Privacy Policy

Effective Date: April 7, 2026 · Last Updated: April 7, 2026

This Privacy Policy explains how Simple Software LLC ("we," "us," or "our"), a Colorado limited liability company operating BrainBacked ("the Service"), collects, uses, and protects your information. By using the Service, you consent to the practices described in this policy.

1. Information We Collect

a. Account Information

When you create an account, we collect your email address and any profile information you choose to provide. Authentication is handled by Supabase.

b. Uploaded Content

When you use the Service, you upload images and video content (thumbnails, ad creatives, video hooks) for analysis. This content is stored in Supabase Storage and processed by our neural inference engine.

c. Usage Data

We automatically collect information about how you interact with the Service, including pages visited, features used, scan history, timestamps, browser type, device type, and IP address.

d. Payment Information

If you subscribe to a paid plan, payment processing is handled entirely by Stripe. We do not store your credit card number, bank account details, or other sensitive payment information on our servers. We receive only a transaction confirmation and the last four digits of your card from Stripe.

2. How We Use Your Information

We use the information we collect to:

• Provide the Service — processing your uploaded content and returning prediction scores.
• Manage your account, subscriptions, and billing.
• Communicate with you about your account, updates, and support requests.
• Improve the Service — using anonymized, aggregated usage patterns to enhance our models and user experience.
• Ensure security and prevent fraud or abuse.
• Comply with legal obligations.

We do not sell your personal information. We do not use your uploaded content for advertising.

3. Third-Party Services

We rely on the following third-party services to operate BrainBacked. Each has its own privacy policy governing its handling of your data:

• Supabase — Authentication and file storage. Your email and uploaded content are stored on Supabase infrastructure. Supabase Privacy Policy
• Stripe — Payment processing for paid subscriptions. Stripe handles all payment credentials. Stripe Privacy Policy
• Vercel — Web application hosting and delivery. Vercel Privacy Policy
• Modal — GPU inference infrastructure. Your uploaded content is transmitted to Modal for processing by our neural models and is not retained by Modal after processing completes. Modal Privacy Policy

4. Data Retention

We retain your account information for as long as your account is active. Uploaded content is retained in Supabase Storage to enable your scan history and comparison features. If you delete your account, we will delete your personal data and uploaded content within 30 days, except where retention is required by law.

Anonymized, aggregated data that cannot be linked to any individual may be retained indefinitely for research and product improvement purposes.

5. Cookies and Tracking

We use cookies and similar technologies for the following purposes:

• Essential cookies: Required for authentication and session management. These cannot be disabled.
• Analytics cookies: Help us understand how the Service is used so we can improve it. You may opt out of analytics cookies through your browser settings.

We do not use third-party advertising cookies or tracking pixels.

6. Data Security

We implement industry-standard security measures to protect your data, including encryption in transit (TLS) and at rest, secure authentication flows, and access controls. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate personal data.
• Deletion: Request deletion of your personal data and account.
• Portability: Request your data in a portable, machine-readable format.
• Opt-out: Opt out of certain data processing activities, including the sale of personal data (we do not sell personal data).

To exercise any of these rights, contact us at [email protected]. We will respond within 45 days.

8. California Consumer Privacy Act (CCPA)

If you are a California resident, you have additional rights under the CCPA:

• The right to know what personal information we collect, use, and disclose.
• The right to request deletion of your personal information.
• The right to opt out of the sale of personal information. We do not sell your personal information.
• The right to non-discrimination for exercising your privacy rights.

To submit a CCPA request, email us at [email protected]with the subject line "CCPA Request."

9. Colorado Privacy Act (CPA)

If you are a Colorado resident, you have rights under the Colorado Privacy Act, effective July 1, 2023. These include:

• The right to access your personal data.
• The right to correct inaccuracies in your personal data.
• The right to delete your personal data.
• The right to data portability.
• The right to opt out of targeted advertising, the sale of personal data, and profiling in furtherance of decisions that produce legal or similarly significant effects. We do not engage in any of these activities.

To exercise your CPA rights, contact us at [email protected]. If we decline your request, you may appeal by responding to our decision email. If the appeal is denied, you may contact the Colorado Attorney General.

10. Children's Privacy

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child under 18, we will delete it promptly. If you believe a child has provided us with personal information, please contact us at [email protected].

11. International Users

The Service is operated from the United States. If you access the Service from outside the United States, your information may be transferred to, stored in, and processed in the United States. By using the Service, you consent to this transfer.

12. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or by posting a notice on the Service at least 15 days before the changes take effect. Your continued use of the Service after the effective date constitutes acceptance of the updated policy.

13. Contact

If you have questions or concerns about this Privacy Policy, contact us at: [email protected]

Simple Software LLC
Colorado, United States