07Privacy policy

Your data,
handled with care.

Effective 2026-05-07

Brain is a self-hosted retrieval platform. When you run it on your own infrastructure, no data leaves your environment. When you use the hosted version at brain.aistack.run, this policy describes what we collect, why, and the choices you have.

Information we collect

  • Account data — name, email, organization, authentication credentials.
  • Project content — documents you index, queries you run, and the embeddings derived from them.
  • Operational telemetry — request latency, error rates, and aggregate usage. No query content is included in telemetry.

How we use it

We use account data to authenticate you and bill your plan. Project content is processed only to fulfill the search requests you make — we do not train models on your data. Operational telemetry is used to keep the service reliable.

Sharing

We do not sell your data. We share data with sub-processors (cloud providers, payment processor, error tracking) only to the extent needed to operate the service. A current sub-processor list is available on request.

Retention

Project content is retained for as long as your account is active. You can delete projects, documents, and your account from the dashboard at any time. Backups are retained for 30 days after deletion before permanent purge.

Your rights

You can access, export, correct, or delete your personal data at any time. EU and UK users can request portability and lodge complaints with their supervisory authority.

Self-hosted deployments

When Brain runs on infrastructure you operate, this policy does not apply to data passing through that deployment — you are the controller. We collect no telemetry from self-hosted instances unless you explicitly opt in.

Questions? Email legal@aistack.dev.