Privacy Policy

1. Introduction

bRRAIn ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform and services.

2. Information We Collect

Account Information: Name, email address, company name, and billing information provided during registration.

Usage Data: Log data, device information, browser type, IP address, and interaction patterns with the Service.

Content Data: Information you upload, generate, or store through the Platform, including AI session data and organizational knowledge.

3. How We Use Your Information

We use your information to: (a) provide, maintain, and improve the Service; (b) process transactions and send related information; (c) communicate with you about updates, security alerts, and support; (d) comply with legal obligations.

4. Data Security

We implement industry-standard security measures including AES-256-GCM encryption at rest, TLS 1.3 encryption in transit, and a zero-trust architecture with 8 independent security zones. See our Security page for details.

5. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. Upon account termination, data is available for export for 30 days. After the export period, data is securely deleted within 90 days.

6. Third-Party Services

We use select third-party services for hosting, analytics, and payment processing. These providers are bound by data processing agreements and are prohibited from using your data for their own purposes.

7. Your Rights

Depending on your jurisdiction, you may have rights to: access, correct, or delete your personal data; object to or restrict processing; data portability; and withdraw consent. Contact us to exercise these rights.

8. GDPR Compliance

For users in the European Economic Area, we process personal data under lawful bases including contract performance, legitimate interests, and consent. Our Data Protection Officer can be reached at brrain.io/contact.

9. Cookies

We use essential cookies for authentication and session management. We do not use third-party advertising cookies. Analytics cookies are optional and can be disabled.

10. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be communicated via email or through the Service at least 30 days before taking effect.

11. Contact

For privacy-related questions or requests, contact us at brrain.io/contact.