Privacy Policy

Last updated: April 2026

What We Collect

• Telegram ID and display name — used to identify your account.
• Knowledge graph data — the nodes, edges, and content you create through conversations with Brain PA.

Encryption

Your knowledge graph is encrypted with a unique AES-256-GCM key (Data Encryption Key, or DEK) generated when your account is created. This DEK is itself encrypted with a master key and stored in our database. Your graph data is encrypted at the filesystem level using per-user encryption policies.

Third-Party Data Processing

Your messages and graph data are sent to OpenAI for inference (language understanding and response generation). Per OpenAI's API Terms of Service, data sent via the API is not used to train OpenAI models.

Telegram is used as the sole authentication provider and messaging channel. Messages are processed through Telegram's servers as part of the Bot API.

What We Don't Do

• We do not use analytics or tracking tools.
• We do not share your data with third parties (beyond OpenAI for inference).
• We do not display advertising.
• We do not sell your data.

Account Deletion

You can delete your account at any time from the dashboard settings. When you delete your account:

• Your Data Encryption Key is cryptographically shredded (overwritten with random bytes).
• Your encrypted data files are removed from the server.
• Your user record is deleted from the database.

After deletion, your data is cryptographically unrecoverable. This action cannot be undone.

Data Retention

Your data is retained as long as your account is active. Encrypted daily backups are retained for 7 days. After account deletion, your data is removed from backups within the 7-day retention window.

Contact

For privacy-related questions, contact us via Telegram at @Brain_PA_bot or email privacy@x-arc.ai.