Security

1. Your content never trains AI models. Neither ours nor third parties'. What you write is yours — raw material for your identity, not for our product.
2. You choose where AI runs. In Privacy mode, your private content is processed by models we host, with three exceptions listed in section 4. In Quality mode, it goes to external providers that are contractually forbidden from training on it.
3. We don't sell your data. We don't show ads. Our model is you paying for the product — not you being the product.
4. You are in charge of your data. Access, correction, and deletion guaranteed by the LGPD, handled directly by our team.

Every AI product should answer this question before asking for your data. Here is our answer.

MyBrain is not a layer on top of ChatGPT. Your knowledge lives in a graph — the network of entities and relationships that forms your MyBrain, built from what you capture. The language model is only the query interface: it serves the graph, not the other way around.

This matters for your privacy for a concrete reason: because the knowledge lives in the graph, and not in a model's memory, your content does not have to become training data for the product to work. It is an architecture decision, not a marketing promise.

We work in layers. In Privacy mode, the AI that reads your private content runs on our infrastructure. In Quality mode, external models are used for stronger answers. We are expanding what runs on our own infrastructure.

• We never use your content to train AI models — ours or third parties'.
• We never sell or rent your data.
• We never show ads or share data with advertisers.
• We never read your content, unless you request support and authorize it.
• We never let external providers use your content for their own purposes: we work only with providers who forbid using customer data for training.

The exception is up to you. If you turn on "your own key" mode (below), that flow then follows the terms of the provider you chose, and these rules no longer apply to it. We tell you first.

You choose how your content is processed.

Privacy mode (the default during the beta). Your private content is processed by models we run on our own infrastructure. Three flows still use an external provider (OpenAI) today: reading your public LinkedIn profile during onboarding; a short summary of your five main topics, used to write your welcome message; and the question you send when MyBrain searches the web.

Quality mode. Your content is sent to external AI providers, as it is, to get stronger answers.

In both modes, providers are contractually forbidden from training on your data.

Not live yet. A pseudonymization layer, which would replace names, emails and other identifiers with neutral markers before anything reaches an external model, is on our roadmap. It is not in production today. We will update this page when it is.

You can connect your own key from an external AI provider and use it directly through MyBrain. It is a deliberate trade: more capability, less protection. In that mode, your content goes to the provider under their terms, outside our provider contracts and outside Privacy mode. That is why the option is off by default and only turns on with a clear notice of what changes.

Actions that leave the protected environment, such as web search, are listed in section 4. You can see and change your mode at any time in Settings.

Beyond what you write directly in MyBrain, you can bring knowledge from other places — and we want to be clear about it:

• Apps you connect (Notion, Google Drive, Dropbox, OneDrive, Box, email): we import only what you authorize, within the permission granted, and you can disconnect whenever you want.
• Voice interviews with Maia and quick capture: You choose when to start a voice conversation with Maia. While the microphone is capturing, the screen shows it. The audio and the transcript go into your MyBrain like any other source you add, stay under your control and remain there until you delete them. They count toward your plan's storage.
• Imports from other AI tools: you can migrate your history from assistants such as ChatGPT or Gemini into your MyBrain.
• Public knowledge sweep (onboarding): with your authorization, we look up public information about you (on LinkedIn, for example) to suggest sources, and you approve item by item.

None of these providers may use your data for their own purposes. The full list of sub-processors can be requested at privacy@mybrain.ai.

• Your data is encrypted in transit and at rest.
• Hosted on AWS and Google Cloud. Because part of the infrastructure and of the providers sits outside Brazil, there is international transfer, handled as described in the Privacy Policy (arts. 33–36 of the LGPD).
• Telemetry is sanitized: logs and usage events carry no content from your captures.
• Internal access restricted by role.

The LGPD guarantees you access, correction, deletion, portability, and information about how your data is processed. During the beta it works like this: write to privacy@mybrain.ai with your request, and we answer within 7 days. A copy of your data in a readable format goes out within 15 days. No labyrinthine form: in the beta, the people who answer are the people who build the product, and our Data Protection Officer (DPO) is Marcos Nader.

You also control your MyBrain directly in the product: you can delete your account (in the data-control area) and review, correct, or delete pieces of knowledge that do not represent you.

MyBrain is in controlled beta, opening in waves to a few people at a time. We would rather tell you where we are than fake a maturity we do not have:

• Our own processing: we are migrating part of the processing to our infrastructure, so that less and less content has to leave.
• Pseudonymization: planned, not live. Today we protect your content through Privacy mode and no-training contracts, not by masking identifiers.
• SOC 2 / ISO 27001 certification: we do not have it yet. It is on the roadmap as the product grows.
• Authentication: login with LinkedIn, Google, or a code sent by email.
• On-screen transparency (seeing every external call in the interface): planned; for now, this page plays that role.

A beta with limited seats and close contact: in some cases with individual onboarding and, over the course of the program, with feedback interviews after use — to hear what worked and what did not.

A question that is not here? Write to support@mybrain.ai. Anything about your data and your rights goes to privacy@mybrain.ai.