Privacy Policy

Last updated: March 2026

1. Important Information

1.1 General Terms

At Brim AI (“Brim,” “we,” “us,” or “our”), we prioritise our users’ privacy and security. Our infrastructure, applications, and tools are designed to support secure, private interactions. This Privacy Policy (“Policy”) outlines how we collect, store, use, and protect your personal data when you interact with our website, services, or applications.

Our Privacy Promise:

Your data is yours: We only collect the data necessary to operate and improve the Service.
We prioritise security: Your information is protected to the highest standards permitted by law.

If you have questions, contact us at hello@joinbrim.ai. This Policy defines how we use and safeguard the personal information we collect from you. By using our services, you consent to the practices described herein. If you or your organisation is a data controller under the EU’s General Data Protection Regulation (GDPR) or other applicable regulations, we offer additional agreements to ensure compliance, which may be requested separately.

1.2 Policy Revisions

Brim may update this Policy. Significant changes will be communicated through the Service or via email if applicable. Continued use of the Service after updates implies acceptance of the revised Policy.

2. Use of Our Services

2.1 Our Customer Use

Brim provides AI-powered agentic worker solutions for enhancing business processes, including sales, customer service, and more. While Brim AI hosts the platform, customers retain ownership of their data and are responsible for ensuring that it complies with their privacy policies. Brim processes customer data solely to deliver and improve the Service, as directed by customers.

2.2 Sensitive Information

Brim does not intentionally collect sensitive information such as financial account details, health information, or personal identifiers beyond what is required for Service provision.

3. Information We Collect

3.1 When You Visit Our Website

When you visit our website, we may collect information necessary for Service operation and improvement. This includes “Personal Information” (such as your name, email address, company name) and “Navigational Information” (such as IP address, browser type, visit duration).

3.2 Personal Information

Personal Information refers to information that identifies you, including contact information, transaction data, and publicly available information. This information is collected to help us operate and improve the Service.

3.3 Navigational Information

Navigational Information includes details about your device and browsing activity. This data helps us monitor and enhance our Service’s functionality.

3.4 Payment Information

We collect payment information through secure, PCI-compliant third-party providers for processing fees related to our Service.

3.5 Information About Children

Our Services are not intended for individuals under 13, and we do not knowingly collect data from children under 13. If such information is discovered, it will be deleted promptly.

4. Use of Information We Collect

4.1 Navigational Data, Cookies, and Web Beacons

Cookies are used to track user preferences and improve Service functionality. You may decline cookies, but this may limit the interactive features of the Service. Web beacons may also be used to understand usage patterns and improve functionality.

4.2 Use of Personal Information

Brim AI may use Personal Information to:

Improve and personalise the Service.
Communicate updates and marketing information (opt-out available).
Conduct analytics to enhance user experience.

4.3 Customer Testimonials

With user consent, we may post testimonials containing Personal Information.

4.4 Service Providers

We share information with third-party providers solely to deliver and enhance the Service, subject to confidentiality requirements.

4.5 Google User Data and Third-Party Integrations

What Google User Data We Collect

When you connect your Google account to Brim, we may access and process the following categories of Google user data based on the permissions you grant:

Gmail data: Email metadata (subject lines, sender and recipient addresses, timestamps), email body content (accessed only when composing, sending, or surfacing relevant context), labels, and thread information.
Google Calendar data: Event details including titles, descriptions, times, durations, locations, and participant information.
Google Drive data: File metadata and content from documents, spreadsheets, presentations, and other files stored in Google Drive (accessed read-only unless you explicitly instruct Brim to create or edit files on your behalf).
Google Docs, Sheets, and Slides content: Document content accessed to provide contextual insights, summaries, and workflow automation.
Google Contacts data: Contact names, email addresses, phone numbers, and organisational information (read-only access).

The specific data accessed depends on which integrations you enable and the permissions you grant.

How We Use Google User Data

We use Google user data solely to provide and improve Brim's user-facing functionality, including:

Generating meeting preparation materials and summaries from calendar and email data.
Surfacing relevant documents and context to support your workflows.
Creating, editing, and managing documents on your behalf when you instruct Brim to do so.
Automating business processes and workflows based on your instructions.
Providing AI-driven insights, recommendations, and task execution within the Brim platform.

We do not use Google user data for:

Advertising, including targeted, personalised, retargeted, or interest-based advertising.
Selling to or sharing with data brokers, information resellers, or any third party for their independent use.
Determining credit-worthiness or for lending purposes.
Training general-purpose AI or machine learning models outside of providing or improving your specific Brim experience.
Building user profiles for purposes unrelated to providing or improving the Brim service.
Any purpose other than providing or improving user-facing features within Brim.

