Privacy Policy

Introduction and Data Controller Information

Welcome to BrainHaven's Privacy Policy. This document explains how we collect, use, store, and protect your personal information when you visit our website at brainhaven.com or use our financial forecasting services. BrainHaven operates as a financial technology platform specializing in predictive analytics and forecasting tools for businesses and individuals.

BrainHaven (Pty) Ltd, located at Green Grove, M6, Wapadrand, Pretoria, 0050, South Africa, serves as the data controller for all personal information collected through our platform. We're registered under South African data protection laws and committed to maintaining the highest standards of data privacy and security.

Information We Collect

Personal Information You Provide

When you register for our services, contact us, or engage with our platform, we collect various types of personal information. This includes your full name, email address, phone number, company information, and billing details when you subscribe to our premium services.

• Account registration details including name, email, and chosen password
• Contact information such as phone numbers and business addresses
• Financial information necessary for billing and payment processing
• Professional information including job title, company size, and industry sector
• Communications you send to us through contact forms or support channels

Automatically Collected Information

Our platform automatically collects certain technical information to improve your experience and ensure security. This includes your IP address, browser type, device information, and how you interact with our website features.

• IP addresses and geographic location data
• Browser and device specifications
• Website usage patterns and navigation paths
• Time stamps of visits and session duration
• Referral sources and search terms used to find our site

Financial Data and Analytics Information

Given our focus on financial forecasting, we collect and process financial data that you choose to input into our analytical tools. This data is essential for providing accurate forecasting services but is handled with the utmost care and security.

How We Use Your Information

Service Delivery and Platform Functionality

Your personal information helps us deliver high-quality financial forecasting services tailored to your needs. We use your data to create personalized analytics, generate reports, and provide insights that match your business requirements.

Communication and Support

We use your contact information to respond to inquiries, provide customer support, and send important updates about our services. This includes technical notifications, billing information, and educational content about financial forecasting best practices.

• Responding to customer support requests and technical issues
• Sending service updates and important platform notifications
• Providing educational resources about financial planning and forecasting
• Processing billing inquiries and payment-related communications

Platform Improvement and Analytics

We analyze usage patterns to enhance our platform's functionality and develop new features. This helps us understand which tools are most valuable to our users and where we can make improvements to the forecasting experience.

Data Sharing and Third-Party Relationships

Service Providers and Business Partners

We work with carefully selected third-party providers to deliver our services effectively. These partners include payment processors, cloud hosting services, and analytics providers. All third parties are contractually bound to protect your information and use it only for specified purposes.

• Payment processing companies for secure transaction handling
• Cloud infrastructure providers for data storage and platform hosting
• Email service providers for communication delivery
• Analytics services for platform performance monitoring

Legal Requirements and Business Transfers

We may disclose your information when required by law, to protect our rights, or in connection with a business transaction such as a merger or acquisition. In such cases, we ensure that any receiving party maintains the same level of data protection.

Your Rights and Choices

Access and Correction Rights

You have the right to access, review, and correct your personal information stored in our systems. You can update most of your account information directly through your user dashboard, or contact our support team for assistance with more complex requests.

Data Deletion and Portability

You can request deletion of your personal data, subject to certain legal and business requirements. We also provide data portability options, allowing you to obtain a copy of your information in a structured, machine-readable format.

• Request a complete copy of your personal data
• Correct inaccurate or outdated information
• Delete your account and associated personal data
• Restrict certain types of data processing
• Object to specific uses of your information

Marketing Communications

You can opt out of marketing communications at any time by using the unsubscribe link in our emails or adjusting your communication preferences in your account settings. Essential service communications will continue as needed for your account.

Data Security and Protection Measures

Technical Security Measures

We implement comprehensive security measures to protect your personal and financial data. Our systems use industry-standard encryption, secure data centers, and regular security audits to maintain the highest level of protection.

• End-to-end encryption for data transmission and storage
• Multi-factor authentication for account access
• Regular security assessments and penetration testing
• Secure data centers with 24/7 monitoring
• Employee training on data protection and security protocols

Access Controls and Monitoring

Access to your personal information is strictly limited to authorized personnel who need it to provide services or support. We maintain detailed logs of data access and regularly review these for any unusual activity.

Incident Response

In the unlikely event of a security incident, we have established procedures to respond quickly, assess the impact, and notify affected users and relevant authorities as required by law. We're committed to transparency and will keep you informed throughout any incident response process.

Data Retention and International Transfers

Retention Periods

We retain your personal information only as long as necessary to provide our services, comply with legal obligations, and resolve disputes. Different types of data have different retention periods based on their purpose and legal requirements.

• Account information: Retained while your account is active plus 7 years
• Financial data: Stored according to financial regulations (typically 5-7 years)
• Communication records: Kept for 3 years for quality and training purposes
• Website analytics: Aggregated data retained for 2 years

International Data Transfers

While BrainHaven is based in South Africa, we may transfer your data to other countries where our service providers operate. We ensure that all international transfers comply with applicable data protection laws and include appropriate safeguards.

Data Deletion Procedures

When retention periods expire or you request deletion, we securely remove your personal information from our active systems. Some data may remain in backup systems for a limited time for technical reasons but will be deleted according to our backup retention schedule.