Privacy Policy
Last updated 2026-11-04
This policy explains what personal data Brainpot handles, why, and what you can do about it. Try New Things AB (registration number 559438-2326) is responsible.
Two roles
- Your account data: we decide how it is used, so we are the controller.
- Content in a workspace (pages, facts and history): the organisation using the workspace is the controller and we are its processor, under the Data Processing Agreement. Questions about that content go to the workspace owner.
What we collect about you
| Data | Why | Legal basis | Kept |
|---|---|---|---|
| Email address and name | Your account, sign-in links, service messages | Contract | While you have an account |
| Passkey public keys | Signing you in. We never receive your fingerprint or face. | Contract | Until you remove the passkey |
| IP address and sign-in events | Security and abuse prevention | Legitimate interest | 12 months |
| Billing details | Payment and bookkeeping. Card numbers stay with Stripe. | Contract and legal obligation | 7 years, as Swedish bookkeeping law requires |
| Who changed what, and with which AI tool | Version history your team can see | Contract | As long as your plan keeps history |
What we don't do
- We don't read your workspace content, sell it, or use it to train AI models.
- We don't use advertising or tracking cookies. The only cookie keeps you signed in.
Who else handles data
A short list of subprocessors, all in the EU or covered by EU safeguards, is on the security page.
Your rights
You can ask to see, correct, export or delete your personal data, object to processing, or restrict it. Most of it you can do yourself under Account and with Export. Otherwise email privacy@brainpot.cloud and we answer within 30 days. You can also complain to the Swedish Authority for Privacy Protection (IMY), imy.se.
Changes
If we change this policy in a way that matters, we tell you by email before it applies.