Privacy Policy
How StorBrain collects, uses, protects, and shares your information.
Table of Contents
Overview
StorBrain ("we," "us," "our") operates a business intelligence platform for convenience stores, truck stops, gas stations, fleet operators, vendors, and related businesses. This Privacy Policy explains how we collect, use, disclose, and protect your information.
This policy applies to business owners, managers, employees, and all users of StorBrain.
Information We Collect
Account & Business Information
- Business name, legal name, and type
- Owner/operator name, email, and phone number
- Business address and tax ID (optional)
- Payment method information (processed by Stripe — we never store card numbers)
- Business portal type (retail, trucker, fleet, vendor, parking)
- POS system type and configuration
Employee Data (processed on your behalf)
- Employee names, contact info, and roles
- Clock-in/out times and GPS location at time of clock-in
- Hourly rates and payroll information
- Schedule, shift, and performance data
- Access credentials (encrypted)
Financial & Transaction Data
- Daily sales, revenue, and expense figures
- Department and product breakdowns
- Fuel sales, gallons, and margin data
- Lottery sales and settlement data
- Vendor invoices and payment records
- Tax data including sales tax collected
Customer Loyalty Data (processed on your behalf)
- Customer names and contact information
- Purchase history and points balances
- Redemption history and receipt scan data
Usage & Technical Data
- IP address and device information
- Browser type and operating system
- Pages visited and features used
- Session duration and interaction patterns
- Error logs and crash reports
How We Use Your Information
- Provide and operate the StorBrain platform
- Generate AI-powered business insights and recommendations
- Process subscription payments and send invoices
- Send service notifications, billing alerts, and support responses
- Detect fraud and prevent unauthorized access
- Analyze usage to improve features and fix bugs
- Comply with applicable laws and respond to legal requests
Data Retention
Active Accounts
We retain your data for as long as your account is active.
After Cancellation — 30-Day Window
- Day 0: Account suspended, data preserved
- Day 1: Email with data export instructions
- Day 15: Reminder — 15 days remaining
- Day 25: Final warning — 5 days remaining
- Day 30: All data permanently and irreversibly deleted
- Day 31: Deletion confirmation email
Billing Records
Billing records and invoices are retained for 7 years as required by federal tax law.
Data Security
- TLS 1.2+ encryption for all data in transit
- AES-256 encryption at rest via Neon PostgreSQL
- HTTP-only secure session cookies protecting against XSS
- Role-based access controls — employees see only what they need
- Complete company isolation — cross-account access is architecturally impossible
- Payment data handled exclusively by Stripe (PCI DSS Level 1 compliant)
- Account lockout after 5 failed login attempts
- Complete audit log of all platform activity
In the event of a data breach affecting your data, we will notify you within 72 hours.
Your Rights
- Access: Request a copy of your data
- Correction: Request correction of inaccurate data
- Deletion: Request deletion (subject to legal retention requirements)
- Portability: Receive your data in machine-readable format
- Restriction: Request we limit processing of your data
- Objection: Object to certain types of processing
- Withdrawal: Withdraw consent where processing is based on consent
To exercise these rights, contact legal@storbrain.com. We will respond within 30 days.
AI and Automated Processing
StorBrain uses Anthropic's Claude AI to provide business insights and recommendations. By using AI features, you acknowledge that your business data may be processed by AI systems, AI outputs may contain errors, and AI recommendations are informational only.
See our AI Disclaimer for complete details. You may disable AI features at any time.
Texas Privacy Rights
Under the Texas Privacy Protection Act (TPPA), Texas residents have the right to know, access, correct, and delete their personal data. We do not sell personal data. To exercise rights, contact legal@storbrain.com.
California Privacy Rights (CCPA)
California residents have additional rights under the CCPA. See our full CCPA Notice. We do not sell personal information.
Children's Privacy
StorBrain is a business platform for adults 18 and older. We do not knowingly collect information from minors. Contact legal@storbrain.com if you believe we have inadvertently collected minor's data.
Changes to This Policy
We may update this policy at any time. Material changes will be communicated via email, in-platform notification, and require re-acceptance. Continued use after changes constitutes acceptance.
📬 Contact Us
StorBrain
14730 Jasper Stream Ct, Houston, TX 77069
Legal: legal@storbrain.com
Support: support@storbrain.com
Billing: billing@storbrain.com