Privacy Policy
Last updated: April 14, 2026
1. Introduction
Junk Brain ("we," "us," or "our") operates the website at junkbrain.ai and the Junk Brain application (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.
By using Junk Brain, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Service.
2. Information We Collect
2.1 Account Information
When you create an account, we collect your name, email address, and authentication credentials through our authentication provider (Clerk). If you sign up via Google or another SSO provider, we receive your profile information from that provider.
2.2 User Content
Junk Brain stores the content you create within the Service, including notes, tasks, folders, knowledge graph connections, agent configurations, skills, and conversation histories with AI agents. This content is stored in your personal workspace database and is not shared with other users.
2.3 Integration Data
If you connect third-party services, we access data from those services as follows:
| Integration | Data Accessed | Purpose |
|---|---|---|
| Google Drive | Document titles and content from folders you authorize | Provide AI agents with context from your documents |
| Zoom | Meeting metadata and transcripts | Extract action items and decisions from meetings |
| Telegram | Messages sent to/from the Junk Brain bot | Deliver notifications and enable mobile capture |
You can disconnect any integration at any time from your Settings page. Upon disconnection, we stop accessing new data from that service. Previously imported data remains in your workspace unless you delete it.
2.4 Usage Data
We collect anonymized usage analytics through PostHog (hosted in the EU) to understand how the Service is used. This includes page views, feature usage events, and performance metrics. We do not track individual keystrokes or note content in analytics.
2.5 Technical Data
We automatically collect your IP address (for rate limiting and security), browser type, device information, and referring URL. This data is not linked to your account content.
3. How We Use Your Information
We use your information for the following purposes:
To provide the Service: Store and organize your notes, run AI agents on your content, execute skills, and deliver search results.
To process AI requests: When you interact with AI agents or use AI features (extraction, chat, editor commands), your relevant content is sent to third-party AI providers for processing. See Section 5 for details.
To improve the Service: Analyze anonymized usage patterns to fix bugs, improve performance, and prioritize features.
To communicate with you: Send transactional emails (account verification, password reset) and, if you opt in, product updates.
To enforce our terms: Detect abuse, enforce rate limits, and protect the security of the Service.
4. AI Processing and Your Data
This section is important because Junk Brain is an AI-powered product. Understanding how your data interacts with AI systems is critical.
4.1 What Gets Sent to AI Providers
When you use AI features, relevant portions of your content are sent to third-party AI model providers for processing. This includes:
Portions of your notes relevant to a search query or agent task (retrieved via semantic search, not your entire workspace).
Your conversation messages with AI agents.
Agent memory summaries relevant to the current conversation.
Task and folder metadata when agents perform workspace operations.
4.2 AI Providers We Use
| Provider | Purpose | Data Retention |
|---|---|---|
| Google (Gemini) | Primary AI model for agent chat, extraction, and analysis | Not used for training; API data retained per Google's API terms |
| Anthropic (Claude) | Alternative AI model for specific tasks | Not used for training; 30-day retention per Anthropic's API terms |
| OpenAI | Alternative AI model for specific tasks | Not used for training; 30-day retention per OpenAI's API terms |
4.3 What We Do NOT Do
We do not use your content to train AI models.
We do not share your content with other users.
We do not send your entire workspace to AI providers — only relevant excerpts retrieved by search.
We do not retain AI provider responses beyond what is stored in your conversation history.
5. MCP Server and API Access
Junk Brain provides a Model Context Protocol (MCP) server that allows external AI tools (such as Claude Desktop, Cursor, or other MCP-compatible clients) to access your workspace data through API keys you generate.
When you generate an API key and connect an external tool, that tool can read and write to your workspace within the permissions you grant. You are responsible for the security of your API keys. You can revoke any API key at any time from your Settings page.
6. Data Storage and Security
Your workspace data is stored in an isolated per-user database on our servers. We implement the following security measures:
Encryption in transit: All data is transmitted over HTTPS with TLS 1.2+.
Authentication: All API endpoints require authentication via Clerk or API key.
Rate limiting: API endpoints are rate-limited to prevent abuse.
Security headers: We enforce Content Security Policy, HSTS, X-Frame-Options, and other security headers.
Isolation: Each user's workspace database is separate from other users.
While we take reasonable measures to protect your data, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.
7. Third-Party Services
We use the following third-party services to operate Junk Brain:
| Service | Purpose | Data Shared |
|---|---|---|
| Clerk | Authentication and user management | Email, name, auth tokens |
| PostHog (EU) | Product analytics | Anonymized usage events |
| Google, Anthropic, OpenAI | AI model inference | Content excerpts for AI processing |
Each third-party service has its own privacy policy. We encourage you to review them.
8. Data Retention and Deletion
We retain your data for as long as your account is active. You can delete individual notes, tasks, folders, conversations, and agent configurations at any time within the Service.
To delete your entire account and all associated data, contact us at hello@junkbrain.ai. We will delete your account and all workspace data within 30 days of your request. Some data may persist in encrypted backups for up to 90 days after deletion.
9. Your Rights
Depending on your jurisdiction, you may have the following rights:
Access: Request a copy of the personal data we hold about you.
Correction: Request correction of inaccurate personal data.
Deletion: Request deletion of your personal data.
Portability: Request your data in a machine-readable format.
Objection: Object to processing of your personal data for certain purposes.
To exercise any of these rights, contact us at hello@junkbrain.ai. We will respond within 30 days.
10. Cookies
We use essential cookies for authentication (managed by Clerk) and analytics cookies (managed by PostHog). We do not use advertising or tracking cookies. Essential cookies are required for the Service to function and cannot be disabled.
11. Children's Privacy
Junk Brain is not intended for use by anyone under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the updated policy.
13. Contact Us
If you have questions about this Privacy Policy or our data practices, contact us at:
Email: hello@junkbrain.ai