Privacy policy

The short version: we collect the minimum we need to run Brainstormer (your email, billing details when you subscribe, and basic usage analytics), your brainstorming content stays private and is never used to train models, and you can export or delete your data at any time.

Who we are

Brainstormer ("we", "us") operates brainstormer.ai, an AI brainstorming tool. For any privacy question or request, email [email protected].

What we collect

• Account data. Your email address when you sign up, and the confirmation state of that email. If you contact us, we keep your name, email and message so we can reply.
• Signup context. Which page or button opened the signup form, standard UTM parameters if you arrived from a link that carried them, and your IP address, used for spam prevention and aggregate conversion statistics.
• Billing data. Handled by our payment processor when you subscribe; we never see or store full card numbers.
• Usage analytics. Aggregated, privacy-respecting analytics about page visits and feature use (pages viewed, approximate region, device class) to improve the product.
• Brainstorming content. The challenges, ideas, clusters and decisions you create. This content is yours.

What we never do

• We never use your challenges, ideas or any brainstorming content to train AI models.
• We never sell or rent personal data to anyone.
• We never show your content to other customers.
• We never send marketing email you did not agree to, and every email has a working unsubscribe.

How we use your data

To provide the service (generate ideas from your challenge, sync sessions, send the email confirmation code), to keep it secure (rate limiting, spam and abuse prevention), to bill subscriptions, and to understand aggregate usage so we can improve the product. The lawful bases under GDPR are contract performance, legitimate interest in securing and improving the service, and consent where required.

AI processing

When you run a brainstorm, your challenge and seed ideas are processed by large language model providers under contracts that prohibit using your data for model training. Content is transmitted encrypted, processed to produce your results, and not retained by the model provider beyond transient processing.

Retention

Account data is kept while your account exists. Brainstorming content is kept until you delete it or your account. Contact messages are kept for up to 24 months. Server logs containing IP addresses rotate within 90 days.

Your rights

You can access, correct, export or delete your personal data, object to or restrict processing, and lodge a complaint with your supervisory authority. Email [email protected] and we will act within 30 days. Deleting your account removes your brainstorming content from production systems within 30 days and from backups within 90.

Cookies

We use strictly necessary cookies for sessions and security, and a privacy-respecting analytics setup. We do not run third-party advertising trackers.

Changes

If this policy changes materially, we will email account holders and update the date above. Continued use after the effective date means acceptance.