Privacy Policy

Google data and permissions

Connecting Google is optional. Requested permissions: openid, email and profile identify the connected account; gmail.readonly reads, searches and summarizes email, including senders, recipients, subjects, message bodies and attachments when accessed; gmail.compose manages drafts and technically also permits sending. Alden can send, reply or forward without asking again when you configure prior authorization for those actions. Otherwise it requests confirmation as required by your settings. These are application rules, not restrictions of the Google permission. [PENDIENTE: confirm availability and enforcement of configurable authorization in the deployed version].

calendar.readonly and calendar.events access calendars, event titles, descriptions, times, locations and attendees. Alden can create, change or move events at your request or when appropriate to your situation. Changes involving guests require confirmation; private events can be deleted without another confirmation. [PENDIENTE: verify the exact scopes shown by the live Google/Composio consent flow and deletion safeguards before broader release].

Google Limited Use

Google data is used only to provide or improve visible, user-facing Alden features. We do not sell it, use it for advertising, or use it to develop, improve or train generalized AI or machine-learning models, ours or anyone else’s. Transfers are limited to providing the service with your consent, security or legal obligations. Human access requires your express consent for specific messages or data, a security or abuse need, a legal obligation, or aggregated and anonymized data for internal operations.

AI providers and security

Relevant conversation and connected-service content is processed by AI providers to answer and act for you. Cloudflare provides hosting and AI Gateway; model routes can involve OpenAI, Anthropic and other providers. Composio manages connected Google accounts and relays authorized actions. [PENDIENTE: final provider list, including DeepSeek, OpenRouter and voice providers; verify each active route’s contractual no-training terms and retention before sending Google data].

The application keeps connection credentials out of model inputs. Brainsforce has an encrypted vault and records credential use by actor and time without secret values. Current Google connections are managed by Composio. [PENDIENTE: verify OAuth encryption per user, TLS on every processing path and content-free connection audit coverage with the provider].

Other Alden data

Chats with Alden and agents, attachments, files in your drive, tasks, pending items, preferences and quiet hours support your requests, continuity and notification timing. Voice notes and calls are processed for transcription and spoken responses; call transcripts are stored. [PENDIENTE: whether recordings are retained, where, for how long, and the speech-recognition and synthesis providers].

Optional health features are planned, disabled by default and require explicit consent. Apple Health data would include sleep, heart-rate variability (HRV), resting pulse, workouts, breathing and oxygen levels, solely to adapt when and how Alden notifies you and answer your questions. Required safeguards: encryption, a maximum of 90 days and deletion when disabled. [PENDIENTE: implementation and verification before activation].

Home Assistant connections would control your lights and climate at home. Linked iPhones, watches, glasses and computers may involve device identifiers and Apple push-notification tokens. Other integrations, including via Composio, process the information needed for the services you connect. [PENDIENTE: actual availability, device data, Home Assistant processing and Apple notification setup].

Retention and disconnecting

[PENDIENTE: separate retention periods for Google content and derived summaries, OAuth credentials, chats, files, voice recordings and transcripts, tasks and preferences, device identifiers, connection logs, website/signup records and backups; deletion completion deadline and legal exceptions]. Health, if activated, is subject to the 90-day maximum above.

Use the connection’s Disconnect control in Alden to remove its Composio connection. [PENDIENTE: confirm the Settings → Connections path and whether disconnect also revokes the Google grant]. You can revoke access directly in your Google Account permissions. Revocation stops future access but does not by itself erase previously stored chats, files or provider copies. Request deletion of all your data at marc@lemn.ae; we may verify your identity without asking for passwords.

International processing and rights

Providers may process data internationally. [PENDIENTE: final subprocessors, processing countries, contractual safeguards and applicable transfer mechanisms]. Depending on applicable law, processing relies on providing your requested service, consent for optional connections, health and marketing, and security or legal needs. You may request access, correction, deletion, portability, objection or restriction, withdraw consent, and complain to the competent authority in your country. [PENDIENTE: applicable legal bases and authority details].

The service is not directed at children. [PENDIENTE: minimum age]. We date policy changes here and notify you in the service or by email of material changes; new Google data uses require notice and consent before they begin.

Information we handle and why

• Prelaunch signup. We collect your email address, any idea you choose to submit and any interests you select. We record the signup time, source and the email consent notice presented to you. We use this information to send the product updates, learning resources and invitations you request, and to understand your interest in Brainsforce.
• Email reports. Circle provides delivery reports and, where available, recorded email opens and link clicks. These reports help us understand whether our updates reach readers and which resources interest them.
• Messages to us. If you email us, we use your contact details and message to respond and handle your request.
• Website traffic. Our hosting and security services process technical information such as IP addresses, requested pages, browser information and request times to deliver the site, diagnose problems and prevent abuse. The signup service uses an IP-derived identifier to limit repeated requests.

Email updates are based on your consent when you sign up. You can withdraw it at any time. We also process information as needed to respond to your requests and meet applicable legal or security requirements.

Your idea and interests are optional. Please do not include passwords, payment details, sensitive personal information or someone else’s private information in an idea. The website’s interactive examples do not connect to your accounts or carry out the illustrated actions.

Service providers and international processing

Circle stores prelaunch contact details, optional ideas and interests, and signup records, and supports our email communications. A prelaunch signup creates a contact record, not a community account. Joining the community is a separate choice. See Circle’s Privacy Notice for its platform practices.

Cloudflare hosts and delivers the website and provides security and traffic measurement services. See Cloudflare’s Privacy Policy.

We do not sell your prelaunch contact details. We may disclose information where required by applicable law or necessary to handle legal claims. Browsing the integrations catalogue does not give us access to your accounts with those services.

Cookies and website analytics

We do not add advertising or retargeting cookies to this marketing site. Its forms do not save your entries in browser storage. Cloudflare Web Analytics is used to understand site traffic and performance; Cloudflare describes this service as operating without cookies, browser storage or fingerprinting. This is separate from Cloudflare’s processing of traffic for hosting and security.

If you select a language, we save that preference in your browser so we can suggest it on a later visit. You can change it with the language selector or remove it by clearing this site’s browser storage. We may include the website language in your signup record to help plan relevant updates.

When you follow a link to Circle or another external website, that service has its own cookies and privacy practices. Your browser settings let you manage cookies. Read how Cloudflare Web Analytics works.

Your choices and rights

You can stop updates using the unsubscribe option in our emails or by contacting hello@brainsforce.com. Submitting the signup form again does not change an existing contact’s idea, interests or subscription preferences; contact us to change them.

Subject to applicable law, you may request information about our processing, access to or a copy of your data, correction, deletion, restriction, objection to processing, or transfer of your data. You may withdraw consent without affecting processing that was lawful before withdrawal. We do not use the prelaunch form to make automated decisions with legal or similarly significant effects about you.

Email us to exercise these rights or raise a concern. We may need to verify that the request relates to your information. You may also raise a complaint with the competent data protection authority under applicable law.

Community and future services

If you separately join our community, Circle will ask for account information and the community will show its membership terms and privacy information. Our community is public. Posts, comments and public parts of your profile may be visible to anyone and may appear in search engines, depending on the relevant space and profile settings. Consider this before sharing personal information.

Community participation can also display your profile name, points and level on leaderboards. You can opt out of leaderboard participation through your Circle preferences. This does not make your other public contributions private.

Read our Website Terms.