Privacy Policy
Contents
1.Who we are
Brandy is an online marketplace for buying and selling second-hand clothing, shoes, bags and accessories, branded or not. Sellers post listings; buyers find them and message the seller on Telegram. Brandy itself doesn’t sell goods or take payments.
The service is provided by DREAMLOGIC TECH LLC (TIN (STIR): 311960493; “Brandy”, “we”). We own and operate the user database.
This policy covers:
- the Brandy app (iOS and Android) and the app.brandy.uz and brandy.uz websites;
- the @brandy_uz_bot Telegram bot and its Mini App;
- the @brandyuz_official Telegram channel.
It is written in line with the Law of the Republic of Uzbekistan “On Personal Data”. The rules for using Brandy are in a separate document: Terms of Use.
2.What we collect
When you sign in with Telegram
When you confirm a sign-in with your Telegram account, Telegram gives us:
- your Telegram identifier (ID);
- your first and last name as shown on Telegram;
- your username (if you have one);
- your profile photo: we make your Brandy photo from it and compare it with your Telegram photo once a week to keep it current.
We also store the language you choose.
When you sign in with Apple (iPhone)
On iPhone you can also sign in with your Apple account. Apple then gives us:
- the identifier Apple issues for Brandy (it belongs to Brandy only; other apps don’t know it);
- your name — only at the first sign-in, and only if you choose to share it.
We don’t ask for your email. We keep a key Apple issues (a refresh token) so we can revoke the Apple link when you delete your account. To post listings you connect your Telegram account once, because buyers message sellers on Telegram; the Telegram data above is then added to your account.
What you add yourself
- Profile (optional): a short bio, your city, your clothing and shoe sizes.
- Listings: photos, category, brand, item name, size, condition, your “Original / Copy” answer, prices, description and region. We also keep the listing’s status (active or sold) and the date it sold.
- Ratings: the stars you give sellers (1 to 5).
When you use Brandy
- the listings you like, save and view;
- the sellers you follow;
- the listings on which you tapped “Write” (Uzbek «Yozish») to message the seller;
- if you first opened the Mini App in Telegram through one of our ad links, the short name of that ad (for example “kosmetika1”). We use it only to see which ad brought a new user;
- the reports you send (the listing or seller, the reason and your comment) and the users you block;
- sign-in sessions: a random device identifier created by the app, and when the session started and was last used. The session key is stored on our server only as an irreversible hash.
Location
If you allow location access, the app works out your region so that listings near you come first:
- the coordinates are rounded to about 1 km and sent to the server once;
- the server uses them only to find the region. Coordinates are not stored and not written to logs;
- only the region’s name is kept on your device.
If you don’t allow it, the region is estimated from your internet (IP) address, which is not stored either. You can pick your region yourself in Settings and turn location access off at any time in your device settings.
Technical data
With every request our server sees the IP address, the device or browser type and the time. We use them to protect the service from excessive requests and to fix errors. Server logs have a limited size and old entries are deleted automatically.
When you open one of our ad links (brandy.uz/get/…), we add one to that ad’s click count for the day and your device type (iPhone, Android or computer). The count isn’t linked to you: the counter keeps no IP address, device identifier or cookie (to guard against excessive requests, the server holds the address in memory for at most an hour and never writes it to disk). Like any request, the visit also reaches the server logs described above.
Listings from public Telegram channels
Brandy also shows sale listings that sellers have published in public Telegram channels. From such a listing we take its text, photos and the contact details written in it (the seller’s username or phone number), and create a seller page in Brandy with them.
If it is your listing, you can ask us to remove it or move it to your account (section 8). If you sign in to Brandy with the same username, such listings move to your account automatically.
Phone number
We don’t ask for your phone number. An earlier version of the bot did: if you gave it then, it is kept in your account, is never shown to others and is deleted with your account.
When you contact support
- @brandy_support_bot: your message (text, photo, voice) is copied into the Brandy team’s Telegram chats with this bot, and the answer comes back through the same bot. The team sees your Telegram ID, name, username, language and, if you have a Brandy account, how many active listings you have. The conversation itself stays in Telegram; our server keeps only message numbers that tell which message belongs to whom.
- support@brandy.uz: your email reaches the support mailbox together with your email address and what you wrote.
