Privacy Policy

PBrain Pte Ltd ("PBrain", "we", "us") builds AI assistants that answer messages for businesses. This policy explains what personal information we collect, why we collect it, how we use, store, share and delete it, and the choices you have. It applies to our websites, to the PBrain platform, and to the assistants that businesses run on it, including when you message a business over WhatsApp, Facebook Messenger or Instagram, and when a salesperson connects a Google Calendar.

1. Who is responsible for your information

PBrain provides its service to businesses (our customers). When you message a business that uses PBrain, the business decides why and how your messages are used; it is the controller of that information and PBrain is its processor, handling the information on the business's instructions. For information about our own websites, our own customers' accounts and our own marketing, PBrain is the controller.

PBrain Pte Ltd, 1 Fullerton Road #02-01 One Fullerton, Singapore 049213.

2. Information we collect

Information you give us

If you create an account with us, we ask for details such as your name, email address, telephone number and company. If you contact us, we keep a record of the communication to help resolve your question.

Messages you send to a business that uses PBrain

When you message a business over WhatsApp, Messenger, Instagram or its website chat, we receive:

• the content of the messages you send and the replies the assistant gives;
• an identifier for your account on the channel you used, such as your WhatsApp phone number or Facebook or Instagram user ID, and the profile name the channel gives us;
• the time of each message and its delivery status.

Information from your use of our websites and platform

• Log information: Internet protocol address, browser type and language, device event information such as crashes and system activity, the date and time of your request and the referring URL.
• Cookies and local storage: we and our partners use cookies and browser web storage to keep you signed in, remember settings and understand how the service is used. You can block cookies in your browser, but some features may not work without them.

Google Calendar data (only if a salesperson connects a calendar)

See section 6.

3. How we use information

We use information only to provide, secure and improve the service, and to meet our legal obligations. In particular:

• to receive your messages and send you the assistant's replies on behalf of the business you contacted;
• to keep the conversation history so the assistant can follow the conversation and the business can review it;
• to book, move or cancel appointments with the business, if you ask for one;
• to operate, protect and troubleshoot our platform, and to detect and prevent fraud and abuse;
• to respond to you when you contact us, and to tell our customers about changes to the service.

We do not sell personal information. We do not use messages or Google user data to show you advertising. We will ask for your consent before using information for a purpose other than those in this policy.

4. Messaging channels: WhatsApp, Messenger and Instagram

When you message a business over WhatsApp, your messages pass through the WhatsApp Business Platform, which is operated by Meta Platforms, Inc. and its affiliates. Meta processes them under its own terms and privacy policy, which are separate from this one. Messenger and Instagram work the same way through Meta's platforms.

• We answer people who have messaged the business first. Outside WhatsApp's 24-hour customer-service window we send only messages that WhatsApp's rules allow, such as approved message templates.
• We do not send unsolicited marketing messages.
• To produce a reply, your message is sent to OpenAI, whose API generates the assistant's answer on our behalf. Under OpenAI's API terms, data sent through the API is not used to train OpenAI's models. When a translation feature is turned on, the text may also be sent to Microsoft's translation service.
• You can ask the business, or us, to delete your conversation data (see section 9).
• If you do not want to receive messages, tell the business or reply "stop", and block the business's number in WhatsApp.

5. Information we share

We do not share personal information with companies, organisations and individuals outside PBrain except in these cases:

• With the business you messaged. It owns the conversation and can see it.
• With your consent. We require opt-in consent before sharing any sensitive personal information.
• For external processing. We provide personal information to trusted service providers that process it for us on our instructions and under confidentiality and security obligations. These include the cloud hosting and infrastructure providers that run PBrain, the messaging platforms you use to reach the business, and the language-model providers described in section 4.
• With domain administrators. If your account is managed by an organisation, its administrators can see and manage your account information.
• For legal reasons. If we have a good-faith belief that disclosure is reasonably necessary to meet a law, regulation, legal process or enforceable governmental request; to enforce our terms, including investigating possible violations; to detect, prevent or address fraud, security or technical issues; or to protect the rights, property or safety of PBrain, our users or the public.
• Business transfers. If PBrain is involved in a merger, acquisition or asset sale, we will keep personal information confidential and give affected people notice before it is transferred or becomes subject to a different policy.

We may share information that does not identify you, in aggregate, for example to show general trends in the use of the service. We never share Google user data in this way, and we do not give it to advertisers.

6. Google Calendar

If a salesperson chooses to connect a Google Calendar to PBrain, we ask Google for permission to see when they are busy and to create, change and delete the calendar events that PBrain makes for bookings. We use this only so that our booking assistant can offer customers appointment times that are free and put the bookings it makes into the calendar.

What we access

• Free/busy times (when the calendar is busy, never the titles or details of other events), through the Google Calendar scope calendar.freebusy.
• Events that PBrain itself creates, moves or cancels for bookings, through the scope calendar.events.

What we store

A token that lets PBrain act on the calendar until it is disconnected, and the identifier of each event PBrain creates so that it can move or cancel that booking. We do not copy the rest of the calendar. We store the token on our servers and restrict access to the staff and systems that need it to run the service.

How we use and share it

• Only to provide and secure the booking feature for the salesperson and the business. We do not use Google user data for advertising, we do not sell it, and we do not use it to develop or improve any other product.
• We do not allow people to read Google user data unless the salesperson asks for support, it is needed to investigate abuse or a security issue, or the law requires it.
• We do not use Google user data to train generalised artificial-intelligence or machine-learning models. The open appointment times worked out from free/busy information may be included in the text we send to OpenAI so that the assistant can offer them; OpenAI processes it on our behalf and, under its API terms, does not use it to train its models.
• We share Google user data with no one outside PBrain except the infrastructure providers that run the service, OpenAI as described above, and where the law requires.

Limited Use

PBrain's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Disconnecting and deleting

You can disconnect PBrain at any time at myaccount.google.com/permissions, or by emailing us. When a calendar is disconnected, or when you ask us to delete the data, we delete the token and the stored event identifiers (see section 8 for timing). Events already in the calendar are not deleted.

7. Where information is processed and how it is protected

PBrain processes information on servers in Singapore operated by Amazon Web Services. Some providers named in this policy, including OpenAI and Meta, process information in other countries, including the United States. We may transfer information outside Singapore only where that is necessary to run the service, to providers that protect it to a standard comparable to the Personal Data Protection Act 2012 of Singapore.

We work to protect information from unauthorised access, alteration, disclosure or destruction. In particular:

• we encrypt traffic to our services using TLS;
• we review how we collect, store and process information, including physical security, to guard against unauthorised access to our systems;
• we limit access to personal information to employees, contractors and agents who need it to process it for us and who are bound by confidentiality obligations.

8. How long we keep information

We keep conversations for as long as the business that owns them uses PBrain, and for up to 365 days after the business ends its service, unless you ask us to delete them sooner. We keep Google Calendar tokens and event identifiers only while a calendar is connected, and delete them within 30 days of disconnection or of a verified request. We may keep information longer where the law requires or where it is needed to resolve a dispute or protect against fraud. After information is deleted from our live systems, residual copies may remain in backups for a limited time until they are overwritten.

9. Your choices and rights

You can ask us to give you access to your personal information, to correct it, to delete it, or to stop using it. When you ask, we may need to verify your identity first. We may refuse a request that is unreasonably repetitive, would take disproportionate technical effort, would risk the privacy of others, or is impractical (for example, information on backups), and we will tell you why.

• Delete your conversation data: follow the steps at pbrain.biz/data-deletion. We act on verified requests within 30 days and confirm by email.
• Withdraw consent or ask questions about your information: write to the contact in section 11.
• Deleting information with PBrain does not delete your account with Meta, WhatsApp, Facebook, Instagram or Google; use those services' own settings for that.
• If you are in Singapore, you have rights under the Personal Data Protection Act 2012. If you are elsewhere, you may have similar rights under local law, and we will honour them where they apply.

10. Children

Our services are for businesses and the adults who contact them. We do not knowingly collect personal information from children. If you believe a child has given us personal information, contact us and we will delete it.

11. Contact us

For any question about this policy or your information, write to admin@pbrain.biz. For data deletion requests, write to support@pbrain.biz. Our Data Protection Officer can be reached at support@pbrain.biz.

12. When this policy applies, and changes

This policy applies to all services offered by PBrain and its affiliates, except services that have separate privacy policies that do not incorporate this one. It does not apply to services offered by other companies or individuals, including Meta, WhatsApp and Google, or to the information practices of businesses that use PBrain beyond what is described here.

We may change this policy from time to time. We will not reduce your rights under it without your explicit consent. We will post any changes on this page and, if the changes are significant, give a more prominent notice. We keep prior versions in an archive for your review.

Last edited on 19 October 2026.