Privacy Policy

Version 2026-10-22-draft-2

This policy explains what information GlobalBrain collects, why, who it's shared with, and the choices you have. GlobalBrain is run by Convergence Technology Solutions LLC (“we”), [address]. It goes with our Terms of Service.

The short version

• Your brain is yours. We use what's in it only to run GlobalBrain for you.
• We don't sell your information, and we don't show ads.
• You can download everything, or delete your brain, at any time.

What we collect

• Account: your email address and the name you give your brain and yourself.
• Your brain's content: the notes (thoughts), contacts, areas and routines you and your connected tools save, and what our AI adds to them (titles, kinds, topics and people).
• Connections: the names of the tools you connect, how they connected, and when each was last used. For tools with keys, we keep only a fingerprint of each key, never the key itself.
• Usage: how much AI work each brain uses each month and what it cost, so we can apply the monthly allowance.
• Billing: if you subscribe, your plan and Stripe's customer and subscription references. Stripe handles your card details; we never see or store them.
• Technical: sign-in sessions, security logs kept by our hosting providers, and the result of the bot check on the sign-in page.

How we use it

• To run GlobalBrain: store your brain, let your connected tools read and save to it, search it, and organise it.
• To send you sign-in emails and messages about your account, trial and subscription.
• To keep the service secure, prevent abuse, and fix problems.
• To meet legal obligations.

We don't use your brain's content to train AI models, and we don't read it except when you ask us to help, or when we must to keep the service secure or to meet a legal obligation.

Health information. If you save health information about yourself or your family, such as appointments, medications or test results, it's handled like everything else in your brain: private to you and the tools you connect, never sold, and never used to train AI models. GlobalBrain isn't a medical service and doesn't give medical advice.

Who we share it with

Only the service providers we need to run GlobalBrain, under contracts that limit them to doing that:

• Supabase: database and sign-in (hosted in the United States, AWS us-east-2).
• Cloudflare: hosting the app and the MCP server, network security, and the sign-in bot check.
• OpenRouter, and the AI model providers it routes to (currently OpenAI): to add titles, topics and people to your notes and to index them for search. [Confirm each provider's data-use and retention terms before launch.]
• Stripe: payments, if you subscribe.
• [Email provider]: delivering sign-in and account emails.

The AI tools you connect (such as Claude or ChatGPT) are separate services you choose. What they read from your brain is governed by their own privacy policies. We may also disclose information if the law requires it, or to protect people or the service, and to a successor if GlobalBrain changes hands, under this policy.

How long we keep it

• Your brain's content stays until you delete it, or your brain. A brain whose trial or subscription ends becomes read-only; it isn't deleted.
• When you delete a brain, its content is removed at once, and from our backups within [30] days. We keep a record that the deletion happened, without any content.
• Billing records are kept as long as tax and accounting law requires.

Your choices and rights

• See and download: Settings → Your data downloads everything in your brain, as JSON or Markdown.
• Correct or remove: edit or delete any note, contact or area, or delete the whole brain.
• Disconnect tools: the Connections page lets you disconnect any tool at once.
• Depending on where you live, you may have further rights, such as to object to some uses or to complain to a data protection authority. Contact us to use them.

Security

Information is encrypted in transit. Each brain is kept separate by rules in the database, every tool connects with its own revocable sign-in or key, and access is checked on every request. No system is perfectly secure; if a breach affects your information, we'll tell you as the law requires.

Cookies

We use only the cookies GlobalBrain needs: to keep you signed in and remember which brain you're using. Your light or dark mode choice is kept in your browser. The sign-in bot check (Cloudflare Turnstile) may set its own cookie to tell people from bots. We don't use advertising or tracking cookies.

Children

GlobalBrain is for people aged 18 and over. We don't knowingly collect information from children.

Changes and contact

We'll tell you about significant changes to this policy before they take effect. Questions or requests: [privacy email].