Privacy Policy

Information We Collect

We may collect the following types of information:

• Identity Data: Name, company name, title
• Contact Data: Email address, phone number, billing address
• Technical & Usage Data: IP address, browser type, device info, pages visited, referral source, and interaction data collected via cookies and analytics tools.
• Financial Data: Billing information processed by our third-party payment processors (We do not store full payment card details).
• Communications Data: Records of emails, calls, and messages.

How We Collect Information

We collect information directly from you (via forms, emails), automatically through cookies and analytics tools, and from third parties (e.g., advertising platforms, CRM tools you connect).

Data from Connected Stores (Shopify)

If you connect a Shopify store, we access and store the customer, order, product, and checkout data you authorize, using Shopify’s APIs, to provide marketing, segmentation, automation, and reporting features. This may include customer names, email addresses, phone numbers, and order details.

We process this data to provide the features you use. We respond to Shopify’s data-deletion requests — including its customer-redaction and shop-redaction webhooks — to delete the relevant data. Access tokens for your store are encrypted at rest.

A list of the third-party providers we use is on our Sub-processors page.

Data from Connected Google Accounts

If you connect a Google account, Brainito accesses only the Google services you explicitly enable. Each is requested separately, at the moment you turn it on — connecting Google by itself grants nothing beyond your name and email address.

• Google Search Console (webmasters.readonly) — we read the list of properties you are verified on, and their search performance: clicks, impressions, click-through rate, average position, and the queries, pages, countries and devices behind them. Read-only. We never modify your Search Console account.
• Google Analytics (analytics.readonly) — we read the list of GA4 properties you have access to, and aggregated report data: sessions, users, key events, revenue, session duration, and the channels, landing pages and traffic sources behind them. Read-only. We never modify your Analytics account.
• Google Tag Manager (tagmanager.readonly, tagmanager.edit.containers, tagmanager.edit.containerversions, tagmanager.publish) — we read the list of containers you can edit, and, only when you click Install, we create one tag and one trigger that load Brainito’s analytics script, then publish that change. This is the only write access Brainito requests from Google. Removing the integration deletes the tag and trigger we created and publishes the removal. We do not read, change or delete any other tag in your container.
• YouTube (youtube.readonly, yt-analytics.readonly) — we read the list of channels you own and their aggregated performance: views, watch time, average view duration, subscribers gained and lost, and per-video totals. Read-only. Brainito cannot upload, edit or delete videos, and does not request permission to.

We store the aggregated daily figures described above so they can be charted over time. We do not receive or store the personal data of your site visitors from these services. OAuth tokens for your Google account are encrypted at rest, and disconnecting an integration revokes Brainito’s access.

Limited Use: Brainito’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, do not sell it, do not transfer it except as necessary to provide the features you have enabled, and do not allow humans to read it except with your explicit consent, for security purposes, to comply with applicable law, or where the data is aggregated and anonymised.

How We Use Your Information

We use your information to:

• Deliver our services (RMM, consulting, projects).
• Manage billing and accounts.
• Improve our website and services through analytics.
• Communicate with you about services, updates, and marketing.
• Ensure security and prevent fraud.
• Comply with legal obligations.

How We Share Your Information

We do not sell your personal information. We may share data with trusted third parties to help us operate our business and deliver services, including:

• Analytics Tools: Google Analytics
• Advertising Platforms: Meta (Facebook/Instagram), Google Ads, LinkedIn Ads
• CRM & Email Marketing Platforms
• Payment Processors
• Project Management Software
• These parties are contractually obligated to protect your data.

Requests from Public Authorities

Law enforcement, regulators, and other public authorities occasionally request personal information. No government body has direct or automated access to your data — every request comes to us and is handled by a single accountable person. Our practices are set out in our Government & Public Authority Data Request Policy, a copy of which is available to customers on request at support@brainito.com. In summary:

• We review every request for legal validity before responding, and we decline voluntary requests that are not legally compelled.
• We disclose only the minimum data necessary. We never hand over credentials, access tokens, or encryption keys, and we do not produce bulk exports.
• We object to requests that are overbroad or lack a valid legal basis, and will challenge them where appropriate.
• Where the data belongs to a customer and we act as their processor, we notify that customer before disclosing anything, unless we are legally prohibited from doing so.
• We keep a written record of every request received and how we responded.

International Data Transfers

Your information may be transferred to and processed in countries other than your own, including India and the United States. We take appropriate safeguards (such as Standard Contractual Clauses) to ensure your data is protected.

Data Security

We implement reasonable technical and organizational measures, including secure cloud storage, access controls, and encryption to protect your personal information.

Data Retention

We retain your data for as long as necessary to fulfill the purposes outlined in this policy, including for legal, accounting, or contractual obligations.

Your Data Rights & Choices

Depending on your location, you may have rights to access, correct, delete, or restrict the use of your personal information. To exercise these rights, please contact us at support@brainito.com.

Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children.

Changes to This Policy

We may update this policy from time to time. We will notify you of any changes by posting the new policy on this page with an updated "Last Updated" date.

Contact Us

For privacy-related inquiries, please contact:

• Email: support@brainito.com
• India: +91 78899 10101
• United States: +1 (415) 263-2708