GDPR Notice

For your StorBrain account data, StorBrain acts as data controller. For employee and customer data you enter on behalf of your business, you are the data controller and StorBrain is the processor. Contact: legal@storbrain.com

• Contract — Processing necessary to provide StorBrain services
• Legitimate Interest — Security monitoring and fraud prevention
• Legal Obligation — Compliance with applicable laws
• Consent — Marketing communications where applicable

• Access (Art. 15) — Obtain a copy of your personal data
• Rectification (Art. 16) — Correct inaccurate data
• Erasure (Art. 17) — Right to be forgotten
• Restriction (Art. 18) — Limit processing of your data
• Portability (Art. 20) — Receive data in machine-readable format
• Objection (Art. 21) — Object to processing based on legitimate interest
• Automated Decision-Making (Art. 22) — Right not to be subject to solely automated decisions

Exercise rights by emailing legal@storbrain.com. Response within 30 days. You may lodge complaints with your local data protection authority.

StorBrain operates in the United States. EEA-to-US data transfers are protected by Standard Contractual Clauses (SCCs) approved by the European Commission. Copies available upon request.

Personal data retained only as long as necessary. Account data deleted 30 days after cancellation. Billing records retained 7 years for legal compliance.