Braintrust AIR Privacy Policy

Last updated: February 11, 2026

1. Introduction

This Privacy Policy outlines how Braintrust AIR ("we," "our," or "us") collects, uses, discloses, and protects personal information when users ("you" or "your") access or use our AI-powered interview platform and related services (collectively, the "Service"). By using the Service, you consent to the practices described in this Privacy Policy.

2. Information We Collect

We collect the following categories of personal data ("Personal Information"):

Customer & User Data

  • Contact Information: Name, email address, and company name.
  • Account Credentials: Username and password for accessing the Service.
  • Professional Information: Job title and employer details.
  • Payment Information: Billing address and payment method details.
  • Usage Data: Information about how you and your candidates interact with the Service, such as IP addresses, browser types, access times, and pages viewed.

Candidate Data

  • Application, Interview & Assessment Data: Information about candidates you invite to use the Service, including their names, email addresses, interview responses, video recordings, and assessment results.

3. How We Use Your Information

We use the collected information for various purposes, including:

  • Providing and Improving the Service: To operate, maintain, and enhance the Service's functionality and user experience.
  • Authentication & Account Management: Manage user access, prevent unauthorized access, and enforce security protocols.
  • Facilitating Interviews: To enable candidate screening, evaluation, and customer-defined hiring processes.
  • Communication: To send administrative updates, security notifications, and provide customer support.
  • System Analytics & Performance Optimization: Monitor service uptime, detect anomalies, and enhance platform functionality.
  • Billing and Payments: To process transactions and manage subscriptions.
  • Legal Compliance: To comply with applicable laws, regulations, and legal processes.

4. Sharing Your Information

We do not sell or rent your Personal Information to third parties. We may share your information in the following circumstances:

  • Authorized Service Providers: With third-party vendors who perform services on our behalf, such as payment processing, cloud data storage, analytic tools, and other third-party vendors assisting with platform functionality.
  • Note regarding Kombo: We use the API of Kombo Technologies GmbH (Berlin) as a data processor (Art. 28 GDPR) to optimize HR processes and synchronize employee/application data.
  • Business Transfers: In connection with a merger, acquisition, or sale of assets.
  • Legal Obligations: If required by law, subpoena, or government request, or to protect users, platform integrity, or intellectual property.
  • Access Controls: Third parties must adhere to confidentiality agreements, SOC 2 security practices, and data minimization principles.

5. Data Security

We implement industry-standard security measures, though no method is 100% secure:

  • Encryption: Data is encrypted in transit (TLS 1.2+) and at rest (AES-256).
  • Access Control & Least Privilege: Role-based access control (RBAC) restricted to authorized personnel.
  • Audit Logging & Monitoring: Continuous security monitoring for anomalies.
  • Incident Response Plan: Procedures for breach detection, mitigation, and notification.
  • User Responsibilities: Users must protect login credentials and report unauthorized access immediately.

6. Data Retention

We retain Personal Information for as long as necessary to fulfill the purposes outlined in this policy, unless a longer period is required or permitted by law.

7. Your Rights and Choices

Depending on your jurisdiction, you may have the following rights:

  • Access: Request access to your Personal Information.
  • Correction: Request correction of inaccurate/incomplete info.
  • Deletion: Request deletion, subject to exceptions.
  • Objection: Object to processing under certain circumstances.

To exercise these rights, contact: airsupport@usebraintrust.com

8. Children's Privacy

The Service is not intended for individuals under 18. We do not knowingly collect info from children and will delete any inadvertently collected data.

9. Changes to This Privacy Policy

We may update this policy periodically. We will notify you of material changes by posting the new policy and updating the "Last Updated" date.

10. Contact Us

For questions or concerns, contact us at: airsupport@usebraintrust.com

EU Representative (GDPR Art. 27):
Freelance Labs Inc. has appointed Prighter Group as our privacy representative in the European Union.

Please include "Freelance Labs Inc." in all communications.