Privacy Policy

NewBrainsAI is the data controller for personal data collected through this website. For any privacy question or request, contact legal@newbrainsai.com.

When you submit the contact form, we collect the information you give us: your name, email address, company name (optional), the service you're interested in, your message, and optionally your budget range and timeline.

For abuse-prevention purposes we also store a hashed representation of your IP address (we never log the raw IP) and the user-agent string sent by your browser. These cannot identify you on their own.

We do not use tracking cookies, third-party analytics beyond cookieless aggregate stats, advertising networks, or any service that profiles you across sites.

To respond to your inquiry, send you a proposal, and arrange a call. That's it. We don't add you to a newsletter. We don't share your information with third parties for marketing.

We process your data on two lawful bases: (a) your consent , submitting the form is the consent action; (b) our legitimate interest in operating a business and replying to people who contact us. You can withdraw your consent at any time by emailing legal@newbrainsai.com, we'll delete your data.

Your form submission is transmitted via Resend (resend.com) for email delivery and verified by Cloudflare Turnstile (cloudflare.com) to prevent bot abuse. Both providers act as processors on our behalf. We do not share your data with anyone else.

Form submissions live in our email inbox indefinitely unless you ask us to delete them. If you ask us to delete your data, we'll do so within 30 days and confirm by email.

Under GDPR / UK GDPR you have the right to:

• Access the personal data we hold about you
• Have it corrected if it's wrong
• Have it erased ("right to be forgotten")
• Restrict how we use it
• Receive it in a portable format
• Object to our processing
• Lodge a complaint with a supervisory authority

To exercise any of these rights, email legal@newbrainsai.com. We respond within 30 days.

See our Cookie Policy for full details. Short version: we don't set tracking cookies.

All data is transmitted over HTTPS. IP addresses are hashed before storage. We don't operate a database for form submissions on v1, your message lives in our email inbox alone, behind multi-factor authentication.

Our processors (Resend, Cloudflare) operate primarily in the United States. If you're in the EU or UK, your data may be transferred to the US under those providers' standard contractual clauses for international data transfers.

This site is not intended for children under 16. We don't knowingly collect data from minors.

We may update this policy from time to time. The effective date at the top of this page changes when we do. Material changes will be flagged on our home page for 30 days.