What we don’t collect
We don’t ask for your email, date of birth, gender, home address, contacts, payment card details or advertising identifier. The app contains no advertising, tracking or third-party analytics tools.
3.Why we use data
| Purpose | Data | Legal basis |
|---|---|---|
| Creating your account and signing in | Telegram data, sessions | Terms of Use (contract) |
| Posting, showing, searching and publishing listings in the channel | listings, profile | contract |
| Personalising the feed: new and unseen listings, follows, “Picks for you” | likes, saves, views, follows, sizes | contract |
| Showing nearby listings first | region | your consent (location permission); legitimate interest for the region from the IP address |
| Connecting buyers with sellers | name, Telegram profile, listing | contract |
| Ratings and trust | ratings, “Write” taps | contract |
| Reviewing reports, blocking abusers, hiding users you blocked | reports, blocks | contract; legitimate interest |
| Bot messages about your listings (“Still not sold?” and others) | Telegram ID, listings | contract |
| Answering your requests (support bot, email) | Telegram ID, name, username, your messages or email address | contract; legitimate interest |
| Security and fighting fraud and abuse | technical data, listings, reports | legitimate interest; legal obligation |
| Measuring which ads work | ad-link clicks (total counts), the ad an account came from | legitimate interest |
| Improving the service (overall statistics such as the number of listings and contacts) | aggregated data | legitimate interest |
The bot only sends you messages about your account and listings. If we ever start sending promotional messages, we will ask for your separate consent first.
We use artificial intelligence to analyse listings (section 4). Decisions that matter to you, such as blocking an account, are never made automatically alone: a person reviews them.
4.Who sees your data and who we share it with
Everyone
- your listings: photos, description, price, size, condition and region;
- your profile: name, username, photo, bio, city, rating and listings;
- posts in the @brandyuz_official channel: a collage of the listing’s photos, the description and the seller (username or a link to their Telegram profile).
Others can forward or save channel posts. If you delete a listing, it disappears from Brandy and the channel, but we can’t control copies other people made earlier.
The seller
If you tap “Write” on a listing, the seller may receive your name and a link to your Telegram profile so they can reply. The conversation then continues on Telegram, and Brandy can’t see it.
If you report someone, the seller never sees who reported them: only Brandy’s moderators see reports. If you block someone, they aren’t told.
Service providers
We share data only as far as the service needs it:
- Telegram: sign-in, bot messages and the channel run on Telegram. Telegram processes data under its own privacy policy.
- Apple: if you choose Sign in with Apple on iPhone, Apple confirms the sign-in. Apple processes data under its own privacy policy.
- netcup GmbH (Germany): our servers are hosted here. It provides technical services only and doesn’t use the data for its own purposes.
- Anthropic (USA): an artificial intelligence service. We use it to extract the brand, price and size from the text and photos of listings taken from public channels. When the check that a brand is visible in the photos of listings posted through the bot is turned on, those photos are checked by this service too. Anthropic receives only listing content, not your account data.
- Cloudflare (USA): DNS for the brandy.uz domain; forwards email sent to support@brandy.uz to the support mailbox.
- Google (USA): the support mailbox (Gmail). It receives only the emails you send to support@brandy.uz.
The Brandy team
Our staff see the data needed for moderation, support and running the service. Access to the admin panel is restricted and protected.
Other cases
- Government authorities: only where the law requires it and on an official request.
- A legal successor: if the company is reorganised or the service passes to someone else, with this policy’s terms preserved.
You download the app from the App Store or Google Play. Apple and Google act under their own policies; we don’t give them your profile or listing data.
We don’t sell your data or share it with advertising networks.
5.Transfers abroad
Our servers are in Germany. Cabinet of Ministers Resolution No. 415 of 29 July 2026 lists Germany among the countries that adequately protect personal data, so storing data there complies with Articles 15 and 27¹ of the Law “On Personal Data”.
Anthropic, Cloudflare and Google are in the USA, and Telegram runs its own servers in several countries. They receive only the data described in section 4, and only for those purposes.
We don’t collect the data that must be stored in Uzbekistan (biometric and genetic data).
