TheBrainRE ("we," "us," or "our") is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our SaaS platform and related services (the "Service"). Please read this policy carefully. If you do not agree with the terms of this Privacy Policy, please do not access the Service.
2. Information We Collect
2.1 Information You Provide Directly
We collect information you voluntarily provide when you register for an account or use the Service, including:
- Account information: your name, email address, and password when you create an account;
- Payment information: billing name, address, and credit/debit card details (processed securely through our third-party payment processor — we do not store raw card numbers);
- Profile information: any additional details you choose to add to your account;
- Communications: messages you send us or feedback you provide.
2.2 Information Collected Automatically
When you use the Service, we may automatically collect certain technical information, including:
- Log data: IP address, browser type, pages visited, and timestamps;
- Usage data: features used, actions taken, and session duration;
- Cookies and similar tracking technologies (see Section 7 below).
2.3 Information from Third Parties
We may receive information about you from third-party integrations you authorize (e.g., CRM platforms, MLS data providers) in connection with the Service.
3. How We Use Your Information
We use the information we collect to:
- Provide, operate, maintain, and improve the Service;
- Process transactions and send related invoices and receipts;
- Authenticate your identity and maintain account security;
- Send administrative communications, such as updates, security alerts, and support messages;
- Respond to your comments, questions, and requests;
- Send marketing and promotional communications (you may opt out at any time);
- Monitor and analyze usage trends to improve the user experience;
- Detect, investigate, and prevent fraudulent or unauthorized activity;
- Comply with legal obligations.
4. Legal Basis for Processing (where applicable)
If you are located in the European Economic Area (EEA) or the United Kingdom, we rely on the following legal bases for processing your personal data:
- Performance of a contract: to provide the Service you have requested;
- Legitimate interests: to improve our Service and prevent fraud;
- Consent: where you have given us explicit permission (e.g., marketing emails);
- Legal obligation: to comply with applicable laws and regulations.
5. How We Share Your Information
We do not sell or rent your personal information. We may share your information in the following circumstances:
5.1 Service Providers
We share information with trusted third-party vendors who assist us in operating the Service, including payment processors, cloud hosting providers, analytics platforms, and customer support tools. These vendors are contractually obligated to protect your data and use it only as directed by us.
5.2 Business Transfers
If we are involved in a merger, acquisition, financing, or sale of all or a portion of our assets, your information may be transferred as part of that transaction.
5.3 Legal Compliance
We may disclose your information if required to do so by law or in response to valid legal process (e.g., court orders, subpoenas), or to protect the rights, property, or safety of the Company, our users, or the public.
5.4 With Your Consent
We may share your information with third parties when you have given us explicit consent to do so.
6. Data Retention
We retain your personal information for as long as your account is active or as needed to provide the Service. We may also retain and use your information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements. When information is no longer needed, we delete or anonymize it in accordance with our data retention policies.
7. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to collect usage information and enhance your experience. The types of cookies we use include:
- Essential cookies: necessary for the Service to function and cannot be disabled;
- Analytics cookies: help us understand how users interact with the Service;
- Preference cookies: remember your settings and preferences;
- Marketing cookies: used to deliver relevant advertising (if applicable).
You can control cookie settings through your browser preferences. Disabling certain cookies may affect the functionality of the Service.
8. Data Security
We implement industry-standard technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include encryption of data in transit (TLS/SSL), secure password hashing, and access controls. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.
9. Payment Security
All payment transactions are processed through PCI-DSS compliant third-party payment processors. We do not store complete payment card information on our servers. Your billing details are handled directly by our payment provider in accordance with applicable payment security standards.
10. Your Rights and Choices
Depending on your location, you may have the following rights regarding your personal information:
- Access: request a copy of the personal data we hold about you;
- Correction: request correction of inaccurate or incomplete data;
- Deletion: request deletion of your personal data, subject to certain exceptions;
- Portability: request a machine-readable copy of your data;
- Objection: object to the processing of your data for certain purposes;
- Restriction: request restriction of processing in certain circumstances;
- Opt-out of marketing: unsubscribe from promotional emails at any time via the unsubscribe link in our emails or by contacting us.
To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days.
11. Children's Privacy
The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us at [email protected] and we will take steps to delete such information.
12. California Privacy Rights (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to delete your personal information, and the right to opt out of the sale of your personal information. We do not sell personal information. To exercise your California rights, contact us at [email protected].
13. International Data Transfers
Your information may be transferred to and processed in countries other than your own. By using the Service, you consent to the transfer of your information to countries that may have different data protection laws than your country of residence. Where required, we ensure appropriate safeguards are in place for such transfers.
14. Third-Party Links
The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to review the privacy policies of any third-party services you access.
15. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will notify you of material changes by posting the updated policy on our website and by sending an email to your registered address. The revised policy will be effective on the date stated at the top of the policy.
16. Contact
If you have questions or concerns about this Privacy Policy or our data practices, please contact us: