Privacy, plainly.

Who we are

The Brainer OÜ, Lahepea 9, 10617 Tallinn, Estonia. Registry code 14825632. Email domain@trythebrainer.com.

We are the data controller for this website, for the preview sites we build, and for our customer relationship with you. For the visitors of a website we host for a customer, the customer is the controller and we are the processor (see section 6).

1. This website (thebrainer.co)

Our web server keeps standard technical logs (IP address, page requested, browser type, time) for security and troubleshooting. They are kept for 30 days and then deleted. The site sets no cookies. Fonts are served from our own server.

If you send us your web address through the form, or in a message on Instagram or Facebook, we keep the address and your email to build the preview, send you the link and answer your questions. Legal basis: taking steps at your request before a contract (GDPR art. 6(1)(b)). We also send a couple of short follow-up emails about your designs; we tell you this when you give your email, and every follow-up has a link to stop them (PECR soft opt-in; GDPR art. 6(1)(f), our legitimate interest in following up your request).

Ads on Facebook and Instagram: if you reach our start page from one of our Meta ads and ask for your new website, our server tells Meta that a sign-up happened, so we can see which ad works. We send only the click code Meta added to the link, your IP address and your browser type; never your name, email or web address. There is no Meta pixel and no cookie on our pages. Legal basis: our legitimate interest in measuring our advertising.

2. Preview sites (yourname.trythebrainer.com)

A preview is a rebuilt copy of a website that is already public. To build it we fetch the pages, images and text that the site shows to any visitor. We do not log into anything, and we do not collect data from behind passwords.

A preview is private in practice: it is not listed by search engines (every page carries a no-index instruction) and the link is only sent to the people who run the original site. The preview is deleted automatically 30 days after it was built unless it is purchased, and earlier if you ask. You can ask for deletion in the preview chat itself, or by email.

What we record while a preview is open:

• Chat messages. What you type or say to the chat, and the answers, so the conversation can continue and so we can improve the service. Messages are processed by our AI provider, Anthropic, under a contract that forbids using them to train models. Voice input is turned into text by your own browser (for example by Apple or Google, depending on your device) before it reaches us.
• Usage events. Which panel was opened, whether the compare view was used, whether the buy page was reached. No cross-site tracking, no advertising identifiers. We use one small browser-storage flag to remember that you closed the chat, so it does not reopen on every page.
• Your email, if you give it in the chat or on the purchase page, so we can send you the link, the switch-over steps and your admin link.

Legal basis: our legitimate interest in showing a business what its website could be, and steps taken at your request before a contract. You can object at any time by asking for the preview to be removed.

3. How we found you

We build previews for businesses whose public website is slow, not built for phones or served without a security certificate. We identify them from publicly available web technology data and public business contact details (the website itself, its domain registration, public directories). We write to the business address, not to private individuals, and every email carries an unsubscribe link. If you are a sole trader and would rather not hear from us, one click or one reply is enough and we will not write again.

4. Customers

When you buy, we keep your admin email, your domain name, your invoices and the versions of your website. Payment is handled by Stripe; we never see or store your card number. Stripe acts as an independent controller for the payment itself.

We send service emails (switch-over steps, "you are live", renewal reminders, changes to these terms) to the admin email. These are part of the service and are not marketing.

Legal basis: performance of the contract, and our legal duty to keep accounting records (kept for seven years under Estonian accounting law).

5. Who helps us

We do not sell personal data and we do not share it with anyone else, unless the law requires it.

6. Visitors of the websites we host

When you visit a website we host for a customer, the customer decides what the site collects and is the data controller. On their behalf we keep server logs for 30 days, and we forward contact-form submissions to the customer's email. We keep a copy of form submissions for 30 days so nothing gets lost, then delete it. Hosted sites carry no tracking of ours. A data processing agreement forms part of our terms.

7. WhatsApp

You can message us on WhatsApp, for example to send us your web address or to talk to one of our assistants. When you do, we receive your message, any photos, files or voice notes, your WhatsApp profile name and your phone number (or the user ID WhatsApp gives us instead). We use them to answer you and to do what you asked, and we keep the conversation so it can continue. Voice notes are turned into text on our own servers. Replies may be written with the help of our AI provider, Anthropic, under a contract that forbids using them to train models. WhatsApp messages are delivered through Meta's WhatsApp Business Platform, and we store them on our servers at DigitalOcean (see section 5). We only write to you on WhatsApp after you have written to us, and we do not send marketing there. Ask us and we delete your conversation.

Businesses that connect their own WhatsApp to us. When a business connects its WhatsApp Business account to our service, that business is the controller of its customers' messages and we are its processor. We handle those messages only to provide the service the business asked for, such as receiving and storing them, answering them with the business's own assistant and handing conversations to its staff, under a data processing agreement we sign with that business. We do not sell them, share them with our other customers or use them for advertising. We keep them for as long as the business tells us to, and delete them when the service ends.

Legal basis: answering a request you made (GDPR art. 6(1)(b)). For the customers of a business that uses our service, the legal basis is that business's own.

8. Your rights

You can ask what data we hold about you, have it corrected or deleted, get a copy of it, restrict how we use it, and object to processing based on legitimate interest. Email domain@trythebrainer.com and we answer within a month. You can also complain to a supervisory authority: in Estonia the Data Protection Inspectorate (aki.ee), and if you are in the UK, the Information Commissioner's Office (ico.org.uk).

9. Changes

If we change this page in a way that matters, we tell customers by email. The date at the top always shows the current version.