Privacy, security, and ethics

Measures to Protect Your Privacy and Secure Your Data

Secure EU Servers

All our servers are located within the European Union, primarily in the Netherlands. This means that your data is protected by the strictest privacy laws in the world, in accordance with the General Data Protection Regulation (GDPR).

We Do Not Share Data

We never share sensitive information with third parties, except when it is strictly necessary for providing services to you as a customer. Your data belongs to you, and we respect that. This is in line with the principle of data minimization as laid out in the GDPR.

Full GDPR Compliance

Brainvine fully complies with GDPR guidelines. We have data processing agreements with our AI providers that ensure your data remains secure and private. These agreements are crucial to fulfill the responsibilities of the data processor as described in Article 28 of the GDPR.

No Model Training

Our AI providers are contractually bound by a data agreement not to use your data to enrich, train, or improve their models in any way. Your data remains your data. This protects your right to privacy and data protection. Encryption and Privacy We never have 'eyes-on' access to user conversations. Everything you share with us is stored in an encrypted manner, so only you have access to it. This is an example of data protection by design and default, as required by Article 25 of the GDPR.

You Are in Control

At Brainvine, you are always in control of your own data. We do not store anything without your consent, and if you decide to delete something, it is truly gone. No copies, no remnants. This aligns with the right to data erasure, also known as the 'right to be forgotten', as described in Article 17 of the GDPR.

Trust as the Foundation

At Brainvine, everything revolves around trust. We are committed to protecting your privacy and providing a safe environment in which you can work with peace of mind. Choose Brainvine and experience the assurance of data security and privacy protection at the highest level.

Google OAuth Integration

When you log onto our platform via Google, we use the OAuth 2.0 protocol to verify your identity. We adhere to the following principles:

Access Authorization
We only request access to your basic profile information from Google, namely:First Name, Last Name, Email Address, Profile Picture

Purpose of Use
This data is only used to: Verify your identity and create or log into your account. Personalize the user experience (for example, by displaying your name).

Data Storage and Deletion
We only store the minimally necessary data as long as your account is active. When you delete your account, we also fully remove your Google login information, in accordance with our deletion policy (right to data erasure, Article 17 GDPR).

Sharing with Third Parties
We do not share your Google data with other parties unless it is strictly necessary for providing the service you have requested.

Revoking Permissions
You can revoke our app's access to your Google account at any time via your Google account settings. After revocation, you can no longer log in with Google.

Link to Privacy Policy
Our complete privacy policy – including this Google OAuth section – is available on this dedicated page, hosted on our own validated domain. This page is prominently linked on our app's homepage and in the interface. We clearly communicate changes to this privacy policy via email and in the app.

Technical and Organizational Measures
In addition to the above points, we implement the following extra safeguards:

Regular Security Audits
Periodic checks by external specialists to detect leaks or vulnerabilities.

Limited Internal Access
Only authorized personnel with a strict 'need-to-know' principle can access certain functional systems.

Backups and Recovery Procedures
Automated backups on encrypted media and procedures for quick data recovery.