Privacy Policy

Effective 29 August 2026

Who is responsible and how to contact us

MakersBrain operates this site and the MakersBrain service. Questions, privacy requests and complaints can be sent to hello@makersbrain.app. A workshop using MakersBrain may separately control the customer, supplier, employee and other business information it enters; contact that workshop first for requests about its records.

Information we collect

• Account and identity information: your name, verified email address, language, internal account identifier, sign-in provider and the provider-specific identifier used to link your sign-in.
• Workspace information: memberships, roles, invitations, settings, entitlement and usage records, and actions needed to operate and secure your workshop.
• Workshop business information: records and documents authorized users add to Odoo, Paperless, or enabled MakersBrain features, which can include customer, supplier, product, invoice, inventory and production information.
• Service and security information: timestamps, operation and correlation identifiers, route and status classes, audit events, and diagnostic information. Application telemetry is designed to exclude email addresses, sign-in subjects, authorization headers, document contents, IP addresses and user-agent strings.
• Communications: messages you send us and transactional email needed for invitations, account administration and service delivery.

The public website does not use a contact form, advertising trackers or analytics cookies. If this changes, this policy will be updated before those tools are enabled.

Google sign-in and Google user data

If you choose to sign in with Google, Google authenticates you and MakersBrain receives the basic identity information you authorize, such as your name, email address, profile identifier and, when provided, profile image. MakersBrain accesses, uses and stores this information only to create or link your account, authenticate you, prevent unauthorized access and display your account identity.

MakersBrain does not receive your Google password. Basic Google sign-in does not give MakersBrain access to Gmail, Google Drive, Google Calendar, contacts or other Google content. Google identity data is shared only with service providers needed to host and secure MakersBrain, and is not sold, used for advertising or transferred for independent marketing. We will update this policy and request express authorization before an optional feature asks for additional Google data or permissions.

How we use information

• provide, configure and support the service and requested workshop features;
• authenticate users and enforce workspace permissions;
• deliver invitations and service communications;
• maintain backups, availability and recovery;
• detect abuse, investigate incidents and keep proportionate security evidence;
• comply with legal obligations and respond to valid rights requests; and
• improve reliability using minimized operational information.

Depending on the context, processing is necessary to provide the service you request, meet a legal obligation, pursue legitimate interests such as security and reliability, or is based on consent. A workshop determines the appropriate basis for business information it controls.

When information is shared

Information is available only to authorized workspace users and personnel who need it for their role. We may use service providers for hosting, encrypted backups, authentication, transactional email, document processing and privacy-safe monitoring. They may process information only to provide their contracted service and under appropriate safeguards. We may disclose information when required by law, to protect users and the service, or as part of a business transfer with appropriate notice and safeguards.

We do not sell personal information, use Google user data for advertising, or allow service providers to use it for their own marketing.

Storage, security and international transfers

MakersBrain is designed for EEA-based storage and keeps each workshop's primary business records in its own database. Safeguards include encryption in transit, encrypted backups, access controls, separate service identities, minimized logs and audited administrative actions. No service can eliminate every security risk.

If information must be handled outside the EEA, we will use a lawful transfer mechanism and appropriate safeguards and update the relevant service information.

Retention

We keep personal information only while needed to provide and secure the service, meet legal obligations, resolve disputes and enforce agreements. Timing depends on the record and the workshop's obligations. When an account or workspace closes, information is deleted or de-identified unless a limited record must be retained. Encrypted privacy-export files expire no later than seven days after creation or when first downloaded, whichever happens first. Backups expire on a controlled cycle, and deletion records prevent erased information from silently returning during a restore.

Your choices and rights

Depending on applicable law, you may ask to access, correct, export, erase or restrict your information, object to processing, or withdraw consent. You may unlink Google sign-in or revoke MakersBrain access from your Google Account. Revoking access stops future sign-in through that connection but does not automatically delete your MakersBrain account or records that must be retained.

Send a request from the email associated with your account to hello@makersbrain.app. We may need to verify your identity. You may complain to the data-protection authority where you live or work; in France, this is the CNIL.

Children

MakersBrain is a business service and is not directed to children. We do not knowingly create accounts for children who cannot legally consent to this processing.

Changes to this policy

We may update this policy as the service or legal requirements change. The effective date above will be revised, and material changes will be communicated through the service or by email when appropriate.