The small print

Privacy statement

Last updated 4 October 2026

Who we are

Your Business Today Ltd, a company registered in England and Wales under number 17329446 with its registered office at 8 Eastleigh Close, Sutton, England, SM2 6QY, is the data controller for the personal information handled by Your Brain Today. For anything in this statement, contact consulting@yourbrain.today.

The short version of our promise, stated once here and repeated wherever it matters: your knowledge powers your tools and nothing else. It is never sold, never pooled, never used to train anything for anyone else, and it leaves when you do.

What we collect

We hold these kinds of information:

• Account details — your email address, display name, which sign-in method you use (Google, or email and password), and the model you choose for answers.
• Knowledge base content — the documents you upload, the answers you give the interviewer, and the expertise, experience, process and human brains built from them. The human brain holds the names, roles and organisations of people you mention, and what you tell us about how they relate to one another.
• Chatbot records — each member’s email address and member id, the questions they ask, the answers given, the pages each answer drew on, which questions went unanswered, and how much of the pool each member has spent.
• Credit and purchase records — the packs you buy, the credits you spend, send and receive, and credits we grant. Card details go directly to Stripe; we never see or store them.
• Access records — shares you create, API tokens you mint, OAuth authorisations you grant, and the log of what happened in each knowledge base, including questions asked of it through the API or MCP server.
• Technical records — server logs with your IP address and browser details, kept briefly for security.

Why we use it, and the lawful basis

We use your information to run the service you asked for: signing you in, interviewing you and reading your documents, answering questions from your own records, running the chatbots you set up, keeping the question log, fulfilling credit purchases, delivering shares and connected-tool access, and sending service emails such as chatbot invitations and password resets. The lawful basis for this is performing our contract with you.

We rely on our legitimate interests to keep the service secure, to improve it, to reply when you write to us, and to keep the question log as evidence of what a chatbot was asked and what it answered. We rely on legal obligation to keep purchase records for tax and accounting law. Where we ask for consent — for anything beyond the above — we will say so at the time and you can withdraw it.

We do not use your information for advertising, we do not profile you, and we do not sell it to anyone.

AI processing

When the service generates something for you — an interview reply, a reading of a document, an answer from a brain, a chatbot answer — the content needed to do it is sent to Anthropic’s Claude API. That is your message or question and the relevant parts of the knowledge base, and for a chatbot it is the member’s question together with the relevant parts of the manager’s knowledge base. Anthropic processes it to produce the answer; it is not used to train models for anyone else.

Who processes it for us

A small number of providers process data on our behalf, as our sub-processors:

• Supabase — the database, authentication, and the storage where uploaded documents live.
• Anthropic — AI processing of the content sent to generate replies and answers.
• Stripe — payment processing for credit packs. Stripe receives your email address and the card details you type on its checkout page, and is the controller of the card data it holds.
• Resend — sending the service’s emails, such as chatbot invitations and password resets. Resend receives the recipient’s email address and the content of the email.
• Vercel — hosting of the application, which places its servers’ logs within reach of Vercel.

International transfers

Some of these providers process data outside the United Kingdom, principally in the United States. Where they do, the transfer is covered by the UK’s adequacy regulations or by the International Data Transfer Agreement or Addendum approved by the Information Commissioner, and by the provider’s own commitments to the same standard of protection.

Who else can see it

Only the people you choose. Sharing a knowledge base gives the named person read-only access to it. A chatbot manager sees the questions and answers of the members they invited, in the chatbot’s question log. Our staff can see account, credit and purchase records in order to run the service, and the content of a knowledge base only when you ask us to look at it. Beyond that, we disclose information only where the law requires it.

If you are a chatbot member

You may be reading this because someone else brought you here: a manager invited you to a chatbot. This section is for you.

We hold the email address the manager gave us, a member id, your display name if you set one, and every question you ask and answer you receive, with the pages the answer drew on. Your questions are sent to Anthropic to be answered, as described above.

Your questions and the answers are kept in the chatbot’s question log, stored against your member id. The manager who funds the chatbot can read and download that log, including the questions the chatbot could not answer, so that they can fill the gaps and show what was asked if a dispute arises. The log cannot be edited or trimmed inside the service, by you or by the manager. The manager is responsible for telling you this before inviting you; if they have not, ask them.

You have the same rights as any account holder, set out below. If you would rather not be a member, tell the manager and they can remove you — or write to consulting@yourbrain.today and we will.

How long we keep it

We keep your information while your account is active. When your account is deleted, your knowledge bases, chatbots and their question logs, tokens and authorisations are deleted with it. A chatbot’s question log is kept for as long as the chatbot exists: removing a member does not remove their entries, because the log is the manager’s record of what was asked, and the whole log goes when the manager deletes the chatbot. Records of purchases are kept for six years, as tax and accounting law requires, and no longer. Server logs are kept for no more than 30 days.

Your rights

Under UK data protection law you can ask us for a copy of your information, ask us to correct it, delete it, or restrict how we use it, object to our use of it, and receive it in a portable form — the expertise brain export exists precisely for that. Contact us and we will respond within a month. A chatbot member asking about their entries in a question log is answered by us, not by the manager, and where the manager’s legitimate interest in keeping the record outweighs a request to erase it we will say so and why.

If you are unhappy with how we handle your information you can complain to the Information Commissioner’s Office at ico.org.uk, although we would rather you told us first so that we can put it right.

Cookies

We use only the session cookies needed to keep you signed in and the service working. They are strictly necessary, so no banner asks for your consent, and there are no advertising or third-party tracking cookies.

Changes to this statement

If how we handle your information changes, this statement will change with it, and the date at the top will tell you when. Material changes will be flagged on the site or by email.