Privacy policy

Last updated: October 2026

Your privacy and the privacy of your business data matter to us. This policy explains what data Brnamgy (brnamgy.com) collects, how we use it, and how we protect it.

What we collect

Account details: company name, owner name, phone, email and login name. Passwords are stored hashed so nobody can read them. During sign-up only, the first admin's password is kept encrypted until your account is set up, then deleted right away.
Your business data: what you and your team enter in the systems, such as customers, invoices, stock and staff.
Usage data: IP address, device and browser type, and country. We use the country to set the billing currency.
Payment details: only the card brand and last 4 digits, if you choose to save a card. We never receive the full card number.

How we use it

To run the systems and set up your account.
To issue invoices and confirm payments.
To send you important emails: email confirmation, invoices, due-date reminders and security alerts.
To support you when you contact us, and to protect your account from misuse.
To improve the service. We never sell your data, and we never use your business data for advertising.

Payments

Online payments are processed by Ibraan Pay and our payment partner Fawaterk. Card details are entered on their secure payment page and never pass through our servers.

Where it is stored and how we protect it

Your data is stored on Amazon Web Services (AWS) servers.
All connections are encrypted (HTTPS).
Each company's data is fully separated from every other company's at the database level.
You get two-step sign-in, detailed permissions for every staff member, and a log of every change.

Who we share it with

We share data only with the service providers we need to run the platform, and only as much as needed:

Amazon Web Services: hosting and sending email.
Cloudflare: security and website speed.
Fawaterk: payments.

We share it with no one else unless the law requires it.

Cookies

We use essential cookies for sign-in and to remember your language.
On the public website only, we may use tools such as Google Analytics and Meta Pixel to measure visits and the performance of our ads (for example how many people signed up or contacted us). We never send them your business data, and these tools do not run inside the systems.

Retention

We keep your data for as long as your account exists.
If you ask us to delete your account, we delete your business data within a reasonable time, except records the law requires us to keep, such as invoice records.

Your rights

At any time you can:

See or correct your data.
Ask for a copy of it.
Ask us to delete it.

Changes to this policy

We may update this policy; we will notify you of any important change before it applies.

Contact

For any privacy question, reach us from the Contact page.