Our Commitment to Your Privacy
At 2ndBrain, we believe that your thoughts, ideas, and knowledge are deeply personal. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. We are committed to protecting your privacy and ensuring you have a positive experience with 2ndBrain.
Information We Collect
Information You Provide Directly
- Account Information: Email address, username, and optional profile information
- Content: Notes, bookmarks, documents, and any content you save or create
- Communication: Feedback, support requests, and correspondence with us
- Payment Information: Processed securely through our payment providers (we don't store card details)
Information Collected Automatically
- Usage Data: How you interact with our Service, features you use, and actions you take
- Device Information: Browser type, operating system, device identifiers, and IP address
- Cookies and Similar Technologies: Session cookies, preferences, and authentication tokens
- Log Data: Server logs including timestamps, referring pages, and system activity
Information from Third-Party Services
- Connected Accounts: Data from services you connect (Google, Apple, GitHub, etc.)
- Import Data: Content imported from Notion, Obsidian, Pocket, and other integrations
- Browser Extensions: Webpages and content you save using our Chrome extension
How We Use Your Information
To Provide Our Service
- Create and maintain your account
- Save, organize, and retrieve your content
- Generate AI-powered insights and connections
- Sync your data across devices
- Process payments and manage subscriptions
To Improve and Develop
- Understand how users interact with our Service
- Develop new features and improvements
- Train and improve our AI models (using anonymized, aggregated data)
- Conduct research and analysis
To Communicate
- Send service-related announcements
- Respond to your requests and support needs
- Send marketing communications (with your consent)
- Provide tips and onboarding information
To Protect
- Detect and prevent fraud, abuse, and security incidents
- Debug and fix issues
- Comply with legal obligations
- Enforce our Terms of Service
How We Share Your Information
We do not sell your personal information. We share information only in these circumstances:
With Your Consent
We share information when you explicitly authorize us to do so, such as when you connect third-party services.
Service Providers
We work with trusted partners who help us operate our Service:
- Cloud infrastructure providers (AWS, Google Cloud)
- Payment processors (Stripe)
- Analytics services (privacy-focused, anonymized)
- Customer support tools
Legal Requirements
We may disclose information if required by law, subpoena, or other legal process, or to protect the rights and safety of 2ndBrain, our users, or others.
Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before any such transfer and any changes to this Privacy Policy.
Data Security
We implement comprehensive security measures to protect your information:
Technical Safeguards
- Encryption: AES-256 encryption at rest and TLS 1.3 in transit
- Access Controls: Role-based access and multi-factor authentication
- Infrastructure: Secure cloud infrastructure with regular security updates
- Monitoring: Continuous security monitoring and intrusion detection
Organizational Measures
- Regular security training for employees
- Limited access to personal information on a need-to-know basis
- Regular security audits and penetration testing
- Incident response procedures
Data Retention
We retain your information for as long as necessary to provide our Service and comply with legal obligations:
- Active Accounts: We retain your data while your account is active
- Deleted Content: Removed from active systems immediately, purged from backups within 30 days
- Closed Accounts: Personal data deleted within 90 days, except as required by law
- Anonymized Data: May be retained indefinitely for analytics and improvement
Your Privacy Rights
You have control over your information:
Access and Portability
- Access your personal information through your account settings
- Export your data in standard formats (JSON, Markdown, CSV)
- Request a copy of all information we have about you
Correction and Deletion
- Update your account information at any time
- Delete individual pieces of content
- Request deletion of your entire account and associated data
Control and Consent
- Opt-out of marketing communications
- Disable certain data collection through privacy settings
- Revoke access to connected third-party services
Regional Rights
Depending on your location, you may have additional rights under laws like GDPR (Europe) or CCPA (California). Contact us to exercise these rights.
Cookies and Tracking
Essential Cookies
We use essential cookies for:
- Authentication and security
- Remembering your preferences
- Maintaining your session
Analytics
We use privacy-focused analytics to understand usage patterns. This data is anonymized and aggregated.
No Third-Party Tracking
We do not use third-party tracking cookies or advertising networks. We don't sell or share your data with advertisers.
Children's Privacy
Our Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.
International Data Transfers
Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for international transfers, including:
- Standard contractual clauses approved by regulatory authorities
- Ensuring recipients maintain adequate data protection standards
- Limiting transfers to what's necessary for Service provision
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by:
- Posting the new policy on our website
- Updating the "Last Updated" date
- Sending you an email notification (for significant changes)
- Requiring your consent where legally required
Contact Us
If you have questions, concerns, or requests regarding your privacy, please contact us:
2ndBrain Privacy Team
Email: privacy@2ndbra.in
Data Protection Officer: dpo@2ndbra.in
Address: [Your Company Address]
We aim to respond to all privacy inquiries within 30 days.