Brain

Privacy Policy

Last updated 1 September 2026

Brain is an operations tool for event agencies. It holds the working record of your events so that knowledge does not leave when a planner does. This page describes exactly what it stores, where, and how to get rid of it.

Who runs Brain

Brain is operated by Chandra Events Pvt Ltd. For anything on this page — a question, a correction, or a request to delete your data — write to avyaandhoka24@gmail.com.

What we collect

Account details. Your name, email address, and agency name. If you sign in with Google we receive your name, email address, and profile picture URL from Google — nothing else, and we never receive your Google password.

What you put into the product. Events, tasks, decisions, risks, vendor records, and the text of any message or document you add. If you drop a file into Memory, the file is read in your browser and never uploaded anywhere; what gets stored is the extracted text (up to the first 20,000 characters) and the filename.

Sign-in records. The time of each sign-in, so you can see who has been in your workspace.

Anti-abuse data. When an account is created we store a one-way hash of the IP address, to stop one network creating hundreds of accounts. The address itself is not kept and the hash cannot be reversed back into it.

What we do not do

Who else touches your data

Brain runs on a small number of services, each doing one job:

Each has its own privacy policy. We do not send your data anywhere else.

How your workspace is kept separate

Every record carries the identifier of the workspace it belongs to, and the database itself refuses to return rows from a workspace you are not a member of. This is enforced in the database, not in the app, so it holds even if something in the interface has a bug.

Passwords are stored hashed by Supabase's authentication service. Nobody at Chandra Events can read your password.

How long we keep it

Your data stays as long as your workspace exists. Ask us to delete it and we will remove the workspace and everything in it. Sign-up rate-limit hashes are discarded automatically after a short period.

Your rights

You can ask for a copy of your data, ask us to correct it, or ask us to delete it, by writing to the address above. If you are in a jurisdiction with specific data protection rights — for example the GDPR in the EU or the DPDP Act in India — those rights apply and we will honour them.

Children

Brain is a business tool and is not intended for anyone under 18.

Changes

If this policy changes in a way that affects you, we will change the date at the top of this page and tell account holders by email.

Plain-language note. This document describes how the software actually behaves — it was written against the code, not from a template. It is not legal advice, and if Brain starts taking payments or serving customers in new jurisdictions it is worth having a lawyer review it.