Barada Privacy Policy

This Privacy Policy describes how Barada Inc., operating the Barada platform ("Barada," "we," "us," or "our"), collects, uses, stores, shares, and protects your personal information when you access or use our web and mobile platform (the "Platform").

Your privacy is important to us. By accessing or using the Platform, you consent to the collection, use, and disclosure of your information as described in this Privacy Policy. If you do not agree with our policies and practices, please do not use the Platform. This Privacy Policy is incorporated into and is subject to the Barada Terms & Conditions of Service.

1. Information We Collect

We collect various types of information to provide and improve our Services to you.

1.1. Information You Provide to Us Directly

Account Information: When you create an Account, we collect personal information such as your name, email address, password, phone number, and other information you choose to provide.

Profile Information:

  • For Brands: Company name, contact information, commercial registration, VAT registration, billing address, payment information, marketing objectives, industry, target demographics, campaign budgets, and other information relevant to campaign creation.
  • For Agencies: Agency name, client brand information, team member details, billing arrangements, and multi-brand management preferences.
  • For Content Creators: Social media handles and links, bio, profile picture, demographic information (e.g., age, gender, location, interests), content niches, past campaign experience, expected rates, audience demographics, performance metrics, and banking details for payments. You authorize us to obtain certain public and authorized personal information from your linked social media accounts as per your platform settings and our Privacy Policy.

Campaign Data: Information related to campaigns you create or participate in, including campaign briefs, AI-generated recommendations, proposals, agreements, deliverables, communications between Brands and Content Creators, content submissions, approval workflows, and feedback.

Payment Information: When you make or receive payments through the Platform's escrow system, we collect payment details such as bank account details, BenefitPay information, and other local payment method details. This information is processed by our third-party payment processors including Stripe and regional payment gateways, and we do not directly store sensitive payment card data.

Communications: Records of your communications with us, including customer support inquiries, feedback, and survey responses. This also includes information you provide when you communicate with other users through the Platform.

Identity Verification: For compliance with regional regulations, we may collect national ID numbers, commercial registration documents, or other verification documents.

1.2. Information We Collect Automatically

When you access and use the Platform, we may automatically collect certain information about your device and usage patterns:

  • Usage Data: Information on how you access and use the Platform, such as the pages you visit, the features you use, AI recommendations you interact with, the links you click, the searches you conduct, and the time and date of your activities.
  • Device Information: Details about your device, including your IP address, device type, operating system, browser type, and mobile network information.
  • Location Information: With your consent, we may collect information about your location to provide region-specific services and ensure compliance with local regulations.
  • Log Data: Server logs may include your IP address, browser type, referring/exit pages, and timestamps.
  • Cookies and Similar Technologies: We use cookies and similar tracking technologies to collect information about your browsing activity and preferences, such as your language preferences (Arabic/English), login details, and website traffic.
  • AI Interaction Data: Information about how you interact with our AI-powered features, including search queries, matching preferences, and content optimization choices.

1.3. Information We Collect from Third Parties

  • Social Media: If you connect your social media accounts to the Platform, we collect information from those accounts, such as your profile information, public posts, follower counts, engagement metrics, and content performance data.
  • Third-Party Services: We may collect information about you from third-party services including payment processors, analytics providers, fraud detection services, and identity verification providers.
  • Creative Matter Integration: When applicable, we may receive information about content creation services provided through our partnership with Creative Matter.
  • Publicly Available Data: We may collect information from publicly available sources to enhance your profile and provide relevant AI-powered recommendations.

2. Our Role as Data Controller and Processor

Barada acts as a Data Controller for the personal information we collect directly from you for the purpose of providing and managing your access to the Platform, processing subscriptions, facilitating escrow payments, and for our own marketing and operational purposes.

When Brands or Agencies use the Barada Platform to collect or manage personal information about Content Creators (or other individuals), Barada acts as a Data Processor on behalf of the Brand or Agency. In such cases, the Brand or Agency is the Data Controller, and Barada processes such data strictly according to their instructions and our agreements with them. Brands and Agencies are responsible for complying with any regulations or laws that require providing notice, disclosure, and/or obtaining consent prior to transferring data to Barada for processing purposes.

3. How We Use Your Information

We use the information we collect for various purposes, including:

