Legal

Privacy Policy

A plain-language overview of what Brainiac collects, why it is processed, who may receive it, and what choices users have.

Effective March 28, 2026

Scope of This Policy

This Privacy Policy explains how Brainiac collects, uses, discloses, and safeguards personal information when you visit our website, create an account, or use our workspace and related services.

This policy applies to information we collect directly from you, automatically through your use of the service, and from third parties that help us operate authentication, analytics, support, and infrastructure.

Information We Collect

  • Account details such as name, email address, authentication identifiers, and profile information.
  • Workspace data such as prompts, documents, board content, uploaded files, and messages exchanged through the product.
  • Usage and device data such as IP address, browser type, pages viewed, timestamps, approximate location derived from IP, and interaction events.
  • Transaction and billing data when you purchase a paid plan, typically processed through third-party payment providers rather than stored directly by Brainiac.

How We Use Personal Information

We use personal information to provide and maintain the service, authenticate users, personalize the product experience, process transactions, prevent fraud, respond to support requests, and communicate important service notices.

We also use information to monitor performance, debug issues, improve product quality, train internal operations, and comply with legal obligations.

AI Processing and Service Providers

Some Brainiac features may send prompts, files, or other workspace inputs to AI or infrastructure providers acting on our behalf in order to generate responses or run product functionality.

We require providers to process data under contractual restrictions appropriate to the services they perform, but you should avoid submitting information that you are not authorized to share or that requires zero third-party exposure unless you have configured the service for that purpose.

How We Share Information

We do not sell personal information for money. We may share information with vendors and subprocessors that support hosting, authentication, billing, communications, analytics, security, and customer support.

We may also disclose information when required by law, to enforce our terms, to protect rights or safety, or in connection with a merger, acquisition, financing, or sale of assets.

Data Retention

We retain personal information for as long as reasonably necessary to provide the service, satisfy contractual commitments, resolve disputes, enforce agreements, and comply with legal obligations.

Retention periods vary based on the type of information, the sensitivity of the data, and whether the information is needed for security, accounting, or operational records.

Your Rights and Choices

  • You may request access to, correction of, or deletion of certain personal information, subject to legal and operational exceptions.
  • You may update account information through your profile or by contacting us.
  • You may opt out of non-essential communications by using unsubscribe links or account controls where available.
  • Depending on your jurisdiction, you may have additional rights relating to portability, objection, restriction, or appeal.

Security

We use administrative, technical, and organizational safeguards designed to protect personal information from unauthorized access, loss, misuse, or alteration.

No system is perfectly secure, and we cannot guarantee absolute security. You are responsible for safeguarding your own credentials and endpoint devices.

International Transfers

Brainiac may process and store information in countries other than the country where you reside. Where required, we use appropriate transfer mechanisms and contractual protections for cross-border processing.

Changes to This Policy

We may update this Privacy Policy as our product, practices, or legal obligations evolve. When material changes are made, we will revise the date shown on this page and take additional steps where required by law.

Questions or privacy requests can be sent to [email protected].