Privacy Policy

We collect the following types of information:

Information you provide directly: This includes your name, email address, company name, job title, and any other information you provide when creating an account, contacting us, or using our services. We also collect payment information (processed securely through our payment processors) and content you upload or create within the platform.

Information collected automatically: When you use our platform, we automatically collect usage data, log files, device information, and interaction data. This includes IP addresses, browser type, pages visited, and features used. We use cookies and similar tracking technologies as described in our Cookie Policy.

Information from third parties: We may receive information about you from third-party services, including identity providers (when you use SSO), payment processors, and analytics providers.

We use your information to:

• Provide, operate, and improve the Ex.Brain platform
• Process transactions and manage your account and subscription
• Communicate with you about your account, updates, and support
• Analyze usage patterns to enhance features and user experience
• Ensure the security and integrity of our platform
• Comply with legal obligations and enforce our terms
• Send you marketing communications (where permitted and with your consent)

Important: Ex.Brain does not use your data to train AI models. Your company's knowledge and data remain your own and are never used to improve models or shared with other customers.

We do not sell your personal information. We share your information only in the following circumstances:

Service providers: We work with trusted third-party vendors who help us operate our platform, including cloud infrastructure providers, payment processors, analytics services, and customer support tools. These providers are contractually obligated to protect your information and use it only as directed by us.

Legal requirements: We may disclose information when required by law, court order, or governmental authority, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

Business transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.

With your consent: We may share your information in other ways if you explicitly consent.

We retain your personal information for as long as necessary to provide our services, comply with legal obligations, resolve disputes, and enforce our agreements. Specifically:

• Account data is retained for the duration of your subscription and for a reasonable period thereafter in case you wish to reactivate
• Usage logs and analytics data are retained for up to 24 months
• Financial records are retained as required by applicable tax and accounting laws (typically 7 years)
• Content you upload to the platform is deleted within 30 days of account termination, unless you request earlier deletion

You may request deletion of your personal data at any time by contacting us at privacy@exbrain.ai.

Depending on your location, you may have certain rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information, subject to certain exceptions
• Portability: Request a machine-readable copy of your data
• Opt-out: Opt out of marketing communications at any time by clicking "unsubscribe" in any email or contacting us directly
• Restriction: Request that we limit how we process your data in certain circumstances

To exercise any of these rights, contact us at privacy@exbrain.ai. We will respond to your request within 30 days.

If you are a resident of California, the European Economic Area, the United Kingdom, or another jurisdiction with applicable privacy laws, you may have additional rights. Please contact us for more information.

We take the security of your information seriously and implement industry-standard safeguards, including:

• AES-256 encryption for data at rest and TLS 1.3 for data in transit
• Role-based access controls with least-privilege enforcement
• Regular security audits, vulnerability assessments, and penetration testing
• Immutable audit logs for all sensitive actions
• Multi-factor authentication support for all user accounts

While we strive to protect your information, no method of transmission or storage is 100% secure. If you believe your account has been compromised, please contact us immediately at security@exbrain.ai.

Ex.Brain is based in the United States, and your information may be processed and stored in the United States or other countries where our service providers operate. These countries may have data protection laws that differ from your home country.

When we transfer personal data from the European Economic Area, the United Kingdom, or Switzerland to countries that have not received an adequacy decision, we rely on appropriate safeguards, such as Standard Contractual Clauses approved by the European Commission, to ensure your data is protected.

For more information about our international data transfer practices, contact us at privacy@exbrain.ai.

Ex.Brain is a business platform and is not directed at children under the age of 16. We do not knowingly collect personal information from children under 16. If you believe we have inadvertently collected information from a child under 16, please contact us at privacy@exbrain.ai and we will take steps to delete such information promptly.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you by:

• Sending an email to the address associated with your account
• Displaying a prominent notice within the Ex.Brain platform
• Updating the "Effective Date" at the top of this policy

Your continued use of Ex.Brain after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. If you do not agree with the changes, you should discontinue using our services and contact us to request deletion of your account.

If you have questions about this Privacy Policy, our privacy practices, or wish to exercise your rights, please contact us:

We aim to respond to all privacy-related inquiries within 30 days.