Privacy Policy
1. Controller and contact
Data processing is carried out by Brains Copilot, responsible for the platform at brainscopilot.com. To exercise rights or ask about privacy, write to contato@brainscopilot.com.
2. Data we collect
| Data | Purpose |
|---|---|
| E-mail, name and profile photo (via Firebase Authentication / Google or GitHub login) | Create and authenticate your account |
| Plan, quota and usage history | Enforce limits, billing and improve the service |
| Payment data (processed by Stripe — we don't store your card) | Subscriptions and top-ups |
| Messages, images and documents you send to the chat | Generate the requested response |
| Case numbers you choose to monitor | Case activity alerts |
| Technical data: error logs and device/browser identifiers | Security and bug fixing |
Text extraction from PDFs and images happens in your browser; only the necessary text is sent to the AI provider to generate the response.
3. Legal bases (LGPD)
We process your data based on: performance of the contract (providing the service you signed up for), compliance with legal/regulatory obligations, and legitimate interest (security, fraud prevention and improvement), under art. 7 of the LGPD. Payment data follows the contract-performance basis.
4. Who we share with (processors/sub-processors)
- AI model providers (e.g., Anthropic, OpenAI, Google and open-model providers), to generate responses;
- Stripe, to process payments;
- Google Firebase, for authentication and database;
- Transactional e-mail provider (Resend), to send account notices;
- Hosting/infrastructure provider, to operate the application;
- CNJ / DataJud (official public database), queried when you use the legal workspace.
We do not sell your data and do not track your prompts for advertising.
5. International transfer
Some providers (such as AI and infrastructure) operate outside Brazil. In these cases, the transfer occurs under art. 33 of the LGPD, with contractual safeguards and only as needed to provide the service.
6. How long we keep it
We keep your data while your account exists. When you delete your account, we erase your data from our systems, except information the law requires us to retain (e.g., tax and billing records) and already-anonymized data.
7. Your rights
Under the LGPD (art. 18), you may: confirm processing, access, correct, anonymize, port, and delete your data, and withdraw consent. You can yourself:
- Export your data in Account → Privacy & account → Export my data;
- Delete your account and data in Account → Privacy & account → Delete account;
- Or request any right via contato@brainscopilot.com.
8. Security
We adopt technical and organizational measures to protect your data, such as encryption in transit, access control and a database closed to direct browser access. No system is 100% immune; in the event of a relevant incident, we will act in accordance with the LGPD.
9. Cookies and local storage
We use the browser's local storage to keep your session, preferences and your conversation history on your device. We do not use third-party advertising cookies.
10. Minors
The Service is not intended for people under 18. We do not knowingly collect data from minors.
11. Changes
We may update this policy. Material changes will be communicated by e-mail or in the Service, with the update date shown above.
12. Contact / DPO
To exercise rights or discuss privacy: contato@brainscopilot.com.