Privacy Policy
The short version. Today this site does one thing with your data: it takes an email address so we can tell you when BillionBrain opens. We do not set cookies. We do not run analytics. We do not sell anything about you to anyone. Leaving the list takes one click and happens the moment you click. The longer version below says exactly what is stored and who touches it, because you should not have to take our word for it.
Who we are
BillionBrain is built by EncureIT Systems Private Limited, a company registered in India.
Office No 1, 2nd Floor, Raghunath Building, Manoj Society, Market Yard, Pune - 411037, Maharashtra, India
Email: hello@billionbrain.ai
For this website, EncureIT Systems Private Limited is the data controller. That is the legal term for the party that decides what gets collected and why, and it means we are the ones answerable for it. One person reads hello@billionbrain.ai and it is the address for everything on this page.
What we collect, and why
BillionBrain the product is not open yet. This site is one page with one form on it. So the list below is short, and it is the whole list.
What you give us
Your email address. That is the only thing the form asks for, and the only thing you type.
We do not ask for and do not store your name, your phone number, your business name, your postal address, your job title or your card details. There is nowhere on this site to enter them.
What we record at the same moment
When you tap the button, we store these alongside your email address:
- The consent wording you agreed to, kept as a version number. The sentence above the button is stored as a version so that months later we can show you the exact words you saw, not a rewritten version of them.
- The date and time you joined. Taken from our server's clock, never from your device.
- Where you joined from. Today there is only one place, this one-page site.
- Whether the bot check ran. If the bot check is switched on, we record that it passed. If it is switched off, we record that honestly rather than pretending it ran.
- A private removal link, a long random value unique to your row. It is what lets you leave the list without signing in.
- Whether you are on the list or have left it, and if you have left, when.
- The state of your confirmation email: whether it is waiting, sent, skipped or failed, when it was sent, and if it failed, a short technical note about why. That note never contains your email address.
That is the entire record. There is no column for your IP address, your browser, your device, the page you arrived from, or anything you looked at.
What happens automatically, and is not kept
- Your IP address is used to slow down abuse. The form allows five submissions from one connection every ten minutes. Your IP address is held in the server's memory to count that, and nothing else. It is never written to our database and never written to our logs.
- When the bot check is switched on, your IP address is sent to Cloudflare so it can judge whether a person or a script filled the form. We do not keep a copy.
- Cloudflare and Railway see your request before we do. Cloudflare runs our domain and the network in front of the site. Railway runs our servers. Both keep ordinary technical records of web requests, in the way every web host does. Those records are theirs and are governed by their own privacy terms, which we have linked in the next section.
Why we are allowed to hold it
Different pieces rest on different grounds. Named plainly:
| What | Why we may hold it |
|---|---|
| Your email address, and the record of what you agreed to | Your consent. You gave it when you tapped the button, and you can take it back at any time. |
| The consent version and timestamp | Our legitimate interest in being able to prove, later, exactly what you agreed to and when. A company that relies on consent has to be able to show it. |
| The record that you left the list | Our legitimate interest in never emailing you again by mistake. This is the only reason anything survives your removal. |
| Your IP address, in memory, for rate limiting and the bot check | Our legitimate interest in keeping the form working and stopping automated abuse. |
Who else sees it
Three companies handle your data on our behalf. We name them because a list you cannot check is not a disclosure.
- Railway runs our servers and our database. Your record is stored there.
- Resend sends our email. Your address is passed to Resend at the moment we send you a message, so that it can be delivered.
- Cloudflare runs the domain, provides the network in front of this site, and provides the bot check on the form. It handles your request and, when the bot check is on, your IP address.
Inside our own company, the list is read by the small number of people who need it, and there is no dashboard. To read the list, someone runs a protected export. The same person actions any deletion request by hand. There is no automated profiling of anyone on the list, and no decision is made about you by a machine.
Nobody else. We do not sell your details. We do not rent, trade or barter them. We do not pass them to advertisers, data brokers, affiliate networks or anyone else's mailing list. There is no fourth party.
We would hand over information if the law genuinely required it, for example a valid court order. If that ever happened and we were allowed to tell you, we would.
Where it is stored, and the border it crosses
Our servers and our database run in the United States. Our team works from Pune, India, and reads the list from there.
