Privacy Policy

Brainztem (“Brainztem,” “we,” “us”) provides an agentic operating system for businesses and nonprofits, offered at brainztem.com. This policy covers the marketing site, the website-scan trial, and paid instances we build for clients. For questions or requests, reach us at relax@brainztem.com.

• The website you scan. When you enter a URL, our server fetches your site's publicly available pages and uses their text to build your preview. We only read public pages — we do not log into, or attempt to access, anything private.
• Your email address — if you start a trial, purchase, or contact us. Used to reach you about your workspace, your engagement, and support.
• Messages you send the crew. Your chat with the trial agents is stored with your workspace so the conversation persists across visits.
• Payment information.Payments run through Stripe. Card and banking details are entered on Stripe's secure checkout and are never seen or stored by Brainztem — we receive only a confirmation, the amount, and the email you provided at checkout.
• Usage and device data. Page views and aggregate, privacy-friendly analytics; the steps you take through the funnel (scan → trial → checkout) in de-identified form; and your IP address, used for rate-limiting and abuse prevention.
• Cookies — a small number, described below.

We do not sell your personal information, and we do not buy personal data about you from third parties.

• To build and run your workspace, generate your preview, and power the agent chat.
• To process payments and deliver the engagement you purchased.
• To send you transactional email — sign-in links, receipts, and workspace notices.
• To secure the service: rate-limiting, fraud and abuse prevention, and debugging.
• To understand, in aggregate, how the site and funnel perform so we can improve them.

We rely on your consent (starting a scan or trial), the performance of a contract (delivering a paid instance), and our legitimate interests (running and securing the service) as the bases for this processing.

The agent chat and the website scan are powered by Anthropic's Claude models. The content needed to answer you — your public site text and your messages — is sent to Anthropic to generate a response. Your content is not used to train foundation models through this API. We do not use your data to train models of our own.

Agents draft, plan, and prepare — but anything that sends externally, spends money, changes code, or deletes data is human-gated and never executes without a person's approval. See our safety & approvals model.

We use a small set of established service providers, each handling only what its job requires:

• Stripe — payment processing (PCI-compliant; card data never touches our servers).
• Anthropic — the AI models behind the scan and agent chat.
• Supabase — database and file storage. Tables run with row-level security; stored documents live in a private bucket served only through short-lived, signed links.
• Resend — delivery of transactional email.
• Vercel — hosting and privacy-friendly, cookieless web analytics.

We share personal data with these providers only to run the service, and only under agreements that require them to protect it. We may also disclose information if required by law or to protect the rights and safety of our users and the public.

Brainztem uses functional cookies only — no advertising or cross-site tracking cookies:

• Session cookie — keeps you signed in to a paid instance.
• Trial-ownership cookie — recognizes the browser that created a trial so you can return to your own workspace without re-entering your private link.
• Analytics — our web analytics are designed to be cookieless and privacy-friendly, measuring aggregate traffic without profiling you.

• Unpaid trials — the trial workspace and its data are deleted promptly after the 48-hour trial window ends.
• Paid workspaces — retained for the life of your engagement and carried into your real instance; deleted on request when the relationship ends.
• Payment and email records — kept as long as needed for accounting, tax, and legal obligations.

You can, at any time:

• Access or correct the personal information we hold about you.
• Delete your workspace and personal data — just ask.
• Export your brain to portable Markdown, so your knowledge is never locked in.
• Unsubscribe from any non-essential email.

Depending on where you live (for example, the EU/UK or California), you may have additional statutory rights, including to object to or restrict processing and to lodge a complaint with your data-protection authority. To exercise any right, email relax@brainztem.com.

Data is served over HTTPS. Database access runs through a server-only key with row-level security enabled and no public policies, so the anonymous key can read or write nothing. Uploaded documents live in a private store reachable only via short-lived signed links. Sessions and trial links use signed, expiring tokens. No method of transmission or storage is perfectly secure, but we build to keep your data isolated to you.

Brainztem is a business tool and is not directed to children. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us data, contact us and we will delete it.

We may update this policy as the product evolves. Material changes will be reflected by the “last updated” date above, and — where appropriate — by notice to you.

Questions, requests, or concerns about your privacy? Email relax@brainztem.com. See also our Terms & Conditions.