Privacy Policy

1. Data Controller

The data controller is Amica mea s.r.o., Company ID: 11638915, registered office: Zenklova 24/54, Libeň, 180 00 Praha 8, Czech Republic. Contact: hello@brainofbusiness.com

2. Data We Collect

• Account data: email address, name (optional)
• Conversation content: messages you send to BoB
• Usage analytics: pages visited, clicks, session duration
• Technical data: IP address, browser type, device language
• Payment data: processed exclusively by our payment provider – we never see card details

3. Purposes and Legal Basis

• Service delivery – performance of contract (Art. 6(1)(b) GDPR)
• Product improvement – legitimate interest (Art. 6(1)(f) GDPR)
• Analytics – consent (Art. 6(1)(a) GDPR)
• Marketing communications – consent or legitimate interest of existing customers

4. Recipients of Personal Data

• Anthropic, PBC (USA) – AI model provider (Claude) processing conversation content. Transfer covered by EU Standard Contractual Clauses. Privacy policy: anthropic.com/privacy
• Vercel Inc. (USA) – frontend hosting and analytics. Standard Contractual Clauses.
• Payment provider – transaction metadata only

We do not sell your data to third parties for marketing purposes.

5. International Transfers

Some processing takes place in the USA, covered by Standard Contractual Clauses under Art. 46 GDPR.

6. Retention Periods

• Conversation data: 12 months from last activity (or until account deletion)
• Analytics data: 26 months
• Billing records: 10 years (legal obligation)
• Newsletter email: until consent is withdrawn

7. Your Rights

Under GDPR you have the right to access, rectify, erase, port, restrict processing of, and object to processing of your personal data, as well as to withdraw consent at any time.

Send requests to hello@brainofbusiness.com. We respond within 30 days. You may also lodge a complaint with your local supervisory authority.

8. Cookies

• Essential: language preference (NEXT_LOCALE), login session. Cannot be declined.
• Analytics: Vercel Analytics (anonymised). Consent required.

9. Security

All data is transmitted over HTTPS/TLS. Servers are located in Germany (EU). Access is restricted to authorised personnel.

10. Changes

We will notify you of material changes by email or in-app notice at least 30 days in advance.

11. Contact

Amica mea s.r.o. · Zenklova 24/54, Libeň, 180 00 Praha 8 · hello@brainofbusiness.com

Supervisory authority

You have the right to lodge a complaint with the data protection supervisory authority.

Our lead supervisory authority (the EU one-stop-shop) is the Czech Data Protection Authority (Úřad pro ochranu osobních údajů – ÚOOÚ, uoou.gov.cz), as our company is established in the Czech Republic.

You may, however, always contact your local supervisory authority. A complete list is maintained by the European Data Protection Board (edpb.europa.eu).

Language versions

This document is made available in several languages for your convenience. In the event of any discrepancy between the versions, the Czech version shall prevail.