← R2Brains.com

Privacy Policy

Last updated: July 19, 2026

This Privacy Policy explains what data R2Brains.com ("R2Brains," "we," "us") collects, why, and how it's handled. R2Brains is built to be a private Brain for you and your AI assistant — collecting as little as possible is part of the product, not just this policy.

1. What We Collect

DataWhy
Email addressAccount access (magic-link sign-in), service notices, billing receipts
NamePersonalizing your Brain and welcome materials (optional — taken from Stripe checkout if provided)
Billing informationProcessed entirely by Stripe. We never see or store your card number.
The files in your BrainThe service itself — this is your content, stored so your AI assistant can read and write it
Basic usage metadataStorage used, file counts, and an activity log of actions taken through your connector (used for your own storage meter and for abuse investigation)

2. What We Don't Do

3. Where Your Data Lives

R2Brains runs entirely on Cloudflare's infrastructure: your files are stored in Cloudflare R2 (object storage), your account record lives in Cloudflare D1 (a SQL database), and the service itself runs on Cloudflare Workers. We use the following subprocessors to operate the service:

ProviderPurpose
CloudflareStorage, database, and compute infrastructure for the entire service
StripePayment processing and subscription billing
ResendTransactional email (sign-in links, receipts, service notices)

4. Backups

We keep a nightly backup of your Brain for 8 days on a rolling basis, so accidental deletions can be recovered. Backups are stored in the same isolated, per-customer manner as your live Brain and are automatically pruned after 8 days.

5. Your Choices

6. Data Retention

We retain your account data and Brain contents for as long as your account is active. If you delete your account, your files and account record are removed from active storage; backups containing your data are purged within the standard 8-day backup window.

7. Security

Your Brain is isolated from every other customer's at the storage layer — access is derived only from a signed, verified connector token, never from anything a request itself claims. Connector tokens can be revoked instantly at any time. We follow reasonable administrative and technical measures to protect your data, but no system is perfectly secure, and we can't guarantee absolute security.

8. Children's Privacy

R2Brains is not directed to, and we do not knowingly collect data from, anyone under 16.

9. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated by email or through the Brain portal before they take effect.

10. Contact

Questions about this policy or your data? Email support@r2brains.com.