Brainiac · Legal

Privacy Policy

Effective Date: October 21, 2026 · Most Recently Updated: October 21, 2026

On this page

Brainiac, Inc. (“Brainiac,” "Company," "we," "us," or "our") operates www.trybrainiac.com and the Brainiac expert platform (together, the "Services"). This Privacy Policy explains how we collect, use, disclose, and retain personal information about Experts and prospective Experts, including individuals whose professional information we collect from public sources (“Experts”); Clients who use the Services to find expertise (“Clients”); and visitors to our website (“you” or “your”).

1. Information We Collect

We collect information that identifies, relates to, or could reasonably be linked to you (“personal information”). Depending on the source and your use of the Services, this may include:

Professional and contact information: name, business or mailing address, email address, phone number, employer, job title, professional background, work history, areas of expertise, and professional credentials.
Profile and engagement information: profile changes, client inquiries, compliance certifications, payment history, calendar data and communications with Brainiac.
Website and device information: IP address, browser or device information, log data, cookies, and analytics information.
Call information: if you join our platform, the recordings and transcripts of calls, and other projects in which you participate.

We obtain personal information from you, Clients, vendors, AI-assisted research tools and publicly available sources. We do not collect sensitive personal information such as social security numbers, precise geolocation data, health data, or biometric data. Payment information, such as bank account details and taxpayer identification numbers, is collected and processed directly by our third-party payment provider and is not stored by Brainiac.

2. How We Use Your Information

Our primary service is connecting our Clients with qualified industry Experts on our platform.

We also use information to:

create, maintain, organize, and verify expert profiles;
identify and introduce Experts to Clients seeking relevant expertise;
facilitate client inquiries and engagements;
communicate with Experts and Clients;
conduct compliance screening;
record and transcribe calls and other projects;
create and maintain business and compliance records; and
improve, develop and maintain Brainiac’s services.

We do not sell, rent, or trade your personal information to third-party marketers or advertisers.

We may disclose or share your personal information:

To Clients: to help them identify and contact Experts, as well as utilize Brainiac recordings and transcripts.
To service providers: to trusted vendors, cloud providers and AI service providers who may assist us in operating our business.
For legal and safety reasons: when required by law, subpoena, governmental authority, regulator or court order, or to protect the rights, property, and safety of our employees, Clients, or others, or to enforce our contractual rights.
In a business transaction: in connection with a merger, acquisition, reorganization, or sale of all or part of our business operations.

4. Data Security and Protection

We implement reasonable administrative, technical, and physical security measures designed to safeguard your personal information against unauthorized access, loss, misuse, or alteration. These measures include encrypted database storage, access controls, and monitoring of our technical infrastructure.

5. Your Requests

You may contact us to request access to or correction of information Brainiac maintains about you, or to request that Brainiac deactivate your profile from the Services and stop providing your information to future Clients.

Email legal@trybrainiac.com with your request(s). Within 30 days of receipt of your email, we will take reasonable steps to verify and respond to your request(s).

After your profile is deactivated, we may retain certain information as needed to meet our legal and compliance obligations, including records of your client projects, compliance certifications, payment history, and limited information needed to prevent conflicts of interest in future matches.

6. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy, please contact us at legal@trybrainiac.com.

Google User Data

This section describes how we handle information we receive from Google. Where it differs from the rest of this Privacy Policy, this section applies.

When you sign in with Google, we receive your name, email address and profile picture. We use them to create your Brainiac account, to identify you in the Services (for example, as the sender of messages and invitations you send through Brainiac), and to contact you about your account and calls.

If you choose to connect your Google Calendar, we access:

Your free/busy times, to offer call times when you are available. People you schedule calls with through Brainiac may see when you are busy or free, but not what your events are. We keep a temporary copy of your busy times to speed up scheduling and delete it within about a day. We also keep the call times we offered, and whether each participant was free at those times, with the record of the scheduling request. We check your calendar for changes so that your busy times stay current.
Events on your calendar. When a call you organize is booked, we create an event for it with a Google Meet link and invite the call’s participants. If the call is rescheduled, we replace that event with a new one, and if the call is cancelled, we delete it. We keep the event’s ID and Meet link with the call so that participants can join it and, if the call is recorded, so that our recording provider can join it. We also show your existing events on your Brainiac calendar page, reading them from Google when you view the page. We do not store the titles, descriptions, locations or attendees of your events.

We use Google user data only to provide these features. We do not sell it, use it for advertising, or use it to train AI models. We share it only with the people you work with through Brainiac, as described above, with the service providers that help us run these features, or when the law requires. You can disconnect your calendar at any time on the Brainiac calendar page, or remove Brainiac’s access at https://myaccount.google.com/permissions.

We protect Google user data in these ways. We encrypt the access and refresh tokens that let us use your Google Calendar with AES-256-GCM before we store them. The encryption key is kept in our hosting provider’s configuration, not in our database, and we decrypt the tokens only on our servers, when we call Google for you. Data travels between your browser, our servers, our database and Google over encrypted (TLS) connections, and our database provider encrypts the data it stores, including its backups. Our internal staff tools are open only to accounts we have given a staff role, and none of them shows your calendar credentials or your events. To resolve a support request, a Brainiac administrator with full access can view the Services as you, including your Brainiac calendar page; each such session needs a written reason and a ticket reference, is recorded in an audit log, and ends after 15 minutes.

We delete the temporary copy of your busy times within about a day, as described above. We keep the event ID and Meet link of each call with the record of that call; we do not delete them on a schedule, so they stay while your account is open and, after your account is deleted, until you ask us to delete them. We delete the access and refresh tokens we store for your Google Calendar when you disconnect it, when your account is deleted, and when Google stops accepting them, for example after you remove Brainiac’s access in your Google Account (in that case, the next time we try to renew our access). To ask us to delete your account or any of this data, email hello@trybrainiac.com. Deleted data can remain for a limited period in the encrypted backups and change history that our database provider keeps for recovery, after which it is removed.