Privacy Notice
Version: 2026-09-16 · Controller: Gigabrain Labs · Privacy requests can be sent using the private contact details in any Gigabrain email you receive.
The short version
Your vault lives on your computer. Gigabrain does not upload it to Gigabrain Labs, and you do not need a Gigabrain account. Ordinary ingestion, indexing and retrieval run locally. Optional provider access requires your approval, as explained below. We hold seller records about your purchase. Every purchased copy also carries a licence identifier that maps to you in our records. This is the product's anti-piracy design (licence §6), and that identifier is personal data.
What we hold, and why
- Purchase records: the buyer name and email, purchased components, quantity, price and payment reference. For group purchases, we also hold the names and email addresses the buyer enters after payment. We use this information to issue your licence, deliver your copy, honour the guarantee and the locked renewal rate, and comply with tax and accounting law. Payment card details never reach us; Stripe processes payment. Group recipient details are not placed in Stripe metadata.
- Guided sessions: the eligible licence, service order, booking status and whether the session has begun. We use these records to prevent duplicate purchases, deliver the booking link and apply the service refund rule. Scheduling information is handled by the booking service named when you choose a time.
- The licence register: your licence identifier, the licence terms version and acceptance time, the checksum of the copy built for you, delivery records, and licence status (active/refunded/revoked) - to trace leaked copies to the licence that leaked them (licence §6), to re-deliver lost downloads, and to resolve payment disputes.
- Newsletter: your email address, first and last names, consent version and confirmation time. We send a confirmation link first and delete unconfirmed requests after that link expires. Confirmed details are sent to Resend for newsletter delivery. If you request a welcome offer, we record its expiry and redemption, use Stripe to bind it to your confirmed email, and check purchase records to stop reminders after purchase. Each newsletter includes an unsubscribe link. We retain a suppression record to respect your opt-out; essential order emails are unaffected. Your browser may store a dismissal or signup flag to avoid repeatedly showing the offer. Private offer pages do not load analytics.
- Support email: what you send us, kept as ordinary correspondence.
- Research downloads: we collect your first name, last name, email and chosen report when you request a PDF. We keep each request for 90 days. A new request for the same report restarts that period. We then delete it from the active database. Backup copies follow our backup retention process. A download request does not subscribe you to marketing. Email support@gigabrain.download to request deletion.
- Optional website analytics: Google Analytics loads only after you accept analytics. Accept all and Reject non-essential are equal choices. Manage preferences lets you choose analytics and advertising separately. Reject non-essential keeps both off; checkout works either way. Advertising permission is stored separately and is never inferred from an earlier analytics choice. Meta Pixel is planned but is not active yet. When configured, it will require advertising permission before loading or sending events. We remember your choice for 180 days. Global Privacy Control and Do Not Track override acceptance. Private offer pages do not load analytics. You can withdraw through Cookie preferences in the footer.
- Consented purchase measurement: after acceptance, we can associate a limited page, campaign and referring-host record with an opaque analytics identifier and confirmed purchases or successful refunds. We retain first-touch and last non-direct attribution for up to 30 days in your browser. We delete optional analytics context when you withdraw permission or that permission expires. Essential order records follow the retention policy below. We do not send email addresses, names, form contents, licence IDs, order-access tokens, private vault contents or full URL query strings to Google. Purchase and refund values come from payment records, not browser claims.
- Withdrawal: we stop optional browser collection, clear owned analytics identifiers and request suppression of queued and future server events associated with this browser's consent reference. If offline, the request is retried when connectivity returns. Withdrawal cannot undo an event already sent. Essential payment, delivery, refund and accounting records remain necessary to operate your purchase.
Your vault and optional provider access
Your notes, documents, ledgers, calendars and loop outputs remain files you control. Gigabrain does not upload your vault to us.
If you explicitly approve optional cloud-assisted graph authoring, it sends selected source packets to the provider named in your consent settings. The included Codex author uses OpenAI through your own account, under that provider's terms. Scheduled ingestion can repeat those approved calls without asking each time, until you revoke consent.
If you use a hosted AI agent, its provider also processes the content you share with it under its own privacy terms. A remote Git backup that you approve can copy files to your chosen host. The update tool contacts the update host only when you run it and sends no vault content.
Who processes it
Stripe (payments), Resend (delivery and newsletter email), Google (website analytics), and our file-delivery host (your download, in a private bucket). Each receives only what its job needs.
How long
Purchase and licence records: for the life of the licence plus the period tax and accounting law requires. Newsletter sending: until you unsubscribe; the consent record is kept until you ask us to delete it or it is no longer needed. Refunded licences stay in the register as revoked - that record is what makes §6 traceability honest.
Your rights
Use the private contact details in a Gigabrain email to access, correct, or (where the law provides) delete your data - noting that the licence register itself must persist while your licence exists, because it is the licence. EU/UK buyers have the rights their law grants regardless of anything here.
Legal identity and notices
Gigabrain Labs sells Gigabrain. Gigabrain Labs is the legal data controller behind Gigabrain Labs and receives privacy notices on its behalf.
Public mailing address: 2665 South Bayshore Drive, Unit 22011, Miami, FL 33133, United States.
