Privacy Policy — Ora by Braintied

This Privacy Policy explains how Braintied Inc. (“Braintied,” “we,” or “us”) collects, uses, and protects information when you interact with Ora and Braintied-hosted AI assistants over SMS, web, voice, or other supported channels (collectively, the “Service”).

1. What we collect

We collect only the information needed to operate the Service:

Contact identifiers— phone number, email address, or chat handle you use to reach an assistant.
Message content— the text, media, and metadata of messages exchanged with the assistant, including timestamps and delivery status.
Account data(if you create one) — name, login email, OAuth tokens for connected services you authorize.
Technical data— browser language, time zone, screen size, and approximate device class when you use our web interface, used solely for localizing replies and detecting fraud.
Consent records— for SMS, the timestamp and content of your first inbound message (which constitutes opt-in), plus any STOP/START actions.

2. How we use it

To operate the Service: route your messages to the right assistant, generate replies, and deliver them.
To maintain conversation context across sessions so the assistant can refer back to earlier messages.
To enforce safety, anti-abuse, and rate-limiting policies.
To meet legal and carrier requirements (TCPA opt-in/opt-out records, 10DLC campaign attestation).
To improve the Service through aggregated, de-identified usage patterns. We do not train public AI models on your messages.

3. SMS-specific terms

By texting a Braintied-managed business number, you consent to receive AI-generated replies from that number. Message and data rates may apply from your wireless carrier. Reply STOP at any time to opt out brand-wide; reply HELPfor assistance. Opt-out is honored across every assistant Braintied operates — not just the one you texted.

We do not sell, rent, or share your phone number or message content with marketers or data brokers.

4. Who we share with

We share information only with service providers who need it to deliver the Service:

Telnyx— SMS/MMS carrier and webhook delivery.
Anthropic, Google, OpenAI, MiniMax, and similar inference providers — to generate AI replies. These providers are contractually prohibited from training their public models on your data.
Supabase and Fly.io— managed database and infrastructure hosting.
Law enforcement or regulators— only when required by valid legal process or to protect rights, property, or safety.

We do not sell personal information. We do not share message content for advertising or marketing purposes.

5. How we protect data

All traffic is encrypted in transit (HTTPS / TLS 1.2+).
Webhooks are cryptographically signed (Ed25519) and verified before processing.
Database access is gated by row-level security and tenant isolation.
Secrets are stored in managed vaults, never in source code or logs.
Access is restricted to a small number of authorized engineers under audit.

6. Data retention

We retain message content and consent records for as long as needed to operate the Service, comply with legal obligations (including TCPA recordkeeping), and resolve disputes. You can request deletion at any time using the contact below; deletion is completed within 30 days unless legal holds apply.

7. Your rights

Access— request a copy of the data we hold about you.
Correction— ask us to fix inaccurate data.
Deletion— ask us to delete your data, subject to legal retention requirements.
Opt-out— reply STOP to any SMS message, or contact us to opt out of every channel at once.
Portability— request your data in a structured, machine-readable format.

Residents of California, the EEA, and the UK have additional rights under CCPA/CPRA and GDPR. We honor those rights regardless of where you live.

8. Children

The Service is not directed to anyone under 13. We do not knowingly collect data from children. If you believe a child has contacted an assistant, please tell us so we can delete the record.

9. Changes to this policy

We may update this policy from time to time. Material changes will be announced on this page and dated. Continued use of the Service after a change means you accept the updated policy.

10. Contact

Questions, requests, or concerns: hello@braintied.com.

Braintied Inc. · 1111B S Governors Ave # 39542, Dover, DE 19904, USA.