Privacy Policy

# Privacy Policy: B.R.A.I.N. Hosted (DRAFT)

**DRAFT: not legal advice. For review by counsel before public launch.**

Effective (draft): November 5, 2026  
Controller: **Telonyte LLC**  
Privacy contact: support@telonyte.com

## What we collect
- Account and billing data (name, email, tenant id, seat counts, Stripe customer/subscription ids, payment status). Card numbers are handled by Stripe; Telonyte does not store full card data.  
- Service data you submit to B.R.A.I.N. (bot notes, tags, timestamps).  
- Technical logs (API timestamps, error codes, client version, IP/edge metadata) for security and reliability.  
- Dashboard auth identifiers (email for magic link / Google OAuth subject).

## How we use data
To provide and secure the service, bill seats ($10/bot/month), send dunning/service notices, and improve reliability. **We do not train AI models on your note content.**

## Sharing
- Processors: Cloudflare (hosting), Stripe (payments), email delivery for transactional mail.  
- We do not sell personal data.  
- We may disclose if required by law or to protect Telonyte/customers from fraud or abuse.

## Retention and deletion
Working-set notes follow product retention (including prune/promote). Billing records retained as required for tax/accounting. On request, we delete or export tenant content within a commercially reasonable period.

## Security
Tenant-isolated storage (per-tenant Durable Objects), encrypted transport (HTTPS), hashed API keys, optional offline lease with lease-bound encryption. No method is 100% secure.

## Your rights
Depending on your location, you may request access, correction, deletion, or export by emailing support@telonyte.com.

## Children
Not directed to children under 16.

## Changes
We may update this policy; material changes will be noted on this page or by email.