Privacy Policy

NewBrainsAI is a US company and the controller of the personal data collected through this website. For any privacy question or request, email legal@newbrainsai.com.

The contact form. Your first name, email address, company and what you need help with, plus anything optional you add: last name, phone, website, your role, company size and what you want to improve. We use it to reply to you and prepare a proposal.

Booking a call. Your name, email address, what you want to discuss if you tell us, and the time zone your browser reports, so the times you see are your own. We use it to hold your slot and send the invitation and reminders.

The chat assistant. The messages you send and the replies you get. If you ask us to get in touch, also the name, email address and need you give. Your messages go to DeepSeek to write each reply.

The try-it demos. What you type or say goes to DeepSeek to write the demo's reply. In the phone call demo your browser turns your voice into text first; Chrome and Edge do this through Google or Microsoft. We do not store demo conversations and we never record audio.

The price calculator. The options you choose, and when you ask for your quote or order: your email address, your website (or that you have none), your type of business, optionally your name, and any notes. We keep these so your quote link keeps working and we can honour the price.

Orders and payment. Stripe's checkout collects your name, email address, card details and billing address, and asks for your website and type of business. We never see your full card number.

Security. To stop spam and abuse we keep a scrambled (hashed) form of your IP address, never the address itself. When a form uses Cloudflare Turnstile, Cloudflare receives your IP address to check that a person is sending it.

Visit counts. Vercel Web Analytics and Speed Insights count page visits and measure how fast pages load, without cookies and without identifying you. You can switch them off on our Cookie Policy page.

This policy covers newbrainsai.com. The systems we build for clients run in accounts in the client's own name, so the client decides what personal data those systems handle and is responsible for it. When we build or look after one, we process that data only on the client's instructions.

NewBrains HQ, our online office at hq.newbrainsai.com, has its own HQ Terms and HQ Privacy Policy, which apply when you use it.

We do not sell or share your personal information, we do not use advertising cookies, and we do not track you across other websites. Because we do no cross-site tracking at all, "Do Not Track" and Global Privacy Control signals change nothing about how this site treats you. We do not add you to a newsletter.

Replying to you, booking your call, sending your quote and handling your order are steps you asked us to take before or under a contract. Keeping order and invoice records is a legal obligation. Answering questions in the chat, improving its answers, running the demos, counting visits and preventing abuse are our legitimate interests in running this business, and you can object to any of them.

These providers process personal data on our behalf, under their own data protection terms:

We share personal data with nobody else, except where the law requires it.

• Contact form submissions, bookings and chats: 90 days after the last update, then deleted automatically.
• Calculator quotes: 400 days, so a saved quote stays valid and can be ordered.
• Try-it demo conversations: not stored.
• Orders and invoices: as long as tax law requires us to keep them.
• Emails with us: until your question is settled, and no longer than 24 months after our last contact unless you become a client.

If you ask us to delete your data sooner, we do it within 30 days and confirm by email.

You can ask us to:

• give you a copy of the personal data we hold about you
• correct it if it is wrong
• delete it
• limit how we use it, or stop using it
• send it to you in a format another service can read

Email legal@newbrainsai.com and we reply within 30 days. If you are in the EU or the UK, you can also complain to your data protection authority, for example the Information Commissioner's Office in the UK.

We are a US company and your data is processed in the United States. Our providers protect data they receive from the EU and the UK under their data protection terms, including the European Commission's standard contractual clauses or the EU-US Data Privacy Framework where they have joined it. The one exception is DeepSeek, which writes the replies of the chat assistant and the try-it demos: what you type into those goes to its servers in China. If you would rather that did not happen, use the contact form or book a call instead.

Everything travels over HTTPS. IP addresses are hashed before they are stored. Stored records are reachable only through a password-protected admin area, and our email inbox is protected by multi-factor authentication.

This site is for businesses and is not meant for anyone under 16. We do not knowingly collect their data.

When we change this policy, the date at the top changes too. If a change affects how we use information you have already given us, we tell you by email or with a notice on this website before it applies.