BrainRoad Privacy Policy
How BrainRoad handles account, billing, website, private Computer, Hermes, model, backup, and support data.
Last updated: August 26, 2026
This policy describes how BrainRoad handles information when you visit brainroad.com, use the BrainRoad Cloud product at app.brainroad.com, or contact support.
Information We Handle
- Account information: identity-provider subject, name, email address, sign-in events, entitlement state, and account timestamps.
- Billing information: payment-provider customer, subscription, invoice, and status references. BrainRoad does not store full payment-card details.
- Computer operations: logical Computer ID, Proxmox node and VM references, image version, lifecycle state, backup identifiers and times, health results, request IDs, status codes, timings, and byte counts.
- Model allowance: the OpenRouter key reference and OpenRouter-reported monthly usage and remaining allowance. The BrainRoad application does not proxy or copy model requests.
- Website and support information: pages visited, referral and campaign parameters, browser/device details supplied to website analytics, newsletter email when submitted, and information you choose to send to support.
Customer Computer Content
Your Hermes conversations, prompts, responses, tool payloads, connector credentials, files, browser profile, screen contents, keystrokes, and clipboard contents live in your private Computer or its encrypted operational backup. BrainRoad does not copy that content into its application database or application logs.
BrainRoad personnel or infrastructure administrators may need tightly limited access to operate, secure, recover, or delete the service. We do not inspect customer content for advertising or train models on it.
How Information Is Used
We use information to authenticate you, prepare and route your Computer, provide included model access, process billing, back up and recover customer state, secure and troubleshoot the service, answer support requests, measure product reliability, and meet legal obligations.
Service Providers
BrainRoad uses service providers to deliver the product. These may include Cloudflare for website delivery and private ingress, Clerk for identity, Stripe for billing, OpenRouter and the selected model provider for AI requests, Resend for requested email, and backup/storage providers. Each provider receives only the information needed for its role and handles that information under its own terms and privacy commitments.
Hermes sends model requests directly from your Computer to OpenRouter. Those requests may contain conversation or task content required to produce a result. Connected websites and tools receive the information or actions that you direct your Bots to use.
Cookies and Analytics
BrainRoad uses necessary cookies for sign-in and product security. The public site may use privacy-oriented analytics to understand aggregate traffic and product interest. We do not sell personal information or use customer Computer content for targeted advertising.
Retention, Backups, and Deletion
We retain account and operational information while needed to provide the service, resolve disputes, prevent abuse, and meet tax or legal duties. Backups are retained according to the backup schedule shown in the product.
Account deletion closes customer routes and begins tracked deletion of VM generations, durable customer storage, backups, and the customer model key. Some billing and security records may remain when law or fraud prevention requires them. Backup deletion may take additional time to complete across the backup system.
Security
BrainRoad separates customer Computers, keeps management services private, verifies ownership on customer routes, and uses root-owned pinned system images. No system can be guaranteed completely secure. Tell us promptly if you believe an account or Computer has been compromised.
Your Choices and Rights
Depending on your location, you may request access, correction, export, restriction, objection, or deletion of personal information. You may cancel the subscription from the product and may disconnect or revoke credentials at their provider.
Children
BrainRoad is not intended for children under 18, and we do not knowingly create accounts for them.
Changes
We may update this policy as the service changes. The current version and effective date will remain on this page.
Contact
Email privacy or deletion requests to [email protected].