Privacy Policy
Last updated: 9 November 2026
This policy explains how GoCerebro, Inc. ("Cerebro", "we", "us") collects and uses personal data when you visit gocerebro.ai, join the Cerebro beta, use Cerebro Lite, contact us or use the investor area.
It covers the website and the beta waitlist. Cerebro Pro and Feli by Cerebro will each have their own privacy notice, which we will show you before you start using that product. The Feli notice will explain how we handle teens' data and parental consent.
1. Who we are
The controller of your data is GoCerebro, Inc., a Delaware corporation with its registered office at Legalinc Corporate Services Inc., 131 Continental Dr, Suite 305, Newark, DE 19713, USA.
For any privacy question or request, email privacy@gocerebro.ai or use the form on our Contact page.
2. What we collect
| Category | What it includes | Where it comes from |
|---|---|---|
| Account | Email address, name, sign-in method (password, Google, Microsoft or email link), account ID, sign-up and last sign-in dates | You, or Google or Microsoft if you sign in with them |
| Cerebro Lite checks | The passages, links and page text you choose to check, the statements found, the web passages found as sources, the results, your notes, the model used, usage counts and the time of each check. See section 3a | You, and the web pages the check reads |
| Profile | Who you are (professional, parent, teacher or school, other), organisation and job title (optional), country, preferred language, what you would like to check, optional note | You |
| Your choices | Whether you agreed to beta emails and to news, and when you gave or withdrew consent | You |
| Referrals | Your referral code, who invited you (if you joined through a link) and how many people joined with your link | You and the people you invite |
| Website chat | The questions you type in the chat assistant and its answers. If you choose "Email the team", also your email address, optional name and note, and the page you were on | You |
| Messages | What you send through our forms: name, email, company, job title, team size, organisation type, media outlet, deadline, product, message and the page you sent it from | You |
| Investor area | Name, email, firm, role, LinkedIn URL, message, our decision on your request and when you visit the investor area | You |
| Technical data | IP address, browser type, pages requested and times, in server logs and to protect our forms from spam | Your browser |
When you sign in with Google or Microsoft, we receive your name, email address and profile picture. We do not store the picture, and we get no access to your emails, files or contacts.
The interactive demos run in your browser with sample content. Nothing you do in the demos is sent to us.
We do not collect payment details or ID documents. Please do not include sensitive information (such as health data) in your messages.
3. Why we use your data and our legal basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Create and run your account, manage your beta access, show your dashboard and your referral count | Performance of our agreement with you (art. 6(1)(b)) |
| Send you emails about your beta access and important changes to the service | Performance of our agreement with you |
| Send you Cerebro news and product updates | Your consent (art. 6(1)(a)); you can withdraw it at any time |
| Answer your questions about Cerebro in the website chat, and pass the conversation to our team when you choose "Email the team" | Our legitimate interest in helping visitors (art. 6(1)(f)) |
| Reply to your messages, including demo, partnership and press requests | Our legitimate interest in answering you (art. 6(1)(f)), or steps you asked for before a contract |
| Review investor access requests and run the investor area | Our legitimate interest in managing investor relations |
| Measure interest in the beta in aggregate (for example sign-ups by country or profile type) and share these totals, never names, with investors | Our legitimate interest in developing and financing the company |
| Keep the website secure and prevent spam and abuse | Our legitimate interest in security |
| Meet legal obligations and defend legal claims | Legal obligation (art. 6(1)(c)) or legitimate interest |
We do not make decisions about you with legal or similarly significant effects based only on automated processing.
3a. When you use Cerebro Lite
- What we use it for: to run the check you ask for and keep your history (performance of our agreement with you), and to count checks in aggregate to set fair limits and plan capacity (our legitimate interest).
- Other people in what you check: an article or a post can name people. We process that text only to produce your result. We do not build profiles of the people mentioned.
- Who processes it: Cerebro Cloud, our own service running our own AI models, checks the statements. Supabase (EU, Ireland) stores your history. We test new versions of Cerebro internally with Anthropic's Claude models, using test texts only: your checks are not sent to Anthropic.
- Improving Cerebro: we use your checks (the text you check, the sources found, the results and your corrections) to test and train Cerebro's own models, including the models behind Cerebro Pro and Feli by Cerebro. You agree to this in the terms of service (section 6) when you accept them. Our legal basis is our legitimate interest in making Cerebro's checks more accurate (art. 6(1)(f)). Before a check goes into our training data we remove your account details and filter out email addresses, phone numbers and similar contact details. We never sell your checks and never give them to other companies to train their models.