6.How long we keep data
| Data | Period |
|---|---|
| Account and profile | As long as you have an account. What happens on deletion is described in section 8 |
| Listings | Until you delete them or your account. If a listing hasn’t been updated for 30 days, the bot asks “Still not sold?”; with no answer for 7 more days, the listing becomes inactive and is removed from the channel |
| Likes, saves, follows and viewed listings | Until you delete your account. You can undo a like, save or follow at any time |
| Reports and blocks | Until you delete your account. Blocks are then deleted; reports stay in the moderation history, no longer linked to you |
| Sign-in sessions | Until you sign out or the session expires. Closed sessions are deleted after 30 days |
| Apple link | Until you delete your account. On deletion Apple gets a revocation request and the key is deleted |
| Support bot conversations | Stay in Telegram, in the chat between you and the bot. The message numbers on our server are deleted after 180 days, or at once when you delete your account. If the team has temporarily stopped you from writing for spam, that restriction is kept until it ends (even after account deletion), at most 1 year |
| Emails to support@brandy.uz | Until the request is resolved, then at most 1 year |
| Location coordinates | Not stored |
| Server logs | Limited in size; old entries are deleted automatically |
| Backups | Database backups are kept for up to 60 days. The backup copy of listing photos may be kept longer: it is never shown anywhere and is deleted on your request |
7.How we protect data
- All connections between the app, the website and the server are encrypted (HTTPS).
- Sign-in is confirmed by Telegram or Apple; Brandy stores no passwords.
- In the app, the sign-in key is kept in the device’s secure storage (iOS Keychain, Android Keystore); in a browser, in a cookie that page scripts can’t read. Our server keeps only its hash.
- When you sign out or delete your account, the session is closed at once.
- Only staff who need it can access the data and backups.
- If data leaks, we will notify the competent authority within the time limits set by law, and you as well if the incident affects you.
8.Your rights and deleting your account
Your rights:
- to know which of your data is processed, why and on what basis, who it was shared with, how long it is kept and whether it is transferred abroad;
- to access your data and get a copy;
- to correct it: you edit your profile and listings in the app yourself; your name and photo come from Telegram;
- to withdraw consent, for example by turning off location access in your device settings;
- to ask us to delete your data or stop processing it;
- to complain to the competent authority or a court.
How to contact us. Message @brandy_support_bot or email support@brandy.uz (section 12). To confirm the request is yours, we may ask you to write from the same Telegram account. We reply within 10 days; if we refuse, we explain why.
Deleting your account. In the Brandy app: Settings → “Delete account” (Uzbek «Akkauntni oʻchirish», Russian «Удалить аккаунт»). You can also message us. When your account is deleted:
- all your listings and their photos are deleted from Brandy and from the channel;
- your likes, saves, viewed listings, follows, blocks and the ratings you received are deleted;
- your name, username, photo, bio, city, sizes and phone number (if any) are deleted;
- all sessions are closed;
- if you signed in with Apple, the Apple link is revoked;
- ratings you gave other sellers, the count of “Write” taps and the reports you sent stay, no longer linked to you.
Deletion can’t be undone. If you later sign in with the same Telegram or Apple account, a new empty account is created. Data may remain in backups for the periods in section 6.
9.Age limit
Brandy is meant for users aged 16 and over. If you are under 16, please don’t use Brandy. If we learn that we have unknowingly collected data from someone under 16, we will delete it. If you are under 18, you need a parent’s or guardian’s consent to post listings and buy.
10.Data on your device and in your browser
The app and the website keep on your device only what they need to work: the sign-in session, language, theme (light or dark), region, an unfinished listing draft and a copy of the feed so it opens faster. No advertising or tracking cookies are used.
11.Changes to this policy
We may update this policy. We will announce material changes in the app, the bot or the channel at least 30 days before they take effect. Additions about a new optional feature take effect together with that feature. We will ask for new consent before using data for a new purpose. The current version and its effective date are shown at the top of this page.
12.Contact
DREAMLOGIC TECH LLC
- TIN (STIR): 311960493
- Registered address: Republic of Uzbekistan, Tashkent, Yunusobod District, Turkiston MFY, Block 6, Building 40, Apartment 27
- Email: support@brandy.uz
- Telegram support bot: @brandy_support_bot (in the app: Settings → “Help”, Uzbek «Yordam»)
- Channel: t.me/brandyuz_official
We reply to privacy questions and requests within 10 days.