CerebrumX

THE BRAIN BEHIND YOUR COMPANY

Privacy Policy

CerebrumX ("CerebrumX", "we", "us", or "our") provides an AI-powered company knowledge platform that captures, organizes, and makes searchable the decisions, actions, and insights from your team's conversations and meetings. This Privacy Policy explains what information we collect, how we use it, how we protect it, and the choices you have.

By using CerebrumX you agree to the practices described in this policy. If you do not agree, please do not use the service.

1. Who this policy applies to

This policy applies to everyone who uses CerebrumX — the account owner ("workspace founder"), invited team members, and anyone whose content is ingested into a workspace through a connected integration.

2. Information we collect

Account information

• Your name and email address when you create an account or are invited to a workspace.
• Your workspace (organization) name and your role within it (founder, manager, or member).
• Authentication data managed by our infrastructure provider (Supabase). We never see or store your password in plain text.

Content you create

• Meeting notes, captures, and any text you enter directly into CerebrumX.
• AI-generated memories, decisions, action items, and insights derived from that content.

Content from connected integrations

When you explicitly connect a third-party service, CerebrumX reads content from that service on your behalf and only with your authorization. Depending on which integrations you enable, this may include:

• Slack — messages and threads from channels you select.
• Gmail / Google Workspace — email subjects, bodies, and metadata from labels you select.
• Google Meet — meeting transcript documents stored in your Google Drive.
• Microsoft Outlook — email content from mail folders you select.
• Microsoft Teams — messages from channels you select.
• Zoom — cloud recording transcripts of your meetings.

We request read-only access in every case. We never send, post, modify, or delete content in your connected accounts.

Usage and technical data

• Basic logs and analytics about how the service is used (e.g. which features are accessed) to operate and improve CerebrumX.

3. How we use information

• To provide the core service: turning your conversations and meetings into a searchable, queryable company memory.
• To run AI processing that extracts decisions, action items, and insights from ingested content.
• To authenticate you, manage your workspace and team memberships, and enforce role-based access.
• To operate, maintain, secure, and improve the service.
• To communicate with you about your account, security, and service updates.

We do not sell your data. We do not use the content of your messages, emails, or meetings to train our own or any third party's foundational AI models.

4. AI processing

To generate memories, summaries, decisions, and action items, ingested content is sent to our AI provider, Anthropic (the Claude API), for processing. Anthropic processes this content solely to return results to CerebrumX and, under its commercial terms, does not use it to train its models. See Anthropic's Privacy Policy.

5. Google API Services — Limited Use disclosure

6. Microsoft data

Data obtained through Microsoft Graph (Outlook mail and Teams messages) is used only to provide the user-facing features of CerebrumX for your workspace. We request read-only delegated permissions, access only the folders and channels you select, and never write to or delete from your Microsoft account.

7. How we store and protect information

• Your data is stored in our managed database (Supabase, hosted on secure cloud infrastructure) and processed via serverless functions hosted on Vercel.
• Access tokens for connected integrations are stored encrypted and used only to fetch the content you authorized.
• Workspace data is isolated per organization and protected by row-level security so members of one workspace cannot access another's data.
• We apply industry-standard safeguards. No method of transmission or storage is 100% secure, but we work to protect your information using reasonable technical and organizational measures.

8. Sharing and disclosure

We share information only:

• Within your workspace — ingested memories and actions are visible to members of the same workspace, according to their role.
• With service providers who help us operate the service (Supabase, Vercel, Anthropic, Stripe for billing), bound by their own data-protection obligations.
• When required by law, or to protect the rights, safety, and security of CerebrumX, our users, or the public.
• In a business transfer (e.g. merger or acquisition), subject to this policy.

9. Data retention

We retain your account and workspace data for as long as your account is active. When you disconnect an integration, we stop ingesting new content from it; previously created memories remain unless you delete them. You can delete individual memories at any time, and you may request deletion of your account and associated data by contacting us.

10. Your rights and choices

• Access, correct, or delete content in your workspace.
• Disconnect any integration at any time from the Integrations page.
• Request export or deletion of your personal data by contacting us.
• Depending on your location, you may have additional rights under laws such as the GDPR or CCPA.

11. International users

CerebrumX is operated using cloud infrastructure that may process and store data in various regions. By using the service, you consent to the transfer and processing of your information as described in this policy.

12. Children

CerebrumX is a business tool not directed to children under 16, and we do not knowingly collect their personal information.

13. Changes to this policy

We may update this policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you.

14. Contact us

Questions about this policy or your data? Email us at support@cerebrumx.org.