Terms of Service

bradi GO is a reporting panel that bradi provides to its business clients. Depending on what a client enables and connects, it shows:

• website analytics collected by the bradi GO tracker installed on the client's own website, including optional session replay;
• advertising results read from the client's Meta (Facebook and Instagram) and Google Ads accounts, and search data from Google Search Console;
• analytics of WhatsApp Business conversations of numbers the client connects;
• competitor research based on publicly available websites and ad libraries, and an AI assistant that answers questions about the client's own data.

bradi GO only reads data from connected platforms. It does not create, edit, pause or pay for advertising, and it does not send WhatsApp messages. Some features are labelled "coming soon" or are offered as early versions; they may change or be withdrawn.

• bradi GO is invite-only. Accounts are created by bradi for people the client designates.
• Keep your sign-in links and password confidential, and tell us immediately at the address below if you suspect unauthorised access. You are responsible for activity under your account.
• The client decides who in its organisation has access and must tell us when a person should lose it.
• bradi staff may access a client's panel to provide support, set-up and reporting. Such access is logged, limited to one hour per session and visibly shown in the panel.

Because the client is the controller of its visitors', advertising and customers' data (see our Privacy Policy, bradi.tech/privacy), the client is responsible for:

• having a lawful basis for installing the bradi GO tracker and, where required, obtaining visitors' consent (for example through a cookie or consent banner) before the tracker or session replay runs;
• informing its website visitors and WhatsApp customers in its own privacy notice that it uses bradi GO as a processor, and handling their requests;
• marking any page elements that contain personal or sensitive information so that session replay masks or excludes them;
• connecting only accounts and WhatsApp numbers it owns or is authorised to use, and complying with the terms of Meta, WhatsApp and Google for those accounts;
• not sending special categories of personal data (such as health data) through the tracker.

You must not:

• access data of a business you do not belong to, or attempt to bypass access controls;
• reverse engineer, scrape, overload or disrupt the Services, or probe them for vulnerabilities without our written permission;
• use the Services for anything unlawful, to infringe others' rights, or to track people in breach of privacy law;
• resell or make the Services available to third parties outside your business without our agreement;
• share public report links in a way that exposes personal data.

Responsible disclosure of security issues to [email protected] is welcome.

Connections to Meta (Facebook, Instagram, WhatsApp) and Google are made with your explicit permission through those platforms' own sign-in screens, and are governed by their terms as well as ours. We access only the permissions shown on those screens and use the data only as described in our Privacy Policy.

You can revoke our access at any time in the platform's settings (instructions: bradi.tech/data-deletion). Revoking access stops further data from flowing to bradi GO; reports based on the platform will stop updating.

We are not responsible for the availability, accuracy or changes of third-party platforms. Platforms may restate figures after the fact (for example Meta's conversion attribution); bradi GO refreshes recent days on each sync, so figures can change for a few days.

For personal data we process on a client's behalf, bradi acts as processor and:

• processes it only to provide the Services to that client and on its documented instructions;
• ensures that people with access are bound by confidentiality;
• applies the security measures described in our Privacy Policy;
• uses only the sub-processors listed in our Privacy Policy, and informs the client of changes;
• helps the client answer data-subject requests and meet its security, breach-notification and impact-assessment duties;
• deletes or returns the data at the end of the service, as described in section 11;
• makes available the information needed to demonstrate compliance.

These commitments form our data processing terms under KVKK article 12 and GDPR article 28. A separately signed data processing agreement is available on request.

Fees, if any, for bradi GO and related services are set out in the offer or agreement between bradi and the client. Unless agreed otherwise, invoices are payable within 14 days. We may suspend access for invoices more than 30 days overdue after giving notice.

bradi owns the Services, their software, design and documentation. We grant you a non-exclusive, non-transferable right to use bradi GO for your business's internal purposes during the client relationship.

The client owns its data. You grant bradi the right to process it as needed to provide the Services. We may use aggregated, anonymised statistics that do not identify you, your business or any person to operate and improve the Services.

Some features (competitor research, written summaries, the chat assistant) use AI models. Their output may be incomplete or wrong; figures shown in charts and tables come directly from your data, but written interpretations should be checked before you rely on them for decisions. AI providers we use are not permitted to train their models on the data we send.

We work to keep bradi GO available and accurate but do not guarantee uninterrupted or error-free operation. We may change, improve or discontinue features; if we discontinue a feature a client pays for, we will give reasonable notice.

Either party may end the use of bradi GO in accordance with the client agreement, or, if there is none, at any time by written notice. We may suspend access immediately in case of a security threat, serious breach of these Terms, or a legal requirement.

When the client relationship ends, or when a client asks us to delete its data, we revoke our access to connected Meta and Google accounts, delete the stored access tokens, and delete the client's panel data within 30 days, except records we must keep by law. The client may ask for an export of its reports before that.

The Services are provided "as is". To the extent permitted by law, we exclude implied warranties, including fitness for a particular purpose. bradi GO is a reporting tool; business, advertising and legal decisions remain yours.

To the extent permitted by law, bradi is not liable for indirect or consequential damages, lost profits or lost data, and bradi's total liability for any claim is limited to the fees the client paid for bradi GO in the 12 months before the claim. Nothing in these Terms limits liability for intent or gross negligence, or any liability that cannot be limited by law.

Each party keeps the other's non-public information confidential and uses it only for the relationship. Your data in bradi GO is confidential information of the client.

We may update these Terms. The date at the top shows the current version. Material changes are notified to client administrators by email at least 14 days before they take effect; continuing to use the Services after that means you accept them.

These Terms are governed by the laws of the Republic of Türkiye. The courts and enforcement offices of Ankara have jurisdiction, without prejudice to mandatory consumer protection rules where they apply.

Murat Efe Doğan (bradi.tech), Ankara, Türkiye · [email protected]