Privacy Policy
This Privacy Policy explains what [LEGAL OPERATOR NAME] ("we") collects when you use Brain (brain.innovasite.info) and what we do with it.
What we collect
- Account data: your email address and display name, and a salted hash of your password. Session cookies contain a random token; only its hash is stored.
- Workspace content: everything you and your agents deliberately store — notes, documents, graph links. This is the product's purpose; it is stored in your workspace's own database and is not used for anything else.
- Agent tokens: stored only as SHA-256 hashes, with a label and last-used timestamp.
- Operational logs: standard server logs (timestamps, request paths, error messages) for reliability and abuse prevention.
What we do not do
- We do not sell your data.
- We do not use your workspace content to train machine-learning models — ours or anyone else's.
- We do not read your content except at your request (support, export, abuse investigation you reported).
Subprocessors
- Hosting: the servers running the service. [HOSTING PROVIDER / REGION]
- Cloudflare: DNS and TLS termination at the edge of brain.innovasite.info.
- Stripe (when paid plans ship): payment processing. Card data never reaches our servers.
Retention and deletion
Active data lives until you delete it. Databases are backed up hourly with backups retained for up to 7 days; deletion requests take effect on the active database immediately and age out of backups within that window. Deleting a workspace removes its account, session and content data.
Cookies
One cookie: the login session (innovago_session), strictly
necessary, scoped to your workspace's (sub)domain. No analytics or tracking
cookies.
Your rights
You may access, export or delete your data at any time — export is a product feature (or on request), deletion on request to [CONTACT EMAIL]. Depending on your jurisdiction you may have additional rights (access, rectification, portability, objection); we honor them regardless of where you live.
International transfers
Servers run in [HOSTING REGION]. If you are in another country, your data crosses borders to reach them.
Changes
Material changes to this policy will be announced in the service at least 14 days before taking effect.
Contact
[CONTACT EMAIL]