Privacy Policy
Introduction
Branium.ai ("Branium.ai," "we," "our," "us") is committed to protecting your privacy and ensuring the security of your personal data.
This Privacy Policy outlines how we collect, use, store, and protect your personal information when you access or use our platform.
By using Branium.ai, you agree to the terms outlined in this policy.
We adhere to applicable data protection laws, including the UK General Data Protection Regulation (UK GDPR), the EU General Data Protection Regulation (GDPR), and other relevant privacy regulations, as enforced by the UK Information Commissioner’s Office (ICO) and other regulatory bodies.
GDPR Compliance
Under UK GDPR and GDPR, we rely on the following legal bases for processing your personal data:
Consent
We process your data when you provide explicit consent, such as subscribing to marketing communications, enabling optional platform features, or agreeing to specific data collection practices.
Consent-based processing includes personalized recommendations, participation in research initiatives, and engagement with promotional content.
Users have the right to withdraw consent at any time without affecting the lawfulness of processing based on prior consent.
Contractual Necessity
We process data necessary to fulfill our contractual obligations, such as maintaining user accounts, granting access to premium services, and managing in-platform transactions.
Branium.ai partners with third-party payment providers to securely handle transactions.
We do not store or process payment card details directly but ensure compliance with Payment Card Industry Data Security Standard (PCI DSS) and UK GDPR security requirements.
This category also covers user authentication, service activation, and troubleshooting support.
Legal Obligations
We may process data to comply with legal and regulatory requirements, such as tax compliance, governmental reporting, and adherence to UK and EU laws (e.g., tax authorities, ICO, or law enforcement requests).
This includes responding to legally binding requests from regulatory authorities or courts when necessary.
We will notify users of such disclosures unless prohibited by law or where notification would undermine the purpose of the request.
Legitimate Interest
We process user data based on our legitimate interests to enhance the platform, improve AI model accuracy, detect fraudulent activities, ensure cybersecurity, and optimize service performance.
This includes user behavior analysis, AI performance evaluation, and platform refinement, conducted with due consideration for your privacy rights.
We implement safeguards, such as data minimization and anonymization, to mitigate risks and balance our interests with your rights.
You have the right to object to processing based on legitimate interest under UK GDPR/GDPR (see Section 8).
Data We Collect
Branium.ai collects different types of data to deliver a seamless, personalized, and secure experience.
This includes:
Personal Information
Full name
Email address
Physical address
Phone number (if provided)
Billing and payment details (processed securely by third-party payment processors)
Automatically Collected Data
Device Information (IP address, browser type, operating system, device type)
Usage Data (pages visited, interactions, time spent on the platform, navigation paths)
Cookies & Tracking Technologies (used for analytics, functionality, and security)
AI Interaction Data
User inputs provided to AI models
Generated AI outputs (may be stored to improve AI performance)
Data used for research and development (in anonymized or aggregated form)
Transaction Data
Purchases of Neurons and other digital assets
Transaction history within the Branium.ai ecosystem
Payment confirmations and invoices
Communication Data
Support requests, feedback submissions, and survey responses.
Email correspondence, notifications, and user inquiries.
Logs of customer service interactions for training and quality assurance.
Cookies & Tracking Technologies
Branium.ai uses cookies and tracking technologies to enhance user experience, including:
Essential Cookies: Required for platform functionality, such as authentication and security measures.
Performance Cookies: Monitor website usage, analytics, and feature effectiveness.
Targeting Cookies: Support marketing efforts, content personalization, and tailored user experiences.
Users can manage cookie preferences through browser settings or platform configurations.
How We Use Your Data
We use collected data to:
Deliver, maintain, and optimize Branium.ai services, including AI-driven tools (e.g., NeuroVision, NeuroCode).
Process transactions, issue invoices, and manage financial records securely via third-party providers.
Improve AI models through aggregated, anonymized data analysis and refinement, ensuring compliance with user consent where applicable.