So joining the waitlist means your email address travels to the United States and is looked at from India. If you are in the United Kingdom or the European Economic Area, both of those are outside it. We rely on the consent you give when you join for that transfer. If you would rather your address did not leave, do not join the list. Email us at hello@billionbrain.ai instead and we will talk to you directly.
How long we keep it
- While you are on the list, we keep your record.
- When you leave, we keep one line recording that you left. That line is not a mailing list entry. It exists so nothing reaches you again, which is the only way a removal can actually be honoured. Nothing else is done with it.
- If you want the record gone completely, ask, and we delete the row itself. A person does that, on a written request, by hand. Write to hello@billionbrain.ai.
- If the waitlist is retired without BillionBrain opening, we delete the whole list.
If you ask us to delete your record, it goes from our live database straight away.
Leaving the list
Every email we send carries a removal link. Open it and you are off the list in that same moment.
No sign-in. No confirmation step. No second click. No queue. We are not going to tell you your request will be processed within ten business days, because the law allowing that is a ceiling, not a target, and we do not use it.
You can also just email hello@billionbrain.ai and ask.
Your rights, and the one address that uses them
Wherever you live, you can ask us to:
- tell you what we hold about you
- give you a copy of it
- correct it if it is wrong
- delete it
- stop using it
If you are in the UK or the European Economic Area, those are your rights under the GDPR. You can also withdraw your consent at any time, which does not affect anything we did before you withdrew it, and you can complain to your national data protection authority. We would rather you told us first, but it is your right either way.
If you are in California, those are your rights under the CCPA as amended. We do not sell or share personal information, so there is nothing for you to opt out of. We will never treat you differently, or give you a worse deal, for exercising a right.
One address does all of it: hello@billionbrain.ai. A person reads it. We will reply within 30 days, and in practice we expect to answer within a few working days. Removing yourself does not need us at all, and does not wait for us: the link in your email is instant.
What we do not do
This section exists because most of it is unusual, and because a promise you can check is worth more than one you cannot.
- We set no cookies of our own. There is no cookie banner on this site because there is nothing to consent to.
- We run no analytics. We do not know how many people visited, where they came from, what they scrolled past or how long they stayed. We have not installed Google Analytics or anything like it.
- We use no tracking pixels, no advertising tags, no session recording, no heatmaps and no fingerprinting.
- Our emails carry no tracking pixel and no click tracking. We do not know whether you opened one or clicked anything in it.
- We do not sell, rent or share your details with anyone for their own purposes.
- We do not build a profile of you and we do not enrich your address with data bought from anywhere else.
- We will only ever email you about BillionBrain.
- The page loads almost nothing from anyone else. The only third-party code this site can load is Cloudflare's bot check on the form, and only when that check is switched on. With it off, your browser talks to nobody but us.
One honest footnote, because it is the sort of thing a policy usually hides: Cloudflare's network may set a cookie of its own to tell a person from a bot. We do not read it, we do not receive it, and we do not use it to follow you anywhere.
How we protect it
In plain terms, and only what is actually true:
- Traffic between your browser and this site is encrypted.
- The database is not reachable from the public internet at all.
- The website connects to the database with a restricted account that cannot delete records.
- The database itself, not just our code, enforces which records the application is allowed to see. An automated test proves that on every single code change, and a failure stops the change from shipping.
- Our logs are deliberately built never to contain your email address or your removal link.
- Our passwords and keys are not stored in our code.
No system is perfectly secure, and we are not going to tell you ours is. We hold no security certification and we are not claiming one. We are a small team building carefully, and that is the honest description.
If something does go wrong and your data is affected, we will notify the relevant authority within 72 hours of finding out, and we will tell you too.
Children
BillionBrain is a tool for people who run businesses. This site is not aimed at children and we do not knowingly collect anything from anyone under 16. If you believe a child's email address is on our list, write to hello@billionbrain.ai and we will delete it.
Changes to this policy
This page describes a site that today does one thing. BillionBrain is being built, so this page will change.
Every version carries a version number and the date it took effect, both shown at the bottom of this page. If a change matters to you, meaning we start collecting something new, or a new company starts handling your data, we will post it here before it takes effect, and we will write to you at the address you gave us where the law requires us to. We will not quietly rewrite this page and leave the old date on it.
Contact
EncureIT Systems Private Limited
Office No 1, 2nd Floor, Raghunath Building, Manoj Society, Market Yard, Pune - 411037, Maharashtra, India
Version 1.0. In effect since 17 August 2026.