Privacy Policy

At Brutally.ai, we take your privacy seriously. This Privacy Policy explains what information we collect, how we use it, and the choices you have regarding your data. By using our platform, you consent to the practices described in this policy.

1. Information We Collect

1.1 Account Information

When you sign in through our authentication provider (Manus OAuth), we receive and store your display name and a unique user identifier. We do not collect passwords — authentication is handled entirely by the OAuth provider.

1.2 Content You Submit

When you use Brutally.ai, you may submit text prompts, business ideas, CVs, creative work descriptions, and images for evaluation. This content is processed by our AI systems to generate your evaluation. Submitted content and the resulting evaluations are stored in your account so you can access your report history.

1.3 Payment Information

Payment processing is handled entirely by Stripe. We do not store your credit card numbers, CVV codes, or full billing details on our servers. We retain only a Stripe customer identifier and subscription identifier to manage your subscription status. All payment data is subject to Stripe's Privacy Policy.

1.4 Automatically Collected Data

We collect standard technical information when you visit our site, including browser type, device type, IP address, pages visited, and timestamps. This data is used for analytics, security monitoring, and improving the service. We use privacy-respecting analytics tools that do not track you across other websites.

2. How We Use Your Information

3. AI Processing & Data Handling

Your submitted content is sent to AI language models for processing. These models generate evaluations based on your input. We do not use your personal submissions to train or fine-tune AI models. Your content is processed in real time and the resulting evaluation is stored in your account for your reference.

Uploaded images are stored securely using cloud storage (Amazon S3) and are accessible only through your account. Images are processed by AI vision models to generate visual feedback and are not shared with third parties.

4. Data Sharing & Third Parties

We do not sell your personal data. We share information only with the following categories of service providers, solely to operate the platform:

• Authentication: Manus OAuth — for secure sign-in
• Payment processing: Stripe — for subscription billing
• AI processing: Language model providers — for generating evaluations
• Cloud infrastructure: Hosting and storage providers — for running the platform
• Analytics: Privacy-respecting analytics — for understanding usage patterns

We may also disclose information if required by law, to protect our rights, or to prevent harm.

5. Cookies & Local Storage

Brutally.ai uses cookies for essential functionality:

We do not use third-party advertising cookies or cross-site tracking cookies. You can disable cookies in your browser settings, but this may prevent sign-in functionality from working (see our Browser Settings page for details).

6. Data Retention

We retain your account data and evaluation history for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where retention is required by law or for legitimate business purposes (such as fraud prevention or financial record-keeping).

Uploaded images are retained for as long as the associated evaluation exists in your account. Anonymised, aggregated data may be retained indefinitely for analytics and service improvement.

7. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data
• Portability: Request your data in a structured, machine-readable format
• Objection: Object to certain types of data processing
• Restriction: Request restriction of processing in certain circumstances

To exercise any of these rights, please visit our Contact & Support page or email us at [email protected]. We will respond to your request within 30 days.

8. Data Security

We implement industry-standard security measures to protect your data, including encrypted connections (HTTPS/TLS), secure authentication tokens, and access controls on our infrastructure. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

9. International Data Transfers

Your data may be processed in countries other than your own. By using Brutally.ai, you consent to the transfer of your information to countries that may have different data protection laws. We ensure that appropriate safeguards are in place for any international data transfers.

10. Children's Privacy

Brutally.ai is not intended for use by individuals under the age of 16. We do not knowingly collect personal data from children. If we become aware that a child under 16 has provided us with personal data, we will take steps to delete that information promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated through the platform. The "Last updated" date at the top of this page indicates when the policy was most recently revised. Your continued use of the service after changes take effect constitutes acceptance of the updated policy.

12. Contact

If you have questions or concerns about this Privacy Policy or our data practices, please visit our Contact & Support page or email us at [email protected].