Privacy Policy
Last updated: October 14, 2026
This policy explains how Done Yesterday LLC, doing business as Brainforest, of Tempe, Arizona, USA ("Brainforest", "we", "us") handles information. It covers brainforest.com, readiness.brainforest.com (the AI Readiness Index, including AI Snapshot, Executive Diagnostic and 90-Day Advisory) and Brainforest AEO (together, the "Services").
1. Information we collect
- Contact details: name, email, phone, company, role and anything you send through forms or email.
- Business and financial information: answers you provide in diagnostic interviews and questionnaires, such as revenue ranges, costs, workflows, tools and operating challenges.
- Payment details: processed by Stripe. We do not store full card numbers; we receive limited details such as payment status and the last four digits.
- Usage data: pages visited, time spent on pages, device and browser information, approximate location from IP address (such as country or region), referring pages and similar technical data. Google Analytics 4 collects much of this usage data on our website, as described in the "Google Analytics" section below.
2. How we use information
- To deliver the Services, including diagnostics, reports, advisory work and AEO analysis.
- To process payments, refunds and fee credits.
- To communicate with you about your engagement, requests and account.
- To operate, secure and improve the Services.
- To meet legal, tax and accounting obligations.
3. Who we share it with
We share information only with service providers who help us run the Services, under terms that limit their use of it:
- Stripe for payment processing.
- Supabase for data storage and authentication.
- Postmark for email delivery.
- Google (Google Analytics 4) for measuring website traffic and usage.
- Anthropic (Claude API) for AI processing used to analyze inputs and prepare deliverables.
- Iron River Technologies, our delivery partner, for Executive Diagnostic clients only.
We do not sell your personal information.
4. Your answers are never used to train public AI
Your diagnostic answers and business information are never used to train public AI models. We use AI providers through commercial API terms under which submitted data is not used for model training.
5. When we disclose information
Beyond the providers above, we disclose information only with your consent, when required by law, subpoena or court order, to protect the rights, safety or property of Brainforest, our clients or others, or as part of a merger, acquisition or sale of assets, in which case this policy continues to apply.
6. Security
We use encryption in transit, access controls that limit data to authorized staff, role-based permissions in our systems and reputable infrastructure providers. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
7. Data retention
We keep information for as long as needed to deliver the Services, maintain engagement records and meet legal, tax and accounting requirements. When it is no longer needed, we delete or anonymize it.
8. Your rights
You can ask to access, correct or delete your personal information, or to stop receiving marketing email, by contacting hello@brainforest.com. We may need to verify your identity and may keep certain records where the law requires it. Depending on where you live, you may have additional rights under local law.
9. Cookies
We use cookies and similar technologies that are necessary to run the Services, such as keeping you signed in, and, where permitted, to understand how the Services are used. You can control cookies through your browser settings; blocking some may affect how the Services work.
10. Google Analytics
Our website uses Google Analytics 4, a web analytics service provided by Google LLC. It helps us understand how visitors use the site, such as which pages they view, how long they stay, which pages referred them, and approximate location such as country or region. Google Analytics 4 does not log or store individual IP addresses in reports.
Google Analytics uses cookies such as _ga to distinguish visitors from one another and to remember visits. The data Google collects may be processed outside your country and is governed by Google's terms and privacy policy.
You can manage this tracking in several ways:
- Use Google's official opt-out browser add-on, which prevents Google Analytics from collecting data in the browsers where you install it: tools.google.com/dlpage/gaoptout.
- Block or delete cookies, including the _ga cookie, in your browser settings.
- Adjust ads personalization through Google's My Ad Center if you use Google services.
- Use private browsing, which clears cookies when you close the window.
Opting out does not affect how the website works, and you can still use every part of it.
11. Changes to this policy
We may update this policy. The "Last updated" date above shows when it last changed.
12. Contact for privacy requests
Done Yesterday LLC, doing business as Brainforest, Tempe, Arizona, USA. Email hello@brainforest.com.