Privacy Policy

• Contact details: name, email, phone, company, role and anything you send through forms or email.
• Business and financial information: answers you provide in diagnostic interviews and questionnaires, such as revenue ranges, costs, workflows, tools and operating challenges.
• Payment details: processed by Stripe. We do not store full card numbers; we receive limited details such as payment status and the last four digits.
• Usage data: pages visited, device and browser information, approximate location from IP address, referring pages and similar technical data.

• To deliver the Services, including diagnostics, reports, advisory work and AEO analysis.
• To process payments, refunds and fee credits.
• To communicate with you about your engagement, requests and account.
• To operate, secure and improve the Services.
• To meet legal, tax and accounting obligations.

We share information only with service providers who help us run the Services, under terms that limit their use of it:

• Stripe for payment processing.
• Supabase for data storage and authentication.
• Postmark for email delivery.
• Anthropic (Claude API) for AI processing used to analyze inputs and prepare deliverables.
• Iron River Technologies, our delivery partner, for Executive Diagnostic clients only.

We do not sell your personal information.

Your diagnostic answers and business information are never used to train public AI models. We use AI providers through commercial API terms under which submitted data is not used for model training.

Beyond the providers above, we disclose information only with your consent, when required by law, subpoena or court order, to protect the rights, safety or property of Brainforest, our clients or others, or as part of a merger, acquisition or sale of assets, in which case this policy continues to apply.

We use encryption in transit, access controls that limit data to authorized staff, role-based permissions in our systems and reputable infrastructure providers. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

We keep information for as long as needed to deliver the Services, maintain engagement records and meet legal, tax and accounting requirements. When it is no longer needed, we delete or anonymize it.

You can ask to access, correct or delete your personal information, or to stop receiving marketing email, by contacting hello@brainforest.com. We may need to verify your identity and may keep certain records where the law requires it. Depending on where you live, you may have additional rights under local law.

We use cookies and similar technologies that are necessary to run the Services, such as keeping you signed in, and, where permitted, to understand how the Services are used. You can control cookies through your browser settings; blocking some may affect how the Services work.

We may update this policy. The "Last updated" date above shows when it last changed.

Done Yesterday LLC, doing business as Brainforest, Tempe, Arizona, USA. Email hello@brainforest.com.