PRIVACY POLICY

Last updated: February 1, 2026

This translation is provided for your convenience. In case of any discrepancy, the English version prevails.

Cerebro Technologies, Inc. ("Cerebro," "we," "us," or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services.

1. Who We Are

Cerebro is operated by Cerebro Technologies, Inc., a Delaware corporation.

We provide AI-powered commerce infrastructure that enables businesses to sell their offerings through conversational AI platforms (such as ChatGPT, WhatsApp, and Alexa+), and enables customers to discover, book, and purchase from those businesses through natural conversation.

2. Information We Collect

We collect different information depending on how you interact with Cerebro:

a. Business Users (via the Cerebro App):

• Account information: phone number, business name, business category, and location.
• Offerings data: services, products, prices, availability, and descriptions you create.
• Transaction data: sales, bookings, and customer interactions.
• Payment information: bank account or payment details for receiving payouts (processed via Stripe Connect).
• Conversation data: messages exchanged with Cerebro AI within the app to manage your business.

b. Customers (via ChatGPT, WhatsApp, or other platforms):

• Account information: name, phone number, and email address when you make a purchase.
• Transaction data: purchases, bookings, order history, and preferences.
• Payment information: payment method details (processed via Stripe — we do not store full card numbers).
• Conversation data: messages exchanged with Cerebro through AI platforms to discover and purchase offerings.

c. Website Visitors (cerebro.one):

• Contact information if you reach out for support or inquiries.
• Standard analytics data (pages visited, referral source) via cookies.

3. How We Use Your Information

We use the information we collect to:

• Create and manage your Cerebro account (business or customer);
• Process transactions, bookings, and payments;
• Enable AI-powered conversations for business management and customer purchases;
• Send transaction confirmations, receipts, and important service notifications;
• Provide customer support and respond to inquiries;
• Improve and optimize our services, including AI response quality;
• Detect and prevent fraud, abuse, and security threats;
• Comply with legal obligations and enforce our terms.

We never sell or rent your personal data to third parties for marketing purposes.

4. How We Share Information

We share your information only when necessary to provide our services:

• Stripe: processes all payments securely. Business users connect via Stripe Connect for payouts.
• Google Cloud / Firebase: provides secure database storage, authentication, and infrastructure.
• OpenAI: powers AI conversations through ChatGPT integration. Conversation data is processed according to OpenAI's usage policies.
• Meta / WhatsApp: enables customer conversations via WhatsApp Business API.
• Between businesses and customers: When a customer makes a purchase, relevant transaction details are shared with the business to fulfill the order.

All partners are contractually required to protect your data and comply with applicable privacy laws.

5. AI and Conversation Data

Cerebro uses artificial intelligence to power conversations:

• Business conversations in the Cerebro App are processed to understand commands and manage your offerings.
• Customer conversations through ChatGPT or WhatsApp are processed to understand requests and facilitate purchases.
• We may use aggregated, anonymized conversation data to improve our AI systems.
• We do not use your personal conversations to train third-party AI models without consent.

6. Data Retention

We retain your data for as long as your account is active or as needed to provide services. Transaction records are retained as required for tax, legal, and business purposes. You may request deletion of your account and personal data at any time by contacting privacy@cerebro.one.

7. Data Security

We implement industry-standard security measures to protect your information, including encryption in transit and at rest, secure authentication, access controls, and regular security assessments. However, no method of transmission over the Internet is 100% secure.

8. Your Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal data.
• Correction: Request correction of inaccurate data.
• Deletion: Request deletion of your data ("right to be forgotten").
• Portability: Request your data in a portable format.
• Objection: Object to certain processing of your data.
• Withdraw consent: Withdraw consent for optional communications.

To exercise these rights, contact us at privacy@cerebro.one. We will respond to requests within 30 days (or as required by applicable law).

9. International Data Transfers

Your data may be transferred to and processed in the United States and other countries where our service providers operate. We ensure appropriate safeguards are in place for international transfers, including standard contractual clauses where required.

10. Children's Privacy

Cerebro is not intended for children under 16 years of age. We do not knowingly collect personal information from children. If we learn we have collected data from a child, we will delete it promptly.

11. Third-Party Links

Our services may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies.

12. Updates to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy with a new "last updated" date. Continued use of our services after changes constitutes acceptance.

13. Contact Us

For privacy questions, concerns, or to exercise your rights, contact:
privacy@cerebro.one