Privacy

Last updated 7 September 2026

This explains what Cerebera knows about you, where it goes, how long it is kept, and what you can ask us to do with it. It is written to be read, not to be survived.

1. Who this is about

Cerebera is operated by Cerebera Systems Ltd, of 167-169 Great Portland Street, London W1W 5PF, United Kingdom (company number 13522872). For your own account we are the data controller: we decide what is held and why, and we answer for it.

For the customers and contacts you put into Cerebera, it is the other way round. Those people are yours, you decide what happens to them, and we hold them only so the software can work for you. Section 7 is about that.

2. What we hold

What you tell us

• Your name, so Cerebera can talk to you by it.
• An email address or a mobile number, so you can sign in and we can reach you. Both are encrypted where we store them, and a one-way key sits beside them so we can find your account without being able to read the address itself.
• Your company: what it does, where it is, its name, shareholders, tax details and the dates that apply to it.
• Your work: customers, deals, quotes, invoices, the words on your website, your posts, your reminders and your books.
• What you say to Cerebera in the chat, and the files you upload through it.
• Your preferences: your theme, your avatar style, and whether you like to talk or type.

What is collected without you typing it

• Two cookies, and only two: one that keeps you signed in and one that renews it. They are strictly necessary, they carry no identifier used for anything else, and there is nothing to consent to because there is nothing optional. That is why you have never seen a cookie banner here.
• A country code. When you sign in, your network address is checked once, on our own server, against a list held on that server, to work out which country you are in. That decides which currency you see. The country code is kept. Your network address is not stored, and it is never sent anywhere to do this.
• Server logs of which address was requested, whether it worked, and how long it took. They do not contain your network address, your account, or anything you typed.
• Sign-in records: when a session started, when it expires, and the browser it started from, so you can be signed out and so we can tell a stolen session from yours.

What we do not collect at all

No analytics. No advertising or marketing pixels. No third-party trackers of any kind. No location beyond the country. No device identifiers. The typefaces are served from our own server, so simply opening a page does not tell anybody else that you did.

3. Why we are allowed to hold it

4. The AI part, said plainly

Cerebera answers you using a large language model run by Anthropic. To do that we send them what you said, the recent conversation, and the parts of your records the answer needs. That can include your company details and the names and figures on your own customers, deals and invoices.

• It is sent to be answered, and then it is done. Under the commercial terms we use it is not used to train their models.
• We do not send a password, because there is not one. We do not send payment details, because we never have them.
• Anything a stranger wrote, such as a message through your website, is wrapped and marked as somebody else's words before the model reads it, so text from outside cannot be treated as an instruction.
• The model can be wrong. Nothing it proposes leaves Cerebera or changes a record until you say yes. That is a rule the product enforces, not just a sentence in a document.

5. Talking to Cerebera

If you use your voice, the listening is done by your own browser, not by us. In Chrome that means the audio goes to Google's speech service and comes back as text. In other browsers it may be done on your device. We never receive the audio and we never store it. What we receive is the text, exactly as if you had typed it, and you can read that text on screen before anything is done with it. The app says this on the screen where you speak, every time.

6. Who else sees it

We do not sell anything to anybody, ever, and we do not share your information for anybody else's marketing. These are the services that do a job for us, and each one gets only what that job needs.

Which of these are switched on is not a secret. The address /system/adapters reports it, and anything running in practice mode is labelled as practice mode on screen too, so a demonstration can never quietly look like the real thing.

We will also hand something over where the law actually requires it, and if the business is ever sold or merged your records go with it, on these same terms.

7. Your customers are yours

When you add a customer, upload a list, or somebody writes to you through the website we host for you, you are the one who decides what happens to those people. We hold them on your behalf and do as you ask. In the law's words, you are the controller and we are your processor.

• Their email addresses and phone numbers are encrypted where we store them.
• Cerebera will not email somebody who did not give you their address. Not scraped, not bought, not found. The product refuses it; this is not only a promise on a page.
• Every marketing email carries a way out, and once somebody opts out we hold their address only as a one-way key, so the list that remembers them cannot be read back.
• You are responsible for having the right to hold the people you put in, and for telling them what you do with their information.

8. How long we keep it

Your account and your work stay until you ask us to remove them. The housekeeping around them clears itself on the schedule the database enforces:

Records with money in them stay for as long as the law says a business must keep its books, which is longer than anything above.

9. What you can ask us to do

Whether you are in the UK, in India, or somewhere else, you can ask us to show you what we hold, correct it, delete it, give you a copy to take elsewhere, or stop doing something with it. You can also complain to a regulator. In the UK that is the Information Commissioner's Office.

How to ask, honestly. Today there is no button. You write to support@cerebera.com from the address on your account, and a person does it. We answer within 30 days. We are building the button; until it exists this is the way that works, so this says so rather than describing a screen that is not there.

Some of it you can already do yourself. Your money records download as spreadsheet files from the Money page, and everything you have made stays readable and editable on its own screen for as long as your account is open, including after a plan has stopped.

10. Keeping it safe

• There is no password to steal. You sign in with a code sent to you, and it expires.
• Email addresses and phone numbers, yours and your customers', are encrypted with AES-256-GCM before they are written down.
• Where we only need to answer "is this the same address?" we store a one-way key and not the address.
• Everything travels over an encrypted connection.
• Every record is fetched with its owner named in the same question, so one account cannot reach another's. Three tests hold that open for every kind of record we store.

No system is perfect. If something happens that puts your information at risk we will tell you and the regulator within the time the law allows, and we will tell you what actually happened.

11. Where in the world it is

Cerebera is used in the United Kingdom and in India, and the services in section 6 handle information in the United States and elsewhere. Where information leaves the country it started in, it moves under the standard contract terms approved for that purpose, and each of those services is under a written agreement with us to hold it only for the job it is doing.

12. Not for children

Cerebera is for running a business and is not for anybody under 18. We do not knowingly hold information about a child. If you think we have, write to us and it will be removed.

13. When this changes

If we change something that matters we will say so in the app before it takes effect, and the date at the top will move. Small corrections happen without a fuss, and the date still moves.

14. Getting hold of us

About your information: support@cerebera.com. About anything else: support@cerebera.com.