Who we are
Brainer is a product of The Luminaire Factor LLC ("Brainer", "we", "us"). We help solo founders and small teams give AI tools the context they need to write in their voice.
If you have questions about this policy, email hello@thelfactor.co.
What we collect
- Account information — your email, name, and password hash.
- Onboarding answers — your business goals, content needs, and AI tool preferences.
- Brand Brain content — anything you create or paste into Brainer (voice samples, offers, ideal client notes, stories, phrase banks, etc.).
- Uploaded files — PDFs, text files, and documents you upload for context extraction. Stored only as needed to process your request.
- Submitted URLs — website addresses you submit for scraping (processed via Firecrawl).
- Usage and behavior — pages visited, lessons completed, AI generations run, in-app ratings, feature interactions.
- Payment metadata — order ID, amount, and status from Stripe. We never see or store your card details.
- Attribution data — UTM parameters, referrer URL, and landing page captured at first visit.
- Cookies — essential cookies (authentication session) plus optional analytics cookies (only when you accept). See our Cookie Policy.
- Communications — emails you send us and your responses to in-app prompts.
How we use your data
- Deliver and operate the product (your account, your Brand Brain, your generated outputs).
- Send you transactional emails (account verification, password reset, purchase confirmation).
- Send you lifecycle product emails (welcome, setup nudges, milestone notes, occasional feedback requests). You can unsubscribe at any time.
- Improve our prompts, methodology, and product based on aggregate usage patterns.
- Provide customer support when you reach out.
- Detect, prevent, and respond to fraud or abuse.
AI processing disclosure
Brainer uses third-party AI models (Google Gemini and OpenAI GPT) accessed through the Lovable AI Gateway to generate outputs. When you use a generator or chat with an in-app agent, the relevant Brand Brain content and your messages are sent to these providers to produce a response.
Per the providers' API terms, content sent through their APIs is not used to train their models. We do not sell your content. Outputs you generate belong to you.
Sub-processors
We share data with these vendors strictly to operate the service:
- Supabase — database, authentication, file storage (US)
- Stripe — payment processing (US)
- Lovable AI Gateway — routes AI requests to Google Gemini and OpenAI
- Firecrawl — website scraping for brand inference
- Resend — transactional and lifecycle email delivery
- Systeme.io — CRM and email tagging
- ProveSource — social proof notifications (only loaded with your cookie consent)
Your rights
You have the right to:
- Access and export your Brand Brain data — available in-app via "Download All".
- Correct any inaccurate information — edit directly in your dashboard.
- Delete your account and all associated data — use "Delete My Account" in your user menu.
- Unsubscribe from lifecycle emails — use the unsubscribe link in any email.
- Withdraw cookie consent — clear your preferences via "Cookie Settings" in the footer.
EU/UK (GDPR): You also have the right to data portability, to object to processing, and to lodge a complaint with your local supervisory authority.
California (CCPA): You have the right to know what we collect, to request deletion, and to opt out of sale of personal information. We do not sell your personal information.
To exercise any right, email hello@thelfactor.co.
Data retention
We keep your account data for as long as your account is active. After you delete your account, your data is removed within 90 days. Encrypted backups are purged within 35 days of the deletion date.
International transfers
Brainer is operated from the United States. If you access the product from outside the US, your data will be transferred to and processed in the US. For transfers from the EU/UK, we rely on Standard Contractual Clauses (SCCs) with our sub-processors.
Security
We use industry-standard security practices including encryption in transit (TLS) and at rest, row-level security on the database, password hashing with bcrypt, and least-privilege access controls. No system is perfectly secure — if you suspect a vulnerability, email hello@thelfactor.co.
Children
Brainer is not intended for users under 16. We do not knowingly collect data from children. If you believe a child has created an account, contact us and we'll delete it.
Changes to this policy
If we make material changes, we'll notify you by email and update the "Last updated" date above. Continued use after changes means you accept the new policy.