We do NOT receive your payment information

7.4 Retargeting/Remarketing

We may use retargeting services to show you ads after you leave our website. These services use cookies to track your browsing behavior.

Opt-out options:

• Network Advertising Initiative Opt-Out
• Digital Advertising Alliance Opt-Out

8. Social Media

8.1 Social Media Plugins

Our website includes social media features such as:

• Facebook Like/Share buttons
• Twitter/X Tweet buttons
• Instagram sharing
• Pinterest Pin buttons

These features may collect your IP address, browser information, and set cookies. They are hosted by the respective social media platforms and governed by their privacy policies.

8.2 Social Media Interactions

When you interact with us on social media:

• Your activity is governed by the platform’s privacy policy
• We may view your public profile information
• Your comments/messages may be publicly visible
• We may use your interactions for marketing purposes

8.3 Linking Social Accounts

If you choose to link your social media account to our website, we may access:

• Profile information you make available
• Email address
• Friends/connections list
• Other information you authorize

9. Data Security

9.1 Security Measures

We implement reasonable security measures to protect your information:

• SSL Encryption: Secure connection (HTTPS)
• Secure Hosting: Reputable hosting providers
• Access Controls: Limited employee access
• Regular Backups: Data backup procedures
• Security Monitoring: Regular security audits

9.2 Limitations

9.3 Your Responsibility

You are responsible for:

• Keeping your password confidential (if applicable)
• Logging out of your account
• Using secure internet connections
• Reporting suspicious activity

9.4 Data Breach Notification

In the event of a data breach affecting your personal information, we will notify you and relevant authorities as required by law.

10. Data Retention

10.1 Retention Period

We retain your information for as long as necessary to:

• Provide our services
• Comply with legal obligations
• Resolve disputes
• Enforce our agreements

10.2 Specific Retention Periods

• Email Addresses: Until you unsubscribe or request deletion
• Comments: Indefinitely (unless you request deletion)
• Analytics Data: 26 months (Google Analytics default)
• Transaction Records: 7 years (tax/legal requirements)
• Cookies: Varies (typically 30 days to 2 years)

10.3 Deletion

When data is no longer needed, we will:

• Securely delete or anonymize it
• Ensure it cannot be reconstructed
• Remove from active systems

11. Your Privacy Rights

Depending on your location, you may have the following rights:

11.2 How to Exercise Your Rights

To exercise any of these rights, contact us at:

• Email: [INSERT YOUR EMAIL – e.g., privacy@probrainrot.com]
• Contact Form: www.probrainrot.com/contact

We will respond to verified requests within 30 days (or as required by applicable law).

11.3 Verification

To protect your privacy, we may need to verify your identity before fulfilling requests. We may ask for:

• Email confirmation
• Account information
• Additional identifying information

11.4 Unsubscribe from Emails

You can unsubscribe from marketing emails at any time by:

• Clicking “Unsubscribe” link in any email
• Contacting us directly
• Updating your email preferences (if you have an account)

Note: You may still receive transactional or administrative emails.

12. Children’s Privacy

12.1 COPPA Compliance

We comply with the Children’s Online Privacy Protection Act (COPPA). We do not knowingly collect personal information from children under 13.

12.2 If We Discover Child Data

If we learn we have collected information from a child under 13:

• We will delete it immediately
• We will terminate any associated account
• We will not use the information for any purpose

12.3 Parental Rights

If you believe your child has provided us with personal information, please contact us immediately at [INSERT EMAIL].

Parents/guardians have the right to:

• Review their child’s information
• Request deletion of information
• Refuse further collection or use

12.4 Teen Privacy (13-18)

For users aged 13-18, we encourage parental involvement in online activities. Parents should monitor their teen’s internet use.

13. International Users

13.1 Data Storage and Processing

Pro Brain Rot is based in India. Your information may be:

• Stored on servers located in India or other countries
• Processed by service providers in various jurisdictions
• Subject to Indian data protection laws and regulations

13.2 Cross-Border Transfers

If you access our website from outside India:

• Your information may be transferred to India
• Data protection laws may differ from your country
• By using our website, you consent to this transfer
• We implement appropriate safeguards for international transfers

13.3 Indian Data Protection Laws

We comply with:

• Information Technology Act, 2000
• Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011
• Digital Personal Data Protection Act, 2023 (as applicable)

13.4 Local Laws

You are responsible for compliance with local laws when accessing our website from your jurisdiction.