Sharing and Transfer of Google User Data

Brim does not sell, rent, or trade Google user data to any third party.

We may share or transfer Google user data only in the following limited circumstances:

Service providers: We use trusted infrastructure and service providers strictly for the purpose of delivering Brim's functionality. These include cloud hosting providers (e.g., AWS) and AI model providers used to process and generate outputs on your behalf. All third-party processing is governed by data protection agreements and limited to what is necessary to provide or improve Brim's services.
Security purposes: Where necessary to investigate abuse or protect the security of our systems.
Legal compliance: Where required by applicable law, regulation, or legal process.
Corporate transactions: In connection with a merger, acquisition, or sale of assets, and only with your explicit prior consent.

We do not transfer Google user data to third parties for advertising, data brokerage, credit assessment, or any purpose other than providing or improving Brim's user-facing features.

Human Access to Google User Data

Brim does not allow its employees, agents, or contractors to read your Google user data unless:

You have provided affirmative agreement to view specific messages, files, or other data (for example, by instructing Brim to process a specific document or email).
It is necessary for security purposes, such as investigating a bug or potential abuse.
It is required to comply with applicable law.
The data has been aggregated and anonymised and is used for internal operations in accordance with applicable privacy and data protection laws.

Data Retention and Deletion of Google User Data

We retain Google user data only for as long as necessary to provide Brim's services to you.

Google user data may be cached temporarily to support active workflows and task execution. Cached data is purged when no longer needed for the active session or workflow.
Upon account termination, Google user data is securely deleted within 60 days unless we are legally required to retain it.
You may request deletion of your Google user data at any time by contacting us at hello@joinbrim.ai.
You may revoke Brim's access to your Google account at any time through your Google Account permissions settings at https://myaccount.google.com/permissions. Upon revocation, Brim will cease accessing your Google data and will delete stored Google user data within a reasonable timeframe.

Security of Google User Data

We implement appropriate technical and organisational measures to protect Google user data, including:

Encryption in transit using TLS for all data transmitted between your device, Brim's servers, and third-party service providers.
Encryption at rest for stored data.
Access controls and authentication mechanisms to restrict access to authorised personnel and systems.
Regular security reviews of our infrastructure and data handling practices.

Compliance with Google API Services User Data Policy

Brim's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

We limit our use of Google user data to providing or improving user-facing features that are prominent in Brim's user interface.
We do not transfer Google user data to third parties except as necessary to provide or improve user-facing features, for security purposes, to comply with applicable law, or as part of a corporate transaction with the user's explicit prior consent.
We do not allow humans to read Google user data except with the user's affirmative agreement, for security purposes, to comply with applicable law, or where data is aggregated and anonymised for internal operations.
We do not use Google user data for serving advertisements or for any purpose unrelated to providing or improving Brim's functionality.
We ensure that our employees, agents, contractors, and successors comply with these requirements.

5. Confidentiality and Security of Personal Information

We utilise a variety of technical and organisational measures to protect your data, including encryption and secure access controls. Account passwords and sensitive information are stored securely, and we recommend using a unique, complex password to further safeguard your account.

6. Social Media and External Websites

Our website may include social media widgets and links to third-party websites. Interactions with these features are subject to the third parties’ privacy policies, and Brim AI is not responsible for external content or practices.

7. Retention of Personal Information

We retain data for as long as necessary to fulfil the purposes outlined in this Policy, including legal compliance. Users may contact Brim AI to request deletion of their data within a specified timeframe.

8. International Transfer of Information

If you access our Services from outside the UK, data may be transferred internationally to comply with legal requirements. We ensure appropriate protections are in place for all international transfers.

9. Third-Party Applications

Brim AI may integrate with third-party applications to enhance functionality. In such cases, the third parties’ privacy policies apply. Users are encouraged to review these policies before use.

10. Disclosure of Information

We may disclose data if required by law or to protect the rights and safety of Brim AI, our users, or others.

11. Data Retention and Deletion

Upon account termination, user data will be securely deleted after a 60-day period unless legally required to retain it.

12. Anti-Spam Policy

Brim AI strictly prohibits the use of our Service for unsolicited commercial emails. Each email includes an “opt-out” mechanism, and any violations can result in Service suspension.

13. Unsubscribe from Communications

To unsubscribe from Brim AI’s marketing emails, click “unsubscribe” at the bottom of our emails or contact us at hello@joinbrim.ai. Transactional and account-related emails will continue as necessary for Service operation.

14. Contact Us

For questions or concerns regarding this Privacy Policy, please contact us at hello@joinbrim.ai.