PRIVACY POLICY

Last updated: October 20, 2025

This translation is provided for your convenience. In case of any discrepancy, the English version prevails.

Cerebro ("we," "us," "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy describes how we collect, use, and safeguard your information.

1. Who We Are

Cerebro is operated by the Cerebro team. Once incorporated, all references to "Cerebro" will refer to the registered legal entity.

We provide infrastructure that connects businesses and customers through AI assistants such as ChatGPT, enabling real-time bookings and communication.

2. Information We Collect

We collect only the information necessary to operate and improve our Service:

a. On our website (cerebro.one):

• Name, email address, business type, and country (for early-access registration).
• Optional correspondence (if you contact us for support).

b. Inside ChatGPT (via the Cerebro connector or app):

• Business or customer account details created within ChatGPT.
• Booking and payment information processed via Stripe.
• Metadata related to availability or inventory, stored in Firebase.

We do not collect or store sensitive payment data (like full card numbers); these are processed by Stripe under its own privacy and security policies.

3. How We Use Your Information

We use your data to:

• Create and manage your Cerebro account;
• Enable bookings, transactions, and confirmations;
• Communicate with you about your account or activity;
• Send product updates or invitations (only with consent);
• Improve system reliability and performance.

We never sell or rent your personal data.

4. How We Share Information

We share data only with trusted partners essential to operation:

• Stripe (payments)
• Firebase / Google Cloud (database and authentication)
• OpenAI / ChatGPT (AI assistant integration)

All partners comply with modern privacy standards (GDPR, CCPA, ISO/IEC 27001).

5. Data Retention

We retain your data only as long as necessary to provide the Service or comply with legal obligations. You may request deletion of your data at any time by emailing privacy@cerebro.one.

6. Security

We implement standard technical and organizational measures to protect your information, including encryption, secure authentication, and access controls.

7. Your Rights

Depending on your region, you may have the right to:

• Access or request a copy of your data;
• Correct inaccurate information;
• Request deletion ("right to be forgotten");
• Withdraw consent for communications.

You can exercise these rights by contacting privacy@cerebro.one.

8. Children's Privacy

Cerebro is not directed to children under 13 (or under 16 in the EU). We do not knowingly collect data from minors.

9. International Data Transfers

Data may be stored or processed in the United States or other countries where our infrastructure providers operate. We ensure all transfers comply with applicable data-protection laws.

10. Updates

We may update this Privacy Policy from time to time. Any changes will be posted on this page with a revised "last updated" date.

11. Contact

For questions, concerns, or data requests, contact:
privacy@cerebro.one