Privacy Policy

1. Introduction

Brainator, LLC ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use the Brainator software and website.

By using Brainator, you consent to the practices described in this Privacy Policy.

2. Information We Collect

2.1 Information You Provide

When you purchase Brainator, we collect:

• Email Address: For sending receipts, download links, and support communications
• Name: For personalizing communications and order processing
• Payment Information: Processed securely by Stripe (we never see or store your full credit card details)

2.2 Information We Do NOT Collect

We do not collect:

• Your OpenAI API key (stored locally on your device only)
• Content of worksheets you generate
• Usage analytics or tracking data
• Browsing history or cookies beyond essential functionality
• Location data
• Device identifiers

2.3 Automatically Collected Information

We may automatically collect:

• Transaction Data: Order ID, purchase date, and amount (for order fulfillment)
• Support Communications: When you email us for support

3. How We Use Your Information

We use your information solely for the following purposes:

• Order Fulfillment: Processing your purchase and delivering your license
• Customer Support: Responding to your questions and troubleshooting issues
• Transactional Emails: Sending receipts, download links, and order confirmations
• Legal Compliance: Meeting legal and regulatory requirements

We do NOT use your information for:

• Marketing or promotional emails (unless you opt in)
• Selling or sharing your data with third parties
• Tracking your behavior or usage patterns
• Targeted advertising

4. How Your Data Is Stored

4.1 Local Storage (Your Device)

The following data is stored only on your computer:

• Your OpenAI API key (encrypted locally)
• All worksheets, stories, and content you generate
• Application settings and preferences

We have zero access to this data. It never leaves your device.

4.2 Cloud Storage (Our Servers)

The following data is stored in our secure cloud database (Firebase):

• Email address
• Name
• Order ID and transaction details
• Purchase date and amount

This data is stored indefinitely to support your lifetime license and handle potential refund requests.

5. Third-Party Services

We use the following trusted third-party services:

5.1 Stripe (Payment Processing)

• What they collect: Payment information (credit card details, billing address)
• Why we use them: To securely process payments
• Their privacy policy: stripe.com/privacy

5.2 Firebase (Database & Hosting)

• What they store: Order data and customer information
• Why we use them: Reliable cloud storage for order records
• Their privacy policy: firebase.google.com/support/privacy

5.3 OpenAI (AI Generation)

• What they receive: Your prompts and worksheet requests (sent directly from your device using your API key)
• Why: To generate AI-powered worksheets
• Important: We do NOT send your data to OpenAI. Your device communicates directly with OpenAI using your personal API key.
• Their privacy policy: openai.com/policies/privacy-policy

6. Data Security

We implement industry-standard security measures to protect your information:

• Encryption: All payment data is encrypted with 256-bit SSL
• Local Encryption: Your API key is encrypted on your device
• PCI Compliance: Payment processing meets PCI-DSS standards
• Secure Storage: Cloud data stored in Firebase's secure infrastructure
• Limited Access: Only essential personnel can access customer data

7. Your Privacy Rights

Depending on your location, you may have the following rights:

7.1 Access & Portability

You have the right to request a copy of all personal data we hold about you.

7.2 Correction

You can request correction of inaccurate or incomplete information.

7.3 Deletion

You can request deletion of your personal data, subject to legal and legitimate business reasons (e.g., tax records, refund claims).

7.4 Opt-Out

You can opt out of marketing emails at any time (transactional emails about your purchase cannot be opted out of).

To exercise any of these rights, email us at [email protected].

8. GDPR Compliance (EU Users)

If you are located in the European Union, we comply with GDPR requirements:

• Legal Basis: We process your data based on contract fulfillment (your purchase)
• Data Transfers: Your data may be stored in the US (Firebase servers)
• Your Rights: You have the right to access, rectify, erase, and port your data
• Complaints: You can lodge a complaint with your local data protection authority

9. CCPA Compliance (California Users)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information we collect
• Right to delete your personal information
• Right to opt out of the sale of your information (we do not sell your information)
• Right to non-discrimination for exercising your rights

10. Children's Privacy

Brainator is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us immediately.

11. Data Retention

We retain your personal information for as long as necessary to:

• Support your lifetime license
• Handle potential refund requests (90 days)
• Comply with legal and tax requirements (typically 7 years)

You can request deletion of your data at any time, subject to these legal requirements.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date.

For significant changes, we will notify you via email.

13. Contact Us

If you have questions about this Privacy Policy or your personal data, contact us: