Privacy Policy

Last updated: 9 July 2026

Your brain is yours. Each tenant's memory graph runs in its own isolated database. We don't read, mine, sell, or train on the contents of your graph. We touch it only to run and back up the Service for you, or when you ask us to.

1. Who we are

Brainbox ("the Service") is operated by thexi.dev ("we", "us", "our"). For any privacy question, contact privacy@thexi.dev. TODO: formal legal entity + registered address

2. What we collect

Account identity — the email address you sign in with (handled by AWS Cognito) and your tenant identifier.
Your memory graph — the memories, entities, and relationships you (or agents you authorise) store. This is content you control and can edit or delete at any time.
Operational logs — timestamps, request metadata, and error logs needed to run and secure the Service. We minimise these and do not use advertising or analytics trackers.

3. How we use it

To authenticate you and route you to your own tenant.
To store, serve, and back up your graph.
To secure the Service and diagnose faults.
To send you service messages (onboarding, security notices, essential changes).

Where GDPR/UK-GDPR applies, our legal bases are performance of our contract with you and our legitimate interest in operating and securing the Service.

4. Where your data lives & who processes it

Brainbox runs on infrastructure operated by our sub-processors:

Provider	Role	Location
Amazon Web Services (AWS)	Compute, identity (Cognito), your isolated tenant database	United States (us-east-1)
Cloudflare	Edge & tunnel, encrypted backup storage (R2), email routing	Global edge

Your account email and graph are processed in the United States (AWS us-east-1); nightly backups are stored in Cloudflare R2.

5. Backups

Your brain is backed up nightly to per-tenant, encrypted object storage (Cloudflare R2) so you can't lose it. Backups are retained for TODO: retention window, e.g. 30 days and then rotated.

6. Your rights

Access & export — request a full export of your graph at any time.
Deletion — request "delete-my-brain"; we remove your live database and purge backups within TODO: e.g. 30 days.
Correction — you can edit or delete any memory yourself, directly.

Depending on where you live (e.g. EU/UK GDPR, Kenya Data Protection Act 2019), you may have further statutory rights. Contact us to exercise any of them.

7. Retention

We keep your graph for as long as your account is active. On deletion, live data is removed promptly and backups age out within the retention window above.

8. Security

Per-tenant database isolation, identity-verified access (Cognito RS256 id-tokens), no inbound ports on the node (admin only via AWS SSM), and per-tenant database secrets that never leave the host. No system is perfectly secure, but isolation is a first-class design goal.

9. Children

The Service is not directed at children under 16, and we don't knowingly collect their data.

10. Changes

We'll post changes here and update the date above. We'll notify you of material changes by email.

11. Contact

privacy@thexi.dev