Brain is an operations tool for event agencies. It holds the working record of your events so that knowledge does not leave when a planner does. This page describes exactly what it stores, where, and how to get rid of it.
Brain is operated by Chandra Events Pvt Ltd, a private limited company registered in India. It is the data controller for everything described on this page.
For anything here — a question, a correction, or a request to delete your data — write to avyaandhoka24@gmail.com. We aim to reply within 30 days, which is the deadline the GDPR and India's DPDP Act set for data requests.
Account details. Your name, email address, and agency name. If you sign in with Google we receive your name, email address, and profile picture URL from Google — nothing else, and we never receive your Google password.
What you put into the product. Events, tasks, decisions, risks, vendor records, and the text of any message or document you add. If you drop a file into Memory, the file is read in your browser and never uploaded anywhere; what gets stored is the extracted text (up to the first 20,000 characters) and the filename.
Sign-in records. The time of each sign-in, so you can see who has been in your workspace.
Anti-abuse data. When an account is created we store a one-way hash of the IP address, to stop one network creating hundreds of accounts. The address itself is not kept and the hash cannot be reversed back into it.
Brain runs on a small number of services, each doing one job:
Each has its own privacy policy. We do not send your data anywhere else.
Brain sets no cookies and runs no tracking or analytics of any kind. There is no Google Analytics, no advertising pixel, no session recording, and no third-party embed on this site.
Two pieces of information are kept in your own browser, and never sent to us:
brain-theme), so the
app looks the way you left it.When you connect Google Drive, the temporary access token is held in
sessionStorage and disappears when you close the tab. It is never written
to our database.
Because none of this is used for advertising, profiling or analytics, there is no consent banner to click. Clearing your browser data removes all of it.
Every record carries the identifier of the workspace it belongs to, and the database itself refuses to return rows from a workspace you are not a member of. This is enforced in the database, not in the app, so it holds even if something in the interface has a bug.
Passwords are stored hashed by Supabase's authentication service. Nobody at Chandra Events can read your password.
Your data stays as long as your workspace exists. Ask us to delete it and we will remove the workspace and everything in it. Sign-up rate-limit hashes are discarded automatically after a short period.
You can ask for a copy of your data, ask us to correct it, or ask us to delete it, by writing to the address above. If you are in a jurisdiction with specific data protection rights — for example the GDPR in the EU or the DPDP Act in India — those rights apply and we will honour them.
Brain is a business tool and is not intended for anyone under 18.
If this policy changes in a way that affects you, we will change the date at the top of this page and tell account holders by email.