Legal

Privacy Policy

This policy explains what data Corp Brain uses, why it uses it and what choices you have.

Effective date: 1 July 2026

In short: Corp Brain uses company data only to provide the service requested by the customer. We do not sell personal data or use connected Google data for advertising.

1. Who operates Corp Brain

Corp Brain is operated by Automatuum. Questions and privacy requests can be sent to anton@automatuum.com.

2. Data we collect

Website data: name, email, company, website, industry, team information and details submitted through our forms.
Account data: name, email, organization, sign-in and session information.
Customer content: documents, tables, websites, CRM records and other sources a customer uploads or connects.
Connected Google data: after explicit authorization, Gmail messages and metadata or Google Drive files and metadata within the permissions granted by the user.
Service data: questions, answers, feedback, source references, feature use and technical logs needed to operate and secure the service.

3. How we use data

We use data to connect and index approved sources, answer questions with source references, generate reports and alerts, run Sniper research, provide support, prevent misuse and improve reliability. We process data to provide the contracted service, follow user instructions, meet legal obligations and protect legitimate security interests.

4. Gmail and Google Drive

Corp Brain requests read-only access when a customer connects Google services. The Gmail scope https://www.googleapis.com/auth/gmail.readonly allows the service to view messages and settings, but not send, edit or delete email. Corp Brain cannot change files through read-only Drive access.

Use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements. Google data is not sold, used for advertising or used to build advertising profiles.

5. Service providers

We may use providers needed to run Corp Brain, including Google APIs, hosting and database services, AI model providers such as Anthropic, public web research services used by Sniper, email delivery, audio processing when requested and monitoring tools. They receive only the data needed for their task.

6. Retention and deletion

Website enquiries are kept while relevant to the relationship. Conversation history is normally retained for up to 90 days. Connected content and its search index may remain while the customer account or service is active, or as needed to provide the service and meet legal obligations. A customer may request deletion at any time by email. We will delete or return data subject to legal, security and backup requirements.

7. Security

We use access controls, organization separation, encrypted network connections and restricted OAuth permissions. No system is completely secure, so we also limit access and investigate suspected incidents.

8. Your choices and rights

Depending on applicable law, you may ask to access, correct, export, restrict or delete personal data, or object to certain processing. Google access can be revoked from your Google Account permissions at any time. If your employer provides Corp Brain, the employer may control the business data and Automatuum may process it on the employer's instructions.

9. Children

Corp Brain is a business service and is not intended for children.

10. Changes

We may update this policy when the service or legal requirements change. The effective date above will show the latest version.

11. Contact

For privacy questions, Google data deletion or account data requests, contact anton@automatuum.com.