DATA PROTECTION & PRIVACY

Privacy Policy

Last Updated: August 16, 2026 • Effective Date: January 1, 2026

1. Information We Collect

BrainXelerator Inc. ("BrainXelerator", "we", "us", or "our") respects your privacy. We collect information necessary to provide high-performance engineering services, build modern software, and maintain secure technical communications:

  • Personal Information: Name, professional email address, phone number, company name, and job title provided when requesting project scoping or consultations.
  • Technical Telemetry: IP addresses, browser types, device specifications, operating system versions, and performance metrics collected via privacy-preserving analytics.
  • Client Project Communications: Technical requirements, repository references, architectural blueprints, and Slack/Discord standup logs submitted during active development.

2. How We Use Your Information

We process your information strictly for legitimate engineering and business operations:

  • Engineers and executes custom web applications, SaaS platforms, microservices, and cloud infrastructures.
  • Communicates sprint milestones, technical deliverables, architectural pull requests, and support updates.
  • Processes invoices, recurring billing, and milestone contracts securely via Stripe payment processing.
  • Protects our web application systems against unauthorized access, credential abuse, and cyber threats.

3. Data Security & Encryption

We enforce enterprise-grade zero-trust security standards across all systems:

All data transmitted to or from BrainXelerator systems is encrypted using TLS 1.3 in transit and AES-256 at rest. Client database storage utilizes strict PostgreSQL Row-Level Security (RLS) policies to guarantee isolation.

4. Third-Party Subprocessors

We never sell, rent, or trade your personal data. We utilize trusted infrastructure subprocessors:

Vercel & AWSGlobal Edge Hosting & Serverless Cloud Infrastructure
StripePCI-DSS Level 1 Payment Invoice Processing
CloudflareWAF Security, DDoS Protection & DNS Routing
ResendTransactional Email Communications

5. Your GDPR & CCPA Rights

Depending on your location, you hold full legal rights regarding your personal information:

  • Right to Access & Export: Request copies of your personal data stored in our systems.
  • Right to Erasure ("Right to be Forgotten"): Request deletion of your personal contact records.
  • Right to Opt-Out: Unsubscribe from non-essential communications at any time.

6. Contact Privacy Team

If you have questions regarding this Privacy Policy or wish to exercise your privacy rights, contact us:
naim@brainxelerator.com