Privacy Policy
Last updated: March 10, 2026
Introduction
At Brainpage Ltd. ("Brainpage", "we", "our", or "us"), we take your privacy seriously. This Privacy Policy explains how we collect, use, store, disclose, and safeguard your information when you use the Brainpage AI email assistant service ("Service"), including data we receive through Google APIs.
Information We Collect
Information You Provide
- Account Information: When you create an account, we collect your name, email address, and password.
- Payment Information: If you subscribe to a paid plan, we collect payment details through our secure payment processor.
- Standard Operating Procedures (SOPs): Instructions you email to Brainpage for processing your emails.
- Support Communications: When you contact us for support, we collect the information you provide.
Google User Data
When you connect your Google account to Brainpage, we access the following Google user data with your explicit consent:
- Google Account Profile: Your name, email address, and profile picture, used to create and maintain your Brainpage account.
- Gmail Messages: The content and metadata of email messages in your Gmail account, used to read, draft, and send emails on your behalf according to your instructions. Brainpage only accesses messages necessary to perform the actions you have requested.
- Gmail Labels and Filters: Used to organize and sort your email as directed by your SOPs.
- Google Calendar Data: Your calendar events and availability, used to schedule meetings and respond to calendar-related emails on your behalf.
- Google Contacts: Your contact information, used to address emails and identify senders when processing your inbox.
Information Collected Automatically
- Usage Data: We collect information about how you interact with our Service, including features used and frequency of use.
- Device Information: We collect information about the device and browser you use to access our Service.
- Log Data: Our servers automatically collect information when you access our Service, including IP address, browser type, and timestamps.
How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve the Brainpage Service
- Read, draft, and send emails on your behalf according to your instructions
- Process transactions and send related information
- Send you technical notices, updates, and support messages
- Respond to your comments, questions, and requests
- Monitor and analyze trends, usage, and activities to improve the Service
- Detect, investigate, and prevent fraudulent transactions and abuse
How We Use Google User Data
Brainpage uses Google user data exclusively to provide and improve the user-facing features of our Service. Specifically, we access your Google data to:
- Read your incoming emails and apply your SOPs to them
- Draft email replies for your review and approval
- Send emails on your behalf only after you have approved them
- Sort and label your emails according to your instructions
- Check your calendar availability for scheduling requests
- Look up contacts when composing or responding to emails
We do not use Google user data for any purpose other than providing or improving the Brainpage Service. No Google user data is used for advertising, market research, or any other purpose unrelated to the functionality of the Service.
Google API Services — Limited Use Disclosure
Brainpage's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy , including the Limited Use requirements.
In particular:
- We only use Google user data to provide and improve the Brainpage Service.
- We do not transfer Google user data to third parties except as necessary to provide the Service, as required by law, or with your explicit consent.
- We do not use Google user data for serving advertisements, including retargeting, personalized, or interest-based advertising.
- We do not allow humans to read Google user data unless we have your affirmative consent, it is necessary for security purposes, to comply with applicable law, or our use is limited to internal operations and the data has been aggregated and anonymized.
Email Content Processing
Important: Brainpage processes email content solely to provide the Service as described above.
- Email content is processed only to carry out actions you have instructed
- We do not store your email content beyond what is necessary for active processing
- We do not use your email content to train AI models
- We do not share your email content with third parties
- Nothing is sent from your account without your explicit approval
What We Do Not Do with Your Data
We want to be clear about what we will never do with your data, including Google user data:
- We do not sell your data. We will never sell your personal information or Google user data to third parties, data brokers, or information resellers.
- We do not use your data for advertising. We do not use your data for targeted advertising, personalized ads, retargeted ads, or interest-based advertising.
- We do not use your data for AI model training. Your emails, SOPs, and Google user data are never used to train machine learning or AI models.
- We do not use your data for credit or lending decisions. Your data is never used to determine credit-worthiness or for lending purposes.
- We do not build profiles for resale. We do not create user profiles or databases for sale or transfer to third parties.
Data Sharing, Transfer, and Disclosure
We do not transfer or disclose your personal information or Google user data to third parties except in the following limited circumstances:
- Service Providers: We share data with trusted service providers who assist us in operating the Service (such as cloud hosting and payment processing). These providers are contractually bound to protect your data and may only use it to provide services to Brainpage.
- With Your Consent: We may share information when you have given us explicit consent to do so.
- Legal Requirements: We may disclose information if required to do so by law, regulation, legal process, or governmental request.
- Safety and Security: We may disclose information to protect the rights, property, or safety of Brainpage, our users, or the public.
We do not share, transfer, or disclose Google user data to any third party for purposes unrelated to providing the Brainpage Service.
Data Security
We implement appropriate technical and organizational measures to protect your personal information, including Google user data, against unauthorized access, alteration, disclosure, or destruction. These measures include:
- End-to-end encryption for data in transit (TLS 1.2+)
- Encryption at rest for all stored data (AES-256)
- Regular security audits and penetration testing
- Strict access controls and multi-factor authentication for internal systems
- Logging and monitoring of all data access
Data Retention and Deletion
We retain your personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy:
- Account Data: Retained for as long as your account is active. Deleted within 30 days of account closure.
- Email Content: Processed in real-time and not retained beyond active processing sessions.
- Usage Logs: Retained for up to 12 months for security and service improvement, then deleted.
- Payment Records: Retained as required by applicable tax and financial regulations.
Requesting Deletion: You may request deletion of your account and all associated data at any time by emailing hello@brainpage.com or through your account settings. Upon receiving a verified deletion request, we will delete your data within 30 days, except where retention is required by law.
When data is deleted, it is permanently removed from our active systems. Backup copies are purged within 90 days.
Your Rights
Depending on your location, you may have the following rights:
- Access: Request a copy of the personal data we hold about you.
- Correction: Request correction of inaccurate or incomplete data.
- Deletion: Request deletion of your personal data.
- Portability: Request a machine-readable copy of your data.
- Objection: Object to certain types of data processing.
- Withdrawal of Consent: Withdraw consent at any time where processing is based on consent.
- Revoke Google Access: You can revoke Brainpage's access to your Google data at any time through your Google Account permissions page or by contacting us.
To exercise any of these rights, contact us at hello@brainpage.com . We will respond to your request within 30 days.
Children's Privacy
Our Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. If we make material changes, we will also notify you by email.
Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us at:
- Email: hello@brainpage.com
- Brainpage Ltd.