BRAINPACK PRIVACY POLICY

1. Information We Collect

1.1 Information You Provide Directly

• Account Information: When you register, we collect your name, email address, and authentication credentials (including Google OAuth data if applicable).
• User Content: We collect the documents, text, and files you upload to create your BrainPacks. This content is processed to extract text and generate AI embeddings.
• Communication Data: If you contact support, we collect the content of your messages.

1.2 Information Collected Automatically

• Usage Data: We collect logs about how you interact with the Service (e.g., number of BrainPacks created, chat queries, and training progress).
• Device Information: IP address, browser type, and operating system for security and performance monitoring.
• Cookies: We use essential cookies to maintain your session and security.

2. How We Use Your Information

We use your information for the following purposes:

• To Provide the Service: Processing your documents to build RAG-optimized packages, enabling Chat, and Training Mode.
• To Support You: Responding to support tickets and technical issues.
• To Secure the Service: Preventing fraud, abuse, and unauthorized access.
• To Improve the Service: Analyzing aggregated (non-identifiable) usage trends to enhance performance.

3. Data Processing and AI

3.1 No Training on Your Data

By default, we do not use your proprietary User Content to train our general-purpose machine learning models or those of our third-party LLM providers.

3.2 Third-Party AI Processors

We use high-standard AI providers (such as OpenAI or Anthropic) via API to process your Knowledge Base. These providers are bound by data privacy agreements that prohibit them from using your data to train their models.

4. Retention and Deletion

As detailed in our Terms of Service:

• Active Projects: User Content is retained for 30 days from its last "Active Event" (e.g., a BrainPack export or document addition).
• Automatic Deletion: If a Project is inactive for more than 30 days, we automatically purge the associated User Content and embeddings from our active servers.
• Manual Deletion: You can delete your Projects at any time, which triggers the immediate removal of associated document content from our active database.

5. Data Security

We implement robust technical measures to protect your data, including:

• Encryption of data in transit (SSL/TLS).
• Encryption of data at rest.
• Isolated processing environments for Knowledge Bases.

6. Sharing of Information

We do not sell your data. We only share information with:

• Service Providers: Cloud hosting, database management, and payments (Stripe).
• Legal Compliance: If required by law, we may disclose information to authorities to comply with legal processes.

7. Your Rights

Depending on your location (e.g., GDPR/CCPA), you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Request the deletion of your data.
• Object to certain processing activities.

To exercise these rights, please contact us at Support@mybrainpack.com.

8. Changes to this Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.