Cobrain · Privacy & Data
Cobrain privacy & data
Read from Cobrain's own page on 2026-11-09. 20 statements quoted word for word; anything the page does not say is shown as unstated, never guessed. APIs.io verifies none of it.
Role
value: controller
The data controller is OverPress Media SRL , Via Latina 57, 00179 Rome (Italy), VAT IT13366841008.Read from Cobrain's own page on 2026-11-09
Data categories
category: identifying
Your email address and, if you enter it, your name.Read from Cobrain's own page on 2026-11-09
category: communication
We write to you for the sign-in link, to tell you about a share you received, and for service messagesRead from Cobrain's own page on 2026-11-09
category: behavioral
We also count how many times a day each account uses each AI tool: only the name of the tool, never what is searched or the content of notesRead from Cobrain's own page on 2026-11-09
category: device
Request logs (IP address, date and time, page or tool called, outcome, duration), kept for security and to understand failures.Read from Cobrain's own page on 2026-11-09
category: other
The notes, folders, tags, previous versions of every note and the shares you create.Read from Cobrain's own page on 2026-11-09
Purposes
purpose: Sign in and service messages
They are used to sign you in (with a link by email), to recognise you when a colleague shares a branch with you, and to send you service messages.Read from Cobrain's own page on 2026-11-09
purpose: Running and protecting the service
Legal basis: the legitimate interest in running and protecting the service.Read from Cobrain's own page on 2026-11-09
purpose: Service delivery of notes
They are the service itself.Read from Cobrain's own page on 2026-11-09
Retention
scope: Account and contentperiod: thirty days
If you delete it, notes, versions and shares are removed within thirty days, except for backups, which expire within a further thirty.Read from Cobrain's own page on 2026-11-09
scope: Deleted notes and attachmentsperiod: thirty days
they stay thirty days in the brain's trash, where only the brain's owner can see and restore them, then they are deleted, versions included.Read from Cobrain's own page on 2026-11-09
scope: Previous note versions on free planperiod: three days
on the free plan, up to two versions for three daysRead from Cobrain's own page on 2026-11-09
scope: Previous note versions on Pro and Teamperiod: seven days
on Pro and Team, up to thirty versions for seven days.Read from Cobrain's own page on 2026-11-09
Residency
region: Ireland (European Union)
The primary database, authentication and functions run on servers in Ireland (European Union).Read from Cobrain's own page on 2026-11-09
International transfers
The page states nothing on this.
Subprocessors
We use technical suppliers as processors. Primary data is in the European Union; CDN, logs, email, payments and support services may be processed in other countries under the safeguards in the relevant data-processing agreementsRead from Cobrain's own page on 2026-11-09
Data processing agreement
Deletion
route: Delete account from the dashboard or by request to hi@cobrain.space
ask us to delete your account.Read from Cobrain's own page on 2026-11-09
Data subject rights
right: access
At any time you can ask us to access your data, correct it, delete it, restrict its processing, object, or receive it in a readable format.Read from Cobrain's own page on 2026-11-09
right: export
The full export you do yourself from the dashboard, without asking: they are Markdown files in folders.Read from Cobrain's own page on 2026-11-09
right: complaint
You may also complain to the Italian data protection authority (Garante per la protezione dei dati personali) or to your own supervisory authority.Read from Cobrain's own page on 2026-11-09
Sale or sharing
Document
Download YAML · schema: API Commons Privacy & Data 0.1.0 · transcribed by claude-haiku-5-5, checked verbatim against the fetched page