Last updated: July 19, 2026

Privacy Policy

Index Brain ("Indexbrain", "we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and what choices you have. By using Indexbrain, you agree to the practices described here.

What we collect

We collect the following categories of information:

• Account information: your name, email address, and profile picture, provided through Google OAuth when you sign in. We do not collect or store passwords.
• Company information: your company name and any details you provide during onboarding or in settings.
• Integration data: content from the tools you connect (Gmail, Slack, Notion, GitHub, Granola, Fathom, your website). We read this content to extract structured knowledge. We do not store raw emails, messages, or documents.
• AI conversation data: if you use the AI Sync feature, content from Claude, ChatGPT, or Cursor conversations you choose to upload.
• Usage data: activity logs, sync history, and feature usage within the dashboard. Used solely to operate the service.
• Technical data: IP address, browser type, and session tokens used to authenticate your account.

How we use it

We use your data solely to provide the Indexbrain service:

• To extract structured knowledge from your connected tools and organize it into skills
• To deliver those skills to the AI agents you authorize
• To operate the sync pipeline and maintain your company brain
• To send service-related notifications (sync status, security alerts)

We never sell your data. We never use your data to train AI models. Your data is never used for advertising or analytics.

AI processing

Indexbrain uses Anthropic's Claude API to extract and structure knowledge from the content you connect. Content from your integrations is sent to Anthropic's API for processing. Anthropic does not use this content to train their models. We apply noise filtering before any content is sent, removing signatures, automated notifications, and irrelevant messages.

Cookies

We use session cookies to keep you signed in. These are essential for the service to function. We do not use advertising cookies or third-party tracking cookies.

Data security

• All data encrypted in transit using TLS 1.2 or higher
• All data encrypted at rest using AES-256
• OAuth tokens stored encrypted, never in plain text
• Complete data isolation between organizations
• Audit logging of all data access events

Data retention

We retain your data for as long as your account is active. Extracted knowledge is stored until you delete it or close your account. Raw source content from your integrations is never stored.

Data deletion

• Disconnect an integration: removes all data extracted from that source. Permanent.
• Delete specific facts or skills: remove individual knowledge at any time.
• Reset your brain: selectively wipe facts, skills, insights, or procedures.
• Delete your account: permanently removes all data within 24 hours.

We will notify you within 72 hours of any confirmed personal data breach.

Third-party services

• Amazon Web Services: infrastructure and database storage in the United States.
• Anthropic: Claude API for AI knowledge extraction. Content is not stored or used for training.
• Google: OAuth sign-in. We receive your name, email, and profile picture.
• Vercel: frontend hosting. No personal data stored.
• Sentry: error monitoring. Error reports contain metadata only.

Your rights

• Access: request a copy of the personal data we hold
• Correction: ask us to correct inaccurate data
• Deletion: request that we delete your personal data
• Portability: request your data in a machine-readable format

To exercise these rights, email privacy@indexbrain.online. We respond within 30 days.

Changes to this policy

We may update this Privacy Policy from time to time. For material changes, we will notify you by email at least 30 days before they take effect. Continued use after changes constitutes acceptance.

Questions? Email legal@indexbrain.online