Privacy Policy

1. Introduction

Welcome to GainBrain. Your privacy is respected and personal data is protected. This privacy policy explains how information is collected, used, stored, and protected when you use the AI-powered news intelligence service.

By using the service, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Information You Provide to Us

Account Information:

• Email address (required for account creation)
• Password (encrypted and securely stored)
• Full name (if provided via Google OAuth)
• Profile picture (if provided via Google OAuth)

Subscription Preferences:

• News topics and interests
• Custom prompts for AI summaries
• Email delivery schedules
• Timezone preferences

Feedback and Preferences:

• Natural language feedback on summaries
• AI personalization preferences

2.2 Information Automatically Collected

Technical Information: IP address, browser type, device type, pages visited, date/time of access

Cookies: Authentication cookies (essential), session management, PWA service worker cache

3. How Your Information is Used

• Service Delivery: Generate and deliver personalized AI news summaries
• Communication: Send your summaries and account notifications
• Improvement: Analyze usage to improve features and AI quality
• Security: Protect against unauthorized access and fraud
• Legal Compliance: Comply with legal obligations

4. Third-Party Services

These third-party services process your data:

OpenAI (AI Processing)

• What is shared: Your prompts, news article content
• Purpose: Generate AI-powered summaries
• Privacy: OpenAI Privacy Policy

Resend (Email Delivery)

• What is shared: Your email address, summary content
• Purpose: Deliver email summaries
• Privacy: Resend Privacy Policy

Google Cloud (Hosting)

• What is shared: All service data (infrastructure)
• Purpose: Host and run the application
• Privacy: Google Privacy Policy

Google OAuth (Sign-In)

• What is received: Email, name, profile picture (with your permission)
• Purpose: Enable Google account sign-in

Your personal data is NOT sold to third parties.

5. Data Storage and Security

Where: United States (Google Cloud, us-central1 region)

How data is protected:

• HTTPS/TLS encryption for all data in transit
• Bcrypt password hashing
• Private database with no public access
• Regular security updates and monitoring

How long:

• Active accounts: Data retained while account is active
• Deleted accounts: Data deleted within 30 days
• Logs: Retained for 90 days

6. Your Rights and Choices

You have the right to:

• Access: Request a copy of your personal information
• Update: Edit your account information and preferences
• Delete: Request account deletion
• Export: Download your information
• Opt out: Disable AI personalization

7. Regional Privacy Rights

European Union (GDPR)

If you are in the EU, you have additional rights including data portability, right to restrict processing, and right to lodge a complaint with your supervisory authority.

California (CCPA)

California residents have the right to know what information is collected, right to deletion, and right to opt out of sale (we don't sell data).

8. Children's Privacy

GainBrain is not intended for users under 13 years of age. Information from children under 13 is not knowingly collected.

9. Changes to This Policy

This privacy policy may be updated from time to time. Notification of material changes will be provided via email or prominent notice on the website.

10. Data Breach Notification

In the event of a data breach affecting your information, notification will be provided within 72 hours of discovery with an explanation of the steps being taken.