Outside services
Every company that receives data from Born, what it receives, and where it's processed. Each one only gets what its job needs.
Database, file storage and sign-in
Receives: Everything stored in Born: account details, brand knowledge, uploaded files, briefs, projects and their history
Runs the Born application and its scheduled jobs
Receives: Everything passing between your browser and Born while you use it; cookie-free, anonymous page-view counts
The AI model (Claude) behind briefs, answers, lessons and asset checks
Receives: The text and images Born sends with each request: the brief being written, relevant brand knowledge and file passages, uploaded creative under review
Search fingerprints (embeddings) and relevance checks for finding past work
Receives: Short passages of text from briefs, lessons and imported files
Reading a website when you ask Born to scan one
Receives: Only the web address you give it; it returns that public page's text
Sending Born's emails (invitations, notifications, password resets)
Receives: Recipient name and email address, and the text of the email
Error monitoring, so problems are fixed before you report them
Receives: Technical error reports tagged with an organization and user id only - no request contents, cookies, addresses or file contents
Changes to this list
We tell brand admins by email at least 30 days before adding a new service that will receive your data, so you can object. Transfers to the United States are covered by the EU's standard contractual clauses or an equivalent safeguard. Questions: [privacy@useborn.io].