1. Information we collect
We may collect account information, business workspace data, configuration choices, customer and operational information you provide, technical and security logs, and information received from third-party services that you explicitly connect.
For Google integrations, the information available to 9D Brain depends on the specific permissions you authorize. This can include selected Gmail information, Calendar data, Drive information, Google Ads information and basic Google account identity information when required to provide the integration you selected.
2. How we use information
We use information to provide and secure the service, maintain your business workspace, operate requested integrations, synchronize authorized data, support user-facing automation and AI-assisted features, provide reporting and analytics, prevent abuse, troubleshoot problems and improve reliability.
We do not sell personal information or Google user data. We do not use Google Workspace API data for advertising, retargeting, credit decisions, or to train generalized artificial intelligence or machine-learning models.
3. Google API data and Limited Use
Google connections are initiated by the user. We request access only to permissions needed for the integration and features the user chooses to use. Users remain in control of whether a Google account is connected and may revoke access.
Google user data is used only to provide or improve user-facing features associated with the authorized business connection. Where an AI-assisted feature processes connected data, that processing is limited to delivering the user-requested feature and remains subject to these data-use restrictions.
4. Integration credentials and security
OAuth access and refresh credentials for supported integrations are stored in a dedicated secure credential store rather than as ordinary application data. Credential references are bound to the relevant business and connector so that one business cannot use another business's integration credentials.
We use administrative, technical and organizational safeguards designed to protect information against unauthorized access, alteration, disclosure or destruction.
5. How information may be shared
We may share information with infrastructure and service providers only when reasonably necessary to operate, secure or provide requested user-facing features. We may also disclose information where required by law, to protect rights and security, or with the user's direction or consent.
Connected providers such as Google independently process information under their own terms and privacy policies when you interact with their services.
6. Data retention and deletion
We retain information for as long as reasonably necessary to provide the service, maintain security and auditability, satisfy legitimate business requirements, and comply with applicable legal obligations.
Users can disconnect integrations to stop future access from that connection. You may also contact us to request deletion of account or service data, subject to legal, security, fraud-prevention, backup and contractual retention requirements.
7. Your choices
- Choose which supported third-party services to connect.
- Review permissions requested during provider authorization.
- Disconnect or revoke connected provider access.
- Request access, correction or deletion where applicable.
- Contact us with privacy or data-use questions.
8. Changes to this policy
We may update this policy as the service, integrations or legal requirements change. Material changes will be reflected by an updated effective date and, when appropriate, additional notice or consent before information is used for a materially different purpose.
9. Contact
Questions about this Privacy Policy or your data can be sent to hamadtheux@gmail.com.