Privacy Policy

Information We Collect

We may collect the following types of information:

• Identity Data: Name, company name, title
• Contact Data: Email address, phone number, billing address
• Technical & Usage Data: IP address, browser type, device info, pages visited, referral source, and interaction data collected via cookies and analytics tools.
• Financial Data: Billing information processed by our third-party payment processors (We do not store full payment card details).
• Communications Data: Records of emails, calls, and messages.

How We Collect Information

We collect information directly from you (via forms, emails), automatically through cookies and analytics tools, and from third parties (e.g., advertising platforms, CRM tools you connect).

Data from Connected Stores (Shopify)

If you connect a Shopify store, we access and store the customer, order, product, and checkout data you authorize, using Shopify’s APIs, to provide marketing, segmentation, automation, and reporting features. This may include customer names, email addresses, phone numbers, and order details.

We process this data to provide the features you use. We respond to Shopify’s data-deletion requests — including its customer-redaction and shop-redaction webhooks — to delete the relevant data. Access tokens for your store are encrypted at rest.

A list of the third-party providers we use is on our Sub-processors page.

How We Use Your Information

We use your information to:

• Deliver our services (RMM, consulting, projects).
• Manage billing and accounts.
• Improve our website and services through analytics.
• Communicate with you about services, updates, and marketing.
• Ensure security and prevent fraud.
• Comply with legal obligations.

How We Share Your Information

We do not sell your personal information. We may share data with trusted third parties to help us operate our business and deliver services, including:

• Analytics Tools: Google Analytics
• Advertising Platforms: Meta (Facebook/Instagram), Google Ads, LinkedIn Ads
• CRM & Email Marketing Platforms
• Payment Processors
• Project Management Software
• These parties are contractually obligated to protect your data.

Requests from Public Authorities

Law enforcement, regulators, and other public authorities occasionally request personal information. No government body has direct or automated access to your data — every request comes to us and is handled by a single accountable person. Our practices are set out in our Government & Public Authority Data Request Policy, a copy of which is available to customers on request at support@brainito.com. In summary:

• We review every request for legal validity before responding, and we decline voluntary requests that are not legally compelled.
• We disclose only the minimum data necessary. We never hand over credentials, access tokens, or encryption keys, and we do not produce bulk exports.
• We object to requests that are overbroad or lack a valid legal basis, and will challenge them where appropriate.
• Where the data belongs to a customer and we act as their processor, we notify that customer before disclosing anything, unless we are legally prohibited from doing so.
• We keep a written record of every request received and how we responded.

International Data Transfers

Your information may be transferred to and processed in countries other than your own, including India and the United States. We take appropriate safeguards (such as Standard Contractual Clauses) to ensure your data is protected.

Data Security

We implement reasonable technical and organizational measures, including secure cloud storage, access controls, and encryption to protect your personal information.

Data Retention

We retain your data for as long as necessary to fulfill the purposes outlined in this policy, including for legal, accounting, or contractual obligations.

Your Data Rights & Choices

Depending on your location, you may have rights to access, correct, delete, or restrict the use of your personal information. To exercise these rights, please contact us at support@brainito.com.

Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children.

Changes to This Policy

We may update this policy from time to time. We will notify you of any changes by posting the new policy on this page with an updated "Last Updated" date.

Contact Us

For privacy-related inquiries, please contact:

• Email: support@brainito.com
• India: +91 78899 10101
• United States: +1 (415) 263-2708