Skip to content
ContextBrain

Privacy policy

Last updated 8 November 2026

Who we are

ContextBrain is run by Adam Birds trading as Context Brain, 6 Martha Close, Salford, M5 3QN, UK. We are the controller of the personal data described here. Questions, requests and complaints: [email protected].

What we collect, and why

  • Your account: name, email addresses, a hash of your password, passkeys and two-factor settings, and the Google, Microsoft or GitHub account you sign in with, if you choose to. We need these to run your account under our contract with you.
  • Organisations: names, members and their roles, and invitations you send, which we need to provide the service under our contract with you.
  • Billing: your plan and its status, country, business name and, in the EU, VAT number. Card details go straight to Stripe; we never see or store them. Tax law requires us to keep billing records for six years.
  • Your brains: the content of the Git repositories you connect, a working copy and search index of them on our servers, and the deploy keys or access tokens you give us, which are encrypted. We use these only to provide the service under our contract with you. Our staff tools don't show brain content.
  • Security and abuse prevention: IP addresses, sign-in sessions and an audit log of account, organisation and billing actions. To give each person and each card one free trial, we keep one-way hashes of account IDs, email addresses and the card identifier Stripe gives us. We do this in our legitimate interest in keeping the service and its users safe and preventing trial abuse.
  • Analytics: on the home, pricing, sign-up and sign-in pages and these policies, Google Analytics records page views and basic device and approximate location information. It never runs inside the app or for signed-in users. We do this in our legitimate interest in understanding how people find us. See turning analytics off.

Who we share it with

We don't sell personal data. These providers process it for us, under contracts that require them to protect it:

  • DigitalOcean: hosting. Our servers and databases are in London.
  • Stripe: payments, invoices and fraud checks.
  • Microsoft: Microsoft 365 sends our emails, and sign-in with Microsoft if you use it.
  • Google: Google Analytics on public pages, and sign-in with Google if you use it.
  • GitHub: sign-in with GitHub and the GitHub App, if you use them.
  • The European Commission's VIES service: we check EU VAT numbers with it.

Your Git host, whether GitHub, GitLab or another, is your own choice; we read and write the repositories you connect. We may also disclose data where the law requires it.

Some of these providers handle data in the United States or elsewhere outside the UK. Those transfers are covered by the UK–US data bridge or by the UK's International Data Transfer Agreement or Addendum.

How long we keep it

  • Your account and organisations: while they exist. Ask us at [email protected] to delete your account.
  • Brain working copies, indexes, uploads and usage history: while the brain is connected and the subscription is active. Removing a brain removes them. When a subscription ends, they are deleted 30 days later unless you subscribe again. Your own repositories are never deleted by us.
  • Billing records: six years after the end of the financial year they relate to.
  • Expired sign-in sessions: deleted a week after they expire.
  • Google Analytics data: 14 months.

Cookies and local storage

  • Strictly necessary: a session cookie, __Host-cb_session, and a security token cookie, __Host-cb_csrf, keep you signed in safely. We also remember your light or dark theme, and whether you've turned analytics off, in your browser's local storage.
  • Analytics: Google Analytics sets _ga and _ga_* cookies on our public pages.

Turning analytics off

You can stop Google Analytics on this browser at any time. It takes effect straight away.

You can also block it for every site with Google's opt-out browser add-on, or by blocking cookies in your browser.

Your rights

You can ask for a copy of your data, ask us to correct or delete it, ask us to restrict or stop using it, object to how we use it, and ask for it in a portable format. Email [email protected]; we reply within a month. If you're unhappy with our answer, you can complain to the Information Commissioner's Office at ico.org.uk.

Children

ContextBrain is a tool for professionals and isn't meant for anyone under 16.

Changes

We'll update this page when what we do changes, and email account holders about significant changes. See also our terms.