Privacy Policy

1. Information We Collect

1.1 Information You Provide

We collect information you provide directly to us, including:

• Personal identification information (name, email address, phone number)
• Company information (company name, address, job title)
• Account credentials (password and security questions)
• Payment information (processed through secure third-party providers)
• Communications with us (support requests, feedback)
• Any other information you choose to provide

1.2 Phone Numbers and SMS Communications

When you enable two-factor authentication or phone verification:

• We collect your phone number
• We send you security verification codes via SMS
• We maintain records of verification attempts and successful verifications
• Message frequency depends on your account security activities
• Standard message and data rates may apply
• You can opt out of SMS messages by replying STOP to any message

1.3 Automatically Collected Information

We automatically collect certain information when you use our Services:

• Device information (IP address, browser type, operating system)
• Usage information (pages visited, links clicked, time spent)
• Location information (derived from IP address)
• Cookies and similar tracking technologies
• Log data and analytics information

1.4 Information from Third Parties

We may receive information about you from:

• Business partners and data providers
• Identity verification services
• Public databases
• Marketing partners
• Connected third-party services you authorize

1.5 Data You Connect

When you connect data sources to our Services:

• We access and process data from your connected accounts (e.g., advertising platforms, analytics tools, CRMs)
• We use read-only access wherever possible
• We process this data to provide you with insights and analytics
• We do not sell your connected data to third parties

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our Services
• Process your transactions
• Send you technical notices and security alerts
• Verify your identity and prevent fraud
• Communicate with you about products, services, and events
• Monitor and analyze trends and usage
• Develop new products and services
• Comply with legal obligations
• Enforce our terms, conditions, and policies
• Protect our rights, property, and safety
• Personalize and improve your experience
• Provide customer support

3. Information Sharing

3.1 We Share Information With:

• Service providers and business partners who assist in delivering our Services
• Professional advisors (lawyers, accountants, auditors)
• Law enforcement or government agencies when required
• Other parties in connection with a business transaction (merger, acquisition, sale)
• Third parties with your consent

3.2 We Do Not:

• Sell your personal information for monetary compensation
• Share your personal information with third parties for their direct marketing purposes without your consent
• Share your phone number or SMS opt-in data with third parties for their marketing purposes

4. Data Security

We implement appropriate technical and organizational measures to protect your information, including:

• Encryption of data in transit (TLS) and at rest
• Regular security assessments and penetration testing
• Access controls and authentication requirements
• Employee training on data security
• Incident response procedures
• SOC 2-aligned security practices
• Private AWS VPC infrastructure

However, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security of your data.

5. Your Rights and Choices

5.1 Account Information

You can update your account information through your account settings or by contacting us.

5.2 SMS Communications

You can opt out of SMS communications by:

• Replying STOP to any message
• Adjusting your account settings
• Contacting support@cerebroanalytics.com

5.3 Marketing Communications

You can opt out of marketing emails by clicking the "unsubscribe" link in any marketing email or by contacting us.

5.4 Cookies

Most browsers allow you to refuse cookies or alert you when cookies are being sent. However, some features of our Services may not function properly without cookies.

5.5 Your Privacy Rights

Depending on your location, you may have rights to:

• Access your personal information
• Correct inaccurate information
• Request deletion of your information
• Object to or restrict processing
• Data portability
• Withdraw consent

5.6 California Privacy Rights

California residents have additional rights under the CCPA, including:

• Right to know what personal information is collected
• Right to know whether personal information is sold or disclosed
• Right to delete personal information
• Right to opt-out of the sale of personal information
• Right to non-discrimination for exercising these rights

To exercise your California privacy rights, contact us at support@cerebroanalytics.com.

5.7 Nevada Privacy Rights

Nevada residents may opt out of the sale of covered information. We do not currently sell covered information as defined under Nevada law.

6. International Data Transfers

We process information in the United States and other countries. When we transfer information across borders, we implement appropriate safeguards in compliance with applicable law.

7. Data Retention

We retain information for as long as necessary to:

• Provide our Services
• Comply with legal obligations
• Resolve disputes
• Enforce our agreements

When you delete your account, we will delete or anonymize your personal information within 30 days, except where retention is required by law.

8. Children's Privacy

Our Services are not directed to children under 13. We do not knowingly collect information from children under 13. If we learn we have collected information from a child under 13, we will delete it promptly.

9. Third-Party Links and Services

Our Services may contain links to third-party websites and services. We are not responsible for the privacy practices of these third parties. We encourage you to read their privacy policies.

10. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes through our Services or by email. Your continued use of the Services after changes are made constitutes acceptance of the updated Privacy Policy.

11. Contact Information

For questions about this Privacy Policy or our practices:

12. Additional Information for EU/EEA Users

If you are located in the European Union or European Economic Area:

• The legal basis for processing your data includes consent, contractual necessity, and legitimate interests
• You have the right to lodge a complaint with your local data protection authority
• We will only transfer your data outside the EU/EEA with appropriate safeguards in place