- Saying no: you can turn off "Use my checks to improve Cerebro" in your account settings at any time, or write to privacy@gocerebro.ai. From then on, your new checks are not used. Checks already used stay in our training data without your account details, and a model already trained cannot unlearn them.
- How long: your history stays until you delete a check or close your account. During the beta, checks older than 90 days are deleted.
- On your device: the browser extension also keeps your recent checks in your browser's storage, on your computer only. Removing the extension deletes them.
4. Who we share your data with
We do not sell your data and we do not use it for advertising.
We share it only with service providers that act on our instructions:
| Provider | Role | Location |
|---|---|---|
| Supabase | Database and sign-in | EU (Ireland) |
| Google Cloud (Cloud Run) | Website hosting. Its servers record visitors' IP addresses for security | Netherlands (europe-west4) |
| Anthropic | Generating the website chat assistant's answers | United States |
| Resend | Sending emails (sign-in links, notifications, replies, and chat conversations you send to our team) | EU (Ireland). Resend, Inc. is a United States company |
Other cases:
- Google and Microsoft, when you choose them to sign in. They act under their own privacy policies.
- Authorities, when the law requires it.
- A buyer or successor, if GoCerebro is part of a merger or acquisition. We will tell you before your data falls under a different policy.
5. Transfers outside the EU
Your account and profile data are stored in the EU. Some of our providers are based in, or may access data from, the United States. For those transfers we rely on the EU–U.S. Data Privacy Framework where the provider is certified, or otherwise on the European Commission's Standard Contractual Clauses. You can ask us for a copy of these safeguards.
6. How long we keep your data
| Data | How long |
|---|---|
| Account and profile | As long as you keep your account. If you are not an active beta user and have not signed in for 24 months, we will tell you and then delete it. |
| Proof of your consent to news emails | Up to 3 years after you withdraw it |
| Website chat conversations | We do not store them. Anthropic processes them to answer and, under its commercial terms, may keep them for up to 30 days for safety and abuse monitoring; it does not use them to train its models. |
| Cerebro Lite checks | See section 3a |
| Checks in our training data | Without your account details, as long as the models trained on them are in use, and at most 5 years |
| Messages sent through our forms, and chat conversations you send to our team | 24 months after our last exchange |
| Investor access requests | Declined: 12 months. Approved: while access lasts, plus 24 months. |
| Server logs and security data | At most 12 months |
| Backups | Deleted data can stay in encrypted backups for up to [30] days before being overwritten |
7. Your rights
You can:
- access your data and get a copy of it;
- correct it;
- delete it;
- receive it in a portable format;
- object to processing based on our legitimate interests;
- ask us to restrict processing;
- withdraw your consent at any time, without affecting what we did before;
- give instructions about what happens to your data after your death (a right under French law).
Most of this is self-service in your dashboard: Download my data, Delete my account and your email preferences. For anything else, email privacy@gocerebro.ai. We reply within one month and may ask you to confirm your identity.
You can also complain to the CNIL (cnil.fr), the French data protection authority, or to the authority in your country.
8. Cookies and similar technologies
We only use what is needed to make the website work or to remember a choice you made. These are strictly necessary, so they do not require your consent. Our cookie policy gives the details:
| Name | Type | What it does | How long |
|---|---|---|---|
locale |
Cookie | Remembers the language you chose | 1 year |
sb-[project-id]-auth-token (may be split into .0, .1, …) |
Cookie | Keeps you signed in, if you have an account | Until you sign out, at most 400 days |
sb-[project-id]-auth-token-code-verifier |
Cookie | Secures the sign-in step | Removed once you are signed in |
theme |
Browser storage | Remembers whether you chose light or dark mode | Until you clear it |
We use no analytics, advertising or tracking cookies, so we do not show a cookie banner. The intro video on our homepage loads from YouTube's privacy enhanced mode only when you press play, and YouTube may then store information in your browser under its own policy. If that changes, we will ask for your consent first, let you refuse as easily as you accept, and update this policy.
You can delete or block cookies and browser storage in your browser settings. If you do, you may be signed out and your language and theme choices will be forgotten.
9. Security
All traffic is encrypted (HTTPS). Access to the database is limited by row-level rules, only authorised team members can reach your data, and our providers are bound by security commitments. No system is perfectly secure. If a breach puts your data at risk, we will tell you and the CNIL as the law requires.
10. Age
Accounts on this website are for people aged 18 and over. Teen accounts for Feli by Cerebro will only be created through the Feli app, with parental consent and under its own privacy notice. If you think a minor has created an account here, contact us and we will delete it.
11. Changes to this policy
When we update this policy, we change the date at the top. If a change is significant, we will tell you by email or in your dashboard before it applies.