Privacy Policy
Last updated: July 16, 2026
CompanyBrain ("we", "our", or "us") operates usecompanybrain.com. This Privacy Policy explains how we collect, use, and protect information when you use our service.
1. Information We Collect
Account information: When you register, we collect your name, email address, and password (stored as a cryptographic hash — we never store your actual password).
Company information: The company name you provide when creating a workspace.
Documents you upload: Files you upload are stored securely and used solely to answer questions from users within your company workspace. We do not read, share, or use your documents for any other purpose.
Usage data: We log the number of questions asked and tokens consumed per company for billing and operational purposes. We do not log the content of questions or answers beyond what is stored in your own workspace history.
Payment information: Payments are processed by Stripe. We never store your credit card numbers. We receive only a customer ID and subscription status from Stripe.
2. How We Use Your Information
- To provide, operate, and improve the CompanyBrain service
- To process payments and manage your subscription
- To send transactional emails (password resets, team invitations)
- To calculate and enforce usage limits per your plan
- To respond to support requests
We do not sell your data. We do not use your documents to train AI models. We do not share your information with third parties except as described in this policy.
3. Tenant Isolation
Every company workspace on CompanyBrain is strictly isolated. Your documents, conversation history, and user data are scoped to your company and are never accessible to other companies. This isolation is enforced at the database level, the vector search level, and the file storage level.
4. Third-Party Services
We use the following third-party services to operate CompanyBrain:
- Cloudflare — infrastructure, hosting, and database storage
- Anthropic — AI language model for generating answers (your document content is sent to Anthropic's API to generate responses, subject to Anthropic's privacy policy)
- Stripe — payment processing
- Resend — transactional email delivery
5. Data Retention
Your data is retained as long as your account is active. If you cancel your subscription, your data is retained for 30 days before deletion, giving you time to export anything you need. You may request immediate deletion by contacting us.
6. Security
We use industry-standard security practices including encrypted passwords, secure session tokens, HTTPS-only connections, and strict tenant isolation. However, no system is perfectly secure and we cannot guarantee absolute security.
7. Your Rights
You may request access to, correction of, or deletion of your personal data at any time by contacting us. Company admins can delete users and documents directly within the application.
8. Children's Privacy
CompanyBrain is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify users of significant changes by email or by posting a notice on the platform. Continued use of the service after changes constitutes acceptance of the updated policy.
10. Contact
Questions about this Privacy Policy? Contact us at privacy@usecompanybrain.com.