Detect and prevent fraudulent activity, security breaches, and unauthorized access to protect user accounts and platform integrity.
Ensure regulatory compliance and enforce platform policies under UK and EU laws.
Send service updates, feature notifications, and marketing communications (with user consent, which can be withdrawn at any time).
Personalize content and user interactions based on preferences and platform usage, respecting user privacy settings.
We do not sell, rent, or trade personal data to third parties for their own marketing purposes.
How We Share Your Data
Branium.ai does not sell user data but may share information under specific, lawful conditions:
With Service Providers
Payment processors (e.g., for Neuron purchases) to securely handle transactions, ensuring PCI DSS and GDPR/UK GDPR compliance.
Cloud storage and infrastructure providers (e.g., AWS, Google Cloud) for reliable service delivery, located in the EEA or GDPR-compliant jurisdictions.
Customer support, analytics (e.g., Google Analytics), and cybersecurity partners, bound by Data Processing Agreements (DPAs) under Article 28 GDPR/UK GDPR.
For Legal Compliance
To comply with legal, regulatory, or law enforcement obligations (e.g., ICO, HMRC, or court orders) under UK and EU laws.
To prevent fraud, cyber threats, and protect user accounts, as required by law or to safeguard platform integrity.
In Business Transfers
If Branium.ai undergoes a merger, acquisition, or corporate restructuring, user data may be transferred as part of business assets.
We will notify users of such changes and provide options to opt out or delete data, where feasible, in compliance with GDPR/UK GDPR.
All third-party processors are contractually obligated to protect your data, comply with GDPR/UK GDPR, and only process data as instructed by Branium.ai.
Data Storage & Security
We employ industry-standard security measures to protect user data, including:
Encryption: All data is encrypted in transit (using TLS) and at rest (using AES-256 encryption).
Access Controls: Restricted access to personal data, limited to authorized personnel with a legitimate need, under strict internal policies.
Regular Audits: Security assessments, penetration testing, and updates to protect against breaches, conducted annually or as required by UK GDPR.
Data is stored on secure servers located within the European Economic Area (EEA) or in jurisdictions compliant with GDPR and other privacy laws.
User Rights (GDPR)
Users in the UK, EEA, or other applicable jurisdictions have the following rights under UK GDPR and GDPR.
To exercise these rights, contact us at alloy@branium.ai.
Requests will be processed within 30 days, in accordance with UK GDPR/GDPR (Article 12):
Right to Access
Request copies of personal data held by Branium.ai.
Right to Rectification
Request corrections to inaccurate or incomplete data.
Right to Erasure (Right to be Forgotten)
Request deletion of your personal data, subject to legal obligations or legitimate reasons for retention (e.g., contractual or legal requirements).
Right to Restrict Processing
Request limitations on how we process your data (e.g., during verification of accuracy or objection to processing).
Right to Data Portability
Receive your personal data in a structured, commonly used, machine-readable format (e.g., CSV, JSON) and transmit it to another controller, where technically feasible.
Right to Object
Object to processing based on legitimate interest or direct marketing, including profiling for marketing purposes, at any time.
Right to Withdraw Consent
Withdraw consent for processing based on consent (e.g., marketing, AI training) without affecting the lawfulness of prior processing.
If we cannot fulfill a request (e.g., due to legal obligations), we will explain our reasoning and provide appeal options.
You may also lodge a complaint with the UK ICO (ico.org.uk) or your local data protection authority (e.g., for EEA users, the relevant national authority).
Changes to This Privacy Policy
Branium.ai may update this Privacy Policy periodically.
Significant changes will be communicated via email or platform notifications.
Contact Information
For privacy-related inquiries, you can reach us at:
Email: braniumcare@branium.ai
Address: Office 11568, 182-184 High Street North, East Ham, London, United Kingdom, E6 2JA
ICO Registration reference: ZB875227