Privacy Policy

Last updated: March 12, 2026

This translation is provided for your convenience. In case of any discrepancy, the English version prevails.

Privacy

Cerebro Technologies, Inc. ("Cerebro," "we," "us," or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services.

1. Who We Are

Cerebro is operated by Cerebro Technologies, Inc., a Delaware corporation.

We provide AI-powered infrastructure that enables businesses, creators, freelancers, and individuals to manage their operations through conversational AI on WhatsApp. Customers interact with businesses through WhatsApp and the web (cerebro.one) to discover, book, and purchase services and products through natural conversation.

For the purposes of the EU General Data Protection Regulation (GDPR) and UK data protection laws, Cerebro Technologies, Inc. is the data controller for personal data collected through the Service. You can contact us at privacy@cerebro.one.

2. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA) or United Kingdom, we process your personal data based on the following legal grounds:

3. Information We Collect

We collect different information depending on how you interact with Cerebro:

a. Owners (via WhatsApp):

b. Customers (via WhatsApp and cerebro.one):

c. Website Visitors (cerebro.one):

d. Information We Do Not Collect:

4. How We Use Your Information

We use the information we collect to:

We never sell or rent your personal data to third parties for marketing purposes.

5. How We Share Information

We share your information only when necessary to provide our services:

All third-party providers are contractually required to protect your data and process it only for the purposes described above, in compliance with applicable privacy laws.

We may also disclose your information if required by law, court order, or governmental regulation, or if necessary to protect the rights, property, or safety of Cerebro, our users, or the public.

6. AI and Conversation Data

Cerebro uses artificial intelligence (powered by Anthropic Claude) to enable conversations:

7. Data Retention

We retain your data according to the following schedule:

Data Type Retention Period
Account information Duration of account + 30 days after deletion request
Transaction records 7 years (as required by law)
Conversation data Duration of account + 30 days after deletion request
Voice message audio Not stored — processed in real time and discarded after transcription
Owner memories Until you ask Cerebro to forget, or until account deletion
Analytics data 26 months

You may request deletion of your account and personal data at any time by contacting privacy@cerebro.one. Upon receiving a verified deletion request, we will delete or anonymize your data within 30 days, except where retention is required by law.

8. Data Security

We implement industry-standard security measures to protect your information, including:

Payment data is handled entirely by Stripe (a PCI DSS Level 1 certified provider) and never touches our servers. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected users and relevant supervisory authorities within 72 hours as required by GDPR.

9. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

To exercise these rights, contact us at privacy@cerebro.one. We will verify your identity and respond within 30 days (or as required by applicable law). We will not charge a fee for reasonable requests.

For California residents: Under the California Consumer Privacy Act (CCPA), you have the right to know what personal information we collect, request deletion, and opt out of the sale of personal information. We do not sell personal information. To exercise your rights, contact privacy@cerebro.one.

10. International Data Transfers

Your data is primarily stored and processed in the European Union (Google Cloud Belgium, europe-west1). Some of our service providers operate in the United States, which means your data may be transferred internationally.

For transfers from the EEA or UK to countries without an adequacy decision, we ensure appropriate safeguards are in place, including:

11. Cookies

The cerebro.one website uses the following types of cookies:

We do not use advertising cookies or third-party tracking pixels. You can manage cookie preferences through your browser settings. The WhatsApp-based service does not use cookies.

12. Children's Privacy

Cerebro is not intended for children under 16 years of age (or the applicable minimum age in your jurisdiction). We do not knowingly collect personal information from children. If we learn we have collected data from a child, we will delete it promptly. If you believe a child has provided us with personal data, please contact us at privacy@cerebro.one.

13. Third-Party Links

Our services may contain links to third-party websites or services (including Stripe checkout pages). We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal data.

14. Updates to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy with a new "last updated" date and, where practicable, by notifying you through the Service. Continued use of our services after changes constitutes acceptance.

For material changes that affect how we process your data, we will provide at least 30 days' notice before the changes take effect.

15. Contact Us

For privacy questions, concerns, data access requests, or to exercise any of your rights:

We aim to respond to all inquiries within 30 days.