Privacy Policy

How BrainySoftware OÜ collects, protects, and handles personal data in accordance with the European Union General Data Protection Regulation (GDPR).

Data Controller: BrainySoftware OÜ (Tallinn, Estonia)

Effective Date: September 12, 2026

01 // Overview

1. Introduction & Scope

BrainySoftware OÜ (“BrainySoftware”, “we”, “us”, or “our”) operates the website https://brainysoft.biz and provides AI-native enterprise software engineering, architecture advisory, and sprint delivery services.

We are committed to protecting your privacy and personal data in full compliance with the European Union General Data Protection Regulation (Regulation (EU) 2016/679 - “GDPR”) and the Estonian Personal Data Protection Act. This policy explains what information we collect, how we use it, and your legal rights.

02 // Controller

2. Data Controller Details

The data controller responsible for the processing of your personal data is:

Legal Entity: BrainySoftware OÜ

Jurisdiction: Republic of Estonia / European Union

Registered Address: Roseni tn 13, Tallinn 10111, Estonia

Contact Email: info@brainysoft.biz

03 // Information

3. Information We Collect

We adhere strictly to the data minimization principle. We collect only the data necessary to communicate with you, evaluate your software architecture inquiries, and deliver our services:

Contact & Inquiry Information: When you contact us via our website forms or direct email, we collect your name, corporate email address, company name, and the project requirements or architectural brief you provide.
Technical & Session Data: Standard server logs containing IP address, browser type, operating system, referring URL, and timestamps. This information is processed automatically for security and network diagnostic purposes.
No Invasive Tracking: We do not sell personal data, do not use invasive third-party ad networks, and do not track users across unrelated third-party websites.

04 // Legal Basis

4. Legal Bases for Processing

Under Article 6 of the GDPR, we process personal data under the following legal bases:

Pre-contractual & Contractual Steps

To review incoming engineering proposals, prepare architectural audit statements, provide sprint pricing, and perform software delivery agreements (GDPR Art. 6(1)(b)).

Legitimate Interests

To maintain website security, prevent fraud, troubleshoot infrastructure errors, and protect our systems against unauthorized access (GDPR Art. 6(1)(f)).

05 // Confidentiality

5. Client Confidentiality & Code IP Security

As an enterprise engineering studio, client intellectual property and commercial secrecy are foundational:

▸All customer source code, architecture schemas, database credentials, and business logic are treated under binding non-disclosure obligations (mutual NDA).
▸We never use proprietary client source code or sensitive business data to train public foundation models.
▸Client repositories and environments are hosted exclusively on client-controlled infrastructure (AWS, Azure, Supabase, Vercel, GitHub/GitLab).

06 // Your Rights

6. Your Rights Under GDPR

As a resident of the European Union or European Economic Area, you have specific statutory rights regarding your personal data:

Right of Access (Art. 15):Request confirmation and a copy of the personal data we hold about you.

Right to Rectification (Art. 16):Request correction of inaccurate or incomplete personal data.

Right to Erasure (Art. 17):Request the deletion of your personal data (“right to be forgotten”).

Right to Restriction & Objection (Art. 18, 21):Restrict or object to processing of your personal data under specific legal grounds.

To exercise any of these rights, contact us at info@brainysoft.biz. You also retain the right to lodge a formal complaint with your local supervisory authority or the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, aki.ee).

Questions Regarding Data Protection?

Our data protection officer and legal counsel review all inquiries within 48 hours.

Contact Privacy Team