Privacy Policy

Last updated: April 14, 2026

1. Overview

TBrain Management Hub ("we", "our", or "the Service") is an internal project management and analytics platform operated by TBrain for managing AI projects, quality-control workflows, and contributor operations. This policy explains what data we collect when you sign in and how we use it.

2. Information we collect

Account information from your sign-in provider (Google OAuth or email/password): email address, full name, and profile avatar image URL.
Project activity: project memberships, role assignments, submissions, comments, QC reviews, and task assignments you create or participate in.
Technical data: session cookies, IP address, browser user-agent, and timestamps of requests — used strictly for authentication and security auditing.

3. How we use your information

Authenticate you and maintain your session.
Display your name and avatar to other members of projects you belong to.
Enforce project membership and role-based permissions.
Record audit logs of project actions (submissions, approvals, reviews).
Operate, maintain, and improve the Service.

4. Google user data

When you sign in with Google, we request only the email and profile scopes. We use this data solely to create and maintain your account within the Service. We do not read your Gmail, Google Drive, Calendar, or any other Google service. Google user data is never sold, rented, or shared with third parties for advertising or marketing purposes.

5. Data storage and security

Account and project data are stored in Supabase (PostgreSQL) with row-level security and encrypted transport (TLS). File uploads are stored in Google Cloud Storage with signed-URL access. We follow industry-standard security practices to protect your data.

6. Data sharing

We do not sell your personal data. We share information only with:

Infrastructure providers that run the Service on our behalf (Supabase, Google Cloud).
Other members of projects you are invited to — they can see your name, avatar, role, and activity within that project.
Legal authorities when required by law, subpoena, or to protect the rights and safety of users or the Service.

7. Data retention

Account data is retained for as long as your account is active. Project data is retained according to each project's contractual obligations. Upon request or account deletion, we will remove your personal data within 30 days, except where retention is required for legal or audit purposes.

8. Your rights

You may request access to, correction of, or deletion of your personal data at any time by emailing admin@tbrain.ai. You can also revoke the Service's access to your Google account at myaccount.google.com/permissions.

9. Cookies

The Service uses strictly-necessary cookies to maintain your login session. We do not use advertising or tracking cookies.

10. Changes to this policy

We may update this policy from time to time. Material changes will be communicated via email or an in-app notice. The "Last updated" date above reflects the most recent revision.

11. Contact

Questions about this policy? Contact us at admin@tbrain.ai.