  • To Provide and Improve the Platform: To operate, maintain, and improve the Platform, including personalizing your experience through AI algorithms, providing relevant content and recommendations, and developing new features.
  • To Facilitate AI-Powered Collaborations:
    • Use Campaign AI to match campaigns with suitable creators based on performance metrics.
    • Apply Performance AI to predict campaign success and ROI.
    • Utilize Creative AI to suggest content improvements and optimization.
    • Implement Scheduling AI to determine optimal posting times.
    • Deploy Cultural AI to ensure content appropriateness for GCC markets.
  • To Manage Escrow Payments: To securely hold funds in escrow, release payments upon campaign completion, process refunds when necessary, and maintain transaction records for compliance.
  • To Communicate with You: To send service-related notifications, campaign updates, payment confirmations, security alerts, and support messages. With your consent, we may send marketing communications about new features and promotions.
  • For Analytics and Research: To analyze trends, usage patterns, and user demographics to improve the Platform. This includes creating AI-powered profiles about Content Creators based on their reach, audience context, and performance metrics to help Brands find suitable partners.
  • To Ensure Compliance: To comply with GCC regional regulations, including data localization requirements, content moderation standards, and financial regulations.
  • To Protect Our Rights: To protect our rights, property, and interests, prevent fraud and abuse, and enforce our Terms of Service.
  • For Marketing and Promotion: As stated in our Terms & Conditions, we use Brand details, Content Creator details, and Campaign Content to promote and market the Platform and its Services.

4. How We Share Your Information

We may share your information with third parties in the following circumstances:

  • Between Platform Users: Information necessary for campaign collaboration is shared between relevant Brands, Agencies, and Content Creators on the Platform. This includes profiles, proposals, campaign briefs, and performance metrics.
  • With Service Providers: We share information with trusted third-party service providers including:
    • Payment processors (Stripe)
    • Cloud hosting providers (Hetzner)
    • Analytics providers
    • Identity verification services
    • Creative Matter (for content creation services)
    • Customer support tools
  • With Affiliates: We may share your information with our affiliates and subsidiaries for business and operational purposes consistent with this Privacy Policy.
  • With Legal Authorities: We may disclose your information if required by law, legal process, or governmental request, including compliance with GCC regional authorities.
  • Business Transfers: In connection with a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction.
  • With Your Consent: We may share your information with third parties when we have your explicit consent.
  • Aggregated Data: We may share aggregated and de-identified information that cannot reasonably be used to identify you for research and industry insights.

5. International Data Transfers and Regional Storage

Data Localization

  • Saudi Arabia: Data of Saudi residents is stored within Saudi Arabia in compliance with local regulations.
  • Bahrain: Primary data center for regional operations.
  • Other GCC Countries: Data stored regionally with appropriate safeguards.

Your information may be transferred to and processed in countries other than your country of residence. We implement appropriate safeguards including Standard Contractual Clauses (SCCs) and encryption to ensure compliance with applicable laws.

6. Your Choices and Rights

You have certain rights regarding your personal information:

  • Account Management: Update your account information at any time through your account settings.
  • Communication Preferences: Opt-out of promotional emails through unsubscribe links or account settings.
  • Data Access and Portability: Request access to your personal information in a portable format.
  • Erasure: Request deletion of your personal data, subject to legal obligations (e.g., financial records, completed campaigns).
  • Correction: Request correction of inaccurate personal information.
  • Objection: Object to processing based on legitimate interest or for direct marketing.
  • Restriction: Request restriction of processing in specific circumstances.
  • Withdraw Consent: Withdraw consent for processing where we rely on consent as the legal basis.
  • AI Decisions: Request human review of automated AI-powered decisions affecting you.
  • Complaint: Lodge a complaint with relevant data protection authorities.

To exercise these rights, contact us at Support@barada.io. We will respond in accordance with applicable laws.

7. Data Security

We implement industry-standard security measures including:

  • 256-bit SSL encryption for data transmission
  • Encrypted storage of sensitive information
  • Regular security audits and assessments
  • Access controls and multi-factor authentication
  • Secure escrow payment processing
  • Incident response procedures

While we strive to protect your information, no method of transmission or storage is completely secure.

8. Data Retention

We retain your information for as long as necessary to:

  • Maintain active accounts
  • Complete ongoing campaigns
  • Comply with legal obligations (financial records, tax requirements)
  • Resolve disputes
  • Enforce agreements

General retention periods are subject to legal requirements in each GCC country.

9. Third-Party Links and Services

The Platform may contain links to third-party websites or services. We are not responsible for their privacy practices. We encourage you to review their privacy policies.

10. Children's Privacy

The Barada Platform is not intended for individuals under 18. We do not knowingly collect personal information from anyone under 18. If we discover such a collection, we will promptly delete the information.

11. Regional Compliance

Kingdom of Bahrain:

We comply with Bahrain's Personal Data Protection Law (PDPL) and coordinate with relevant authorities.

GCC Region:

We respect local customs, values, and regulations including:

  • Islamic finance compliance for payments
  • Content moderation for cultural appropriateness
  • Arabic language support
  • Regional data protection requirements

12. AI and Automated Decision-Making

Our AI systems process your data to:

  • Match creators with campaigns
  • Predict campaign performance
  • Optimize content and scheduling
  • Ensure cultural appropriateness

You have the right to request human review of AI decisions and understand the logic behind AI recommendations.

13. Changes to This Privacy Policy

We may update this Privacy Policy periodically. We will notify you of material changes by posting the new Privacy Policy and updating the "Effective Date." Continued use after changes constitutes acceptance.