Privacy Policy
Effective October 9, 2026
This policy explains what information Redwood Digital Strategies LLC, a Delaware limited liability company ("we", "us"), collects through its Company Brain Dashboard product ("Company Brain") when you use companybraindashboard.com and app.companybraindashboard.com (the "Service"), how we use it, who we share it with, and the choices you have. If you have questions, email privacy@companybraindashboard.com.
Who this applies to
Our customers are businesses. The person who signs up creates a workspace for their business and may invite teammates. The business that owns a workspace decides what to connect to it and controls the data in it. Where that data includes information about the business's own customers, we process it on the business's behalf and under its instructions.
Information we collect
Account information
Your email address, and your name and Google account ID if you sign in with Google. With Google sign-in we request only your basic profile and email address (the openid, email and profile scopes).
Workspace content
What you or your teammates add to the Service: your business details, your website address and the public pages we read from it, files you upload, notes, settings and messages you write in the dashboard.
Data from services you connect
When you choose to connect another service, such as Google or Meta, we receive the data that service shares under the permissions you approve on its consent screen. Each connection asks only for the access needed for the features you turn on, and starts read-only where the provider allows it. The connection card in your dashboard lists what each one can read and do.
Billing information
Payments are handled by Stripe. We receive your plan, subscription status, billing email and the last four digits and expiry of your card. We never see or store full card numbers.
Technical information
IP address, browser type, and records of sign-ins and actions taken in your workspace, kept for security, abuse prevention and auditing.
Cookies
We use one essential cookie to keep you signed in, and one short-lived cookie during Google sign-in to protect against forged requests. We don't use advertising or cross-site tracking cookies.
How we use information
- To provide the Service: build and update your company brain, show your dashboard, answer questions about your business, and prepare the drafts and actions you ask for.
- To carry out actions you approve, such as sending a message or changing a setting in a connected service. The Service does not send anything on your behalf without an approval rule you control.
- To sign you in, keep your account secure, and prevent fraud and abuse.
- To bill you and to send service emails such as sign-in codes, receipts and notices about your account.
- To provide support when you ask for it, and to fix problems.
We do not sell your information, use it for advertising, or share it with data brokers.
Information from Google
In particular, for data we receive from Google APIs:
- We use it only to provide and improve the user-facing features of the Service that you can see in your dashboard.
- We transfer it to others only as needed to provide those features (for example, to our hosting and AI processing providers listed below), to comply with law, or as part of a merger or acquisition with notice to you.
- We do not use it to serve advertisements, including retargeting or interest-based ads.
- We do not allow humans to read it unless you give us permission for a specific purpose (such as a support request), it is necessary for security or to investigate abuse, or it is required by law.
- We do not use it to develop, improve or train generalized or non-personalized AI or machine-learning models.
Information from Meta
If you connect Facebook or Instagram, we use the data Meta shares under the permissions you approve only to provide the features you turned on, consistent with Meta's Platform Terms. You can remove the connection at any time in your dashboard, or in your Facebook settings under Business Integrations. See Data deletion for how to have that data deleted.
AI processing
The Service uses AI models, provided by Anthropic, to read your content and prepare answers and drafts. Your content is sent to the model provider only to produce the response you asked for. Under our agreement with the provider, it does not use our customers' content to train its models.
Who we share information with
We share information only with service providers that help us run the Service, under contracts that limit their use of it to providing services to us:
| Provider | What for |
|---|---|
| Cloudflare | Application hosting, database, file storage, network security |
| Netlify | Hosting this marketing website (no workspace data) |
| Stripe | Payments and invoices |
| Resend | Sending service emails such as sign-in codes |
| Anthropic | AI processing of your content to produce answers and drafts |
We also disclose information if required by law or to protect the rights, property or safety of our users or others, and to a successor if our business is merged or sold, in which case this policy continues to apply to your information.
Security
All traffic is encrypted in transit with TLS. Access tokens for connected services are encrypted at rest with AES-256-GCM. Each workspace's records are isolated: every request is checked against the signed-in user's workspace membership before any data is read. Sign-in codes and session identifiers are stored only as one-way hashes. No method of storage or transmission is perfectly secure, but we work to protect your information and will notify you of a breach as the law requires.
Retention and deletion
We keep workspace data while your account is active. If you cancel, your workspace becomes read-only and its data is deleted 90 days later, unless you ask us to delete it sooner. When you disconnect a service, we delete the access tokens for it immediately and stop collecting data from it. Some records (such as invoices) are kept longer where the law requires. See Data deletion for how to ask for deletion.
Your rights and choices
You can view and change most information in your dashboard. You can also ask us to access, correct, export or delete your personal information by emailing privacy@companybraindashboard.com. Depending on where you live (for example, in the European Economic Area, the United Kingdom or California), you may have additional rights under local law, including the right to object to or restrict processing and to complain to a data protection authority. We will not discriminate against you for exercising these rights.
If you are a customer of a business that uses Company Brain, please contact that business first; we will help them respond to your request.
Children
The Service is for businesses and is not directed at children under 16. We do not knowingly collect information from children.
International transfers
We are based in the United States and our providers may process information in the United States and other countries. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses.
Changes to this policy
If we make material changes, we will notify workspace owners by email or in the dashboard before they take effect. The date at the top shows when this policy last changed.
Contact
Redwood Digital Strategies LLC
Company Brain Dashboard
611 South DuPont Highway, Suite 102
Dover, DE 19901
United States
privacy@companybraindashboard.com