Privacy policy

The short version: we collect the minimum we need to run Brainstormer (your email, billing details when you subscribe, and basic usage analytics), your workspace content stays private and is never used to train models, and you can export or delete your data at any time.

Who we are

Brainstormer ("we", "us") operates brainstormer.ai, idea management software for companies. For any privacy question or request, email [email protected].

What we collect

• Account data. Your email address when you sign up, and the confirmation state of that email. If you contact us, we keep your name, email and message so we can reply.
• Signup context. Which page or button opened the signup form, standard UTM parameters if you arrived from a link that carried them, and your IP address, used for spam prevention and aggregate conversion statistics.
• Billing data. Handled by our payment processor when you subscribe; we never see or store full card numbers.
• Usage analytics. Aggregated, privacy-respecting analytics about page visits and feature use (pages viewed, approximate region, device class) to improve the product.
• Workspace content. The company description, strategic goals, challenges, ideas, votes, scores, stage decisions and AI workshops your organization creates. This content belongs to your organization and is visible only to the people in its workspace.

What we never do

• We never use your challenges, ideas or any workspace content to train AI models.
• We never sell or rent personal data to anyone.
• We never show your content to other customers.
• We never send marketing email you did not agree to, and every email has a working unsubscribe.

How we use your data

To provide the service (expand, score and group ideas, run AI workshops, show your team the same workspace, send the email confirmation code), to keep it secure (rate limiting, spam and abuse prevention), to bill subscriptions, and to understand aggregate usage so we can improve the product. The lawful bases under GDPR are contract performance, legitimate interest in securing and improving the service, and consent where required.

AI processing

When you use an AI step or workshop, the relevant challenge, ideas and goals are processed by large language model providers under contracts that prohibit using your data for model training. Content is transmitted encrypted, processed to produce your results, and not retained by the model provider beyond transient processing.

Retention

Account data is kept while your account exists. Workspace content is kept until you delete it or your account. Contact messages are kept for up to 24 months. Server logs containing IP addresses rotate within 90 days.

Your rights

You can access, correct, export or delete your personal data, object to or restrict processing, and lodge a complaint with your supervisory authority. Export and deletion are self-service: the Your data screen in your account downloads everything you hold and closes the account, and every AI workshop has its own delete button, and the workspace owner can remove members. For anything else, email [email protected] and we will act within 30 days. Deleting your account removes your brainstorming content from production systems within 30 days and from backups within 90.

Cookies

We use strictly necessary cookies for sessions and security, and a privacy-respecting analytics setup. We do not run third-party advertising trackers.

Changes

If this policy changes materially, we will email account holders and update the date above. Continued use after the effective date means acceptance.