14. California Privacy Rights (CCPA)

14.1 CCPA Rights

California residents have the right to:

• Know: What personal information we collect, use, and disclose
• Access: Request a copy of your personal information
• Delete: Request deletion of your personal information
• Opt-Out: Opt-out of the sale of your personal information
• Non-Discrimination: Not be discriminated against for exercising these rights

14.2 Information We Collect (CCPA Categories)

In the past 12 months, we have collected the following categories of personal information:

• Identifiers (name, email, IP address)
• Internet/electronic activity (browsing history, interactions)
• Geolocation data (general location)
• Inferences (preferences, behavior)

14.3 Sale of Personal Information

Do we sell your personal information?

We do not sell personal information in the traditional sense. However, sharing data with advertising partners may be considered a “sale” under CCPA.

Opt-Out: You can opt-out by:

• Visiting our “Do Not Sell My Personal Information” page
• Adjusting cookie settings
• Contacting us directly

14.4 Authorized Agent

You may designate an authorized agent to make CCPA requests on your behalf. The agent must provide proof of authorization.

14.5 Verification Process

To verify CCPA requests, we may ask you to:

• Provide your email address
• Confirm information we have on file
• Provide additional identification for sensitive requests

14.6 Response Time

We will respond to verifiable CCPA requests within 45 days (extendable to 90 days if needed).

15. GDPR Compliance (EU Users)

15.1 Legal Basis for Processing

We process your personal information based on:

• Consent: You have given clear consent
• Legitimate Interests: Processing is necessary for our legitimate business interests
• Legal Obligation: Processing is required by law
• Contract Performance: Processing is necessary to fulfill a contract with you

15.2 GDPR Rights

Under GDPR, you have the right to:

• Access your personal data
• Rectification of inaccurate data
• Erasure (“right to be forgotten”)
• Restriction of processing
• Data portability
• Object to processing
• Not be subject to automated decision-making
• Lodge a complaint with a supervisory authority

15.3 Data Protection Officer

For GDPR-related inquiries, contact our Data Protection Officer:

Email: [INSERT DPO EMAIL – e.g., dpo@probrainrot.com]

15.4 Supervisory Authority

If you are in the EU/EEA and believe we have not addressed your concerns, you have the right to lodge a complaint with your local data protection authority.

15.5 Data Transfers Outside EU

If we transfer your data outside the EU/EEA, we ensure adequate protection through:

• Standard Contractual Clauses (SCCs)
• Adequacy decisions
• Other approved transfer mechanisms

16. Changes to This Privacy Policy

16.1 Right to Modify

We reserve the right to update or modify this Privacy Policy at any time. Changes will be effective immediately upon posting to the website.

16.2 Notification of Changes

When we make material changes to this Privacy Policy:

• We will update the “Last Updated” date
• We may post a notice on our website
• We may send you an email notification (if we have your email)
• Significant changes will be clearly announced

16.3 Your Responsibility

It is your responsibility to:

• Review this Privacy Policy periodically
• Stay informed about how we protect your information
• Contact us if you have questions about changes

16.4 Continued Use

Your continued use of the website after changes constitutes acceptance of the updated Privacy Policy. If you do not agree to changes, you must stop using our website.

17. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

17.1 Response Time

We aim to respond to all privacy inquiries within:

• General Inquiries: 5-7 business days
• Privacy Rights Requests: 30 days (45 days for CCPA)
• Data Breach Concerns: Immediate priority

17.2 What to Include

When contacting us about privacy matters, please include:

• Your name and email address
• Detailed description of your request or concern
• Any relevant account information
• Preferred method of response

17.3 For Specific Requests

Data Access/Deletion Requests: Please use subject line “PRIVACY REQUEST”

GDPR Inquiries: Contact our Data Protection Officer (DPO)

CCPA Requests: Use subject line “CCPA REQUEST”

Security Issues: Use subject line “URGENT – SECURITY”

13A. Indian Privacy Rights (DPDP Act 2023)

13A.1 Your Rights Under DPDP Act

As an Indian resident, you have the right to:

• Access: Obtain information about your personal data being processed
• Correction: Request correction of inaccurate or misleading personal data
• Erasure: Request deletion of personal data (subject to legal requirements)
• Grievance Redressal: File complaints with our Grievance Officer
• Nominate: Nominate another individual to exercise your rights in case of death or incapacity

13A.2 Consent

We process your personal data based on:

• Your free, specific, informed, and unambiguous consent
• Legitimate purposes as specified in the DPDP Act
• Compliance with legal obligations

You may withdraw consent at any time by contacting us.

13A.3 Grievance Officer

For privacy concerns or complaints, contact our Grievance Officer:

13A.4 Data Protection Board

If you are not satisfied with our response, you may approach the Data Protection Board of India.

13A.5 Children’s Data

For users under 18 years in India:

• We require verifiable parental consent
• Parents/guardians can exercise rights on behalf of children
• We do not process children’s data for behavioral monitoring or targeted advertising