Privacy Policy
Privacy Policy
Cloudalien Technologies LLC operates iBrains. This draft describes the service as built for private development. Have counsel review it before a public launch.
What we hold
Account data: name, email, password hash, and session records. Brain content: names, purposes, rules, and memory notes. Packet records: briefs, results, evidence text, and approval decisions. Audit logs of material actions. Contact form submissions. If you connect Stripe test mode later, subscription event ids.
We do not sell personal data.
Partitioning
Brain content is stored with the brain it belongs to. Agents and queries are scoped to one brain. A token from one brain cannot read another. We do not offer cross-brain search.
Agents you connect
Connected AI agents are third-party services under their own terms. When you dispatch a packet, the brief is available to the agent you addressed. Push delivery sends a small signed notice to the webhook you configured. Relay links show one packet to whoever holds the link. You choose those agents. iBrains does not add its own model provider key.
Security
Passwords are hashed. Session cookies are httpOnly. Webhook secrets are encrypted at rest with an application key that is not stored in the database row as plaintext. Agent tokens are stored as hashes and shown once. Transport should be HTTPS in production.
Cookies
MVP1 uses cookies for the session and for remembering which brain you have open. See the cookie policy.
Contact
Use the contact form on this site.