Privacy Policy & Security Architecture
At The Code Brains (TCB), privacy and intellectual property protection are core engineering principles. We build custom autonomous AI agents and workflow automations deployed exclusively within your infrastructure, ensuring 100% data confidentiality and zero vendor lock-in.
1. 100% Client Ownership & Zero Data Retention
Unlike packaged SaaS platforms that route your proprietary customer communications and internal documentation through centralized shared servers, The Code Brains operates as a pure engineering studio.
- No Model Training: Your business records, customer transcripts, and vector embeddings are never used to train public or proprietary foundation models.
- Dedicated Client VPC: All production bots, n8n instances, and microservices are deployed inside your own AWS, GCP, or private Docker cluster.
- Full Source Code Handover: You retain complete intellectual property ownership, Git repository access, and master credentials.
2. Information We Collect on Our Website
When you interact with the TCB website (such as scheduling an enterprise consultation or submitting an inquiry via our interactive forms), we collect:
- Contact Information: Full name, corporate email address, international phone number, and company name.
- Project Scope & Requirements: Desired automation modules, CRM tech stack, budget parameters, and business use-case details.
- Technical Diagnostic Telemetry: Referral sources, browser environment, and campaign parameters (UTM tags) used exclusively to route your inquiry to the appropriate engineering specialist.
3. Encryption & Security Standards
All data transmitted through our web services and API endpoints adheres to enterprise-grade security protocols:
TLS 1.3 In-Transit Encryption
Every API call, webhook payload, and lead transmission is secured via modern TLS 1.3 cryptographic suites.
AES-256 At-Rest Encryption
Vector databases (Qdrant/Pinecone) and relational databases (PostgreSQL) use AES-256 block encryption.
Ephemeral In-Memory Processing
Voice streams and real-time audio payloads are processed in memory and immediately discarded after call completion.
Granular IAM Policies
Strict least-privilege IAM roles with time-bound credentials across client cloud environments.
4. International Compliance (GDPR, CCPA, DPDP)
We respect your rights under global privacy laws including the European Union General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), and India Digital Personal Data Protection Act (DPDP). You have the right to request access to, correction of, or permanent deletion of any personal data submitted to us.
Questions Regarding Privacy or Security Architecture?
For security questionnaires, data processing agreements (DPA), or custom compliance reviews, please reach out directly to our engineering leadership team.