Privacy Policy
Last updated 3 July 2026
This policy explains what personal information BrainVault collects, why, and the choices you have. BrainVault is operated by The Growth System and is designed with South Africa's POPIA in mind.
Information we collect
Account data you provide: name, email, workspace/role, and profile details such as job title and expertise.
Content you create: ideas, comments, evaluations, files you upload, and related workspace records.
Usage data: basic logs needed to run and secure the service (for example sign-in events and AI-usage counts).
How we use it
To provide the service — run your workspace, route notifications, and generate reports.
To keep the service secure and enforce access controls between organisations (tenants).
To improve reliability and performance. We do not sell your personal information, and we do not use your workspace content to train third-party models.
Tenant isolation
Each organisation's data lives in an isolated workspace. Row-Level Security in the database prevents one workspace from reading or changing another's data.
Sub-processors
We use reputable infrastructure providers to host the application and database, deliver email, and (optionally) provide AI features. These providers process data only to deliver their service to us.
Retention
We keep workspace data for as long as your workspace is active, plus any retention period your admin configures. You can request export or deletion of your data.
Your rights
Subject to law, you may access, correct, or delete your personal information, and object to certain processing. Contact us to exercise these rights.
Questions or requests: support@thegrowthsystem.co.za.
This is a starter document provided for transparency and demonstration. It is not legal advice; please review with your own legal counsel before relying on it commercially.