Brainstorm Privacy Policy
This privacy policy explains how Brainstorm ("we," "us," or "our"), the publisher of the Brainstorm plugin (the "Plugin"), collects, uses, and shares your personal information when you use the Plugin. Brainstorm is the controller of the personal information described in this policy.
We operate the Plugin's account, sign-in, purchase, subscription, and related pages using Plugpass, our service provider, which processes the information described in this policy on our behalf and under our instructions in order to provide those services to us. Your account for the Plugin is with us, not Plugpass, which has no account or customer relationship with you. Plugpass's own privacy policy describes the limited purposes (security, legal compliance, and de-identified service analytics) for which it handles information about its platform on its own account.
Information we collect
- Account information. When you create an account for the Plugin, we collect your email address (and any name you provide) and the sign-in details for your account, so we can provide and support the Plugin and communicate with you about it. Our service provider Plugpass operates the account on our behalf.
- Information you provide through the Plugin. We collect the information you provide when you use the Plugin, such as the inputs, content, and settings you submit to it.
- Information about your use of the Plugin. We collect information about how you use the Plugin, such as the features you use, your entitlements and your usage of the Plugin's paid features, and the actions you take, to operate, secure, and improve it.
- Payment and billing information. When you purchase the Plugin, we collect (through our payment processor, Stripe) your name, email address, billing address, and payment details to process and bill your purchase. We do not receive your full payment card number.
- Cookies and similar technologies. The Plugin's pages use first-party cookies to keep you signed in, secure your session, remember your preferences, and credit an affiliate who referred you. Where consent is required, non-essential cookies are set only with your consent. We do not use cookies for third-party tracking or cross-context behavioral advertising.
- Device and connection information. When you use the Plugin's pages, we collect your IP address, browser type and settings, device identifiers, operating system, and similar technical information, to operate and secure them.
- Sign-in with Google. If the Plugin offers sign-in with Google and you use it, Google provides us with your name and email address as permitted by your Google settings, to authenticate you. Google's handling of your information is governed by Google's own privacy policy.
How we use information
We use your information for the purposes below. We do not sell your personal information, and we do not use it for targeted advertising.
| Purpose | Legal basis |
|---|---|
| Provide and bill the Plugin, and communicate with you about it | Performance of our agreement with you |
| Operate, secure, support, and improve the Plugin, and prevent abuse | Our legitimate interests |
| Comply with applicable law | Legal obligation |
| Any use you specifically consent to | Your consent (which you may withdraw at any time) |
How we share information
- Plugpass, our service provider. Plugpass operates the Plugin's accounts, sign-in, purchases, subscriptions, entitlements, and pages, and sends account and billing email for us, on our behalf and under our instructions. In doing so it uses the following further providers, listed on Plugpass's subprocessor page: Cloudflare (hosting, edge delivery, storage, and caching), Neon (database hosting), Brevo (transactional email), Sentry (error monitoring), and Mixpanel (service analytics, fraud and abuse detection, and support).
- Other providers we use. We share information with the other third-party providers that help us operate and support the Plugin (such as hosting and infrastructure providers for our own services), only for those purposes.
- Payment processing. We use Stripe to process payments for the Plugin.
- Legal and safety. We may disclose information where reasonably necessary to comply with law, enforce our terms, or protect the rights, safety, and security of Brainstorm, our users, or the public.
- Business transfers. We may disclose information in connection with a merger, acquisition, financing, or sale of our assets.
We do not sell or share your personal information for advertising, and we do not resell or syndicate the information collected for the Plugin.
Categories of personal information
The chart below summarizes the categories of personal information we have collected in the past 12 months, the purposes for collecting it, and the categories of recipients we disclose it to. We do not sell or share your personal information.
| Category | Purpose | Recipients | Sold or shared |
|---|---|---|---|
| Identifiers (name, email, billing address, IP address) | Provide, bill, and support the Plugin, and communicate with you | Service providers | No |
| Commercial information (your purchases and billing details) | Process and bill your purchase | Service providers | No |
| Internet or other electronic network activity (how you use the Plugin) | Operate, secure, and improve the Plugin | Service providers | No |
| Information you submit through the Plugin (inputs, content, and settings) | Provide the Plugin | Service providers | No |
How we store and secure information
We use reasonable technical and organizational measures designed to protect your information. No system is completely secure, and we cannot guarantee its absolute security.
How long we keep information
We keep your information for as long as needed to provide the Plugin and for a reasonable period afterward, and as required to comply with our legal obligations, resolve disputes, and enforce our agreements.
International data transfers
We may process and store your information in the United States and in other countries where we and our providers operate. Where your information is transferred from the European Economic Area, the United Kingdom, or another region with cross-border transfer requirements, we rely on appropriate safeguards — such as the European Commission's Standard Contractual Clauses — to protect it.
Your rights and choices
Depending on where you live, you may have rights to access, correct, delete, restrict or object to our processing of, or receive a copy of your personal information; to withdraw consent where we rely on it; to opt out of certain disclosures; and to lodge a complaint with your local data-protection authority. You can opt out of our promotional messages using the unsubscribe link in any such message. To exercise any of these rights or ask a question, email us at support@favonian.ai; you may also use an authorized agent to submit a request on your behalf. We will not deny you service or treat you differently for exercising these rights, and if we decline a request you may ask us to reconsider.
You can also delete your account for the Plugin from its account page. Requests you send to Plugpass about your account for the Plugin are routed to us.
Children
The Plugin is not intended for anyone under the age of 16, and we do not knowingly collect personal information from children under 16.
Changes to this policy
We may update this policy from time to time. We will post the updated policy and revise the "Last updated" date below. Your continued use of the Plugin after the changes take effect constitutes acceptance.
How to contact us
If you have questions about this policy or your personal information, contact Brainstorm at support@favonian.ai.
Last updated: August 25, 2026