Privacy Policy

Last updated: April 2026

1. Introduction

ButlerBrain is operated by CNL Capital Partners LLC, doing business as ButlerBrain ("ButlerBrain," "we," "our," or "us"). ButlerBrain is a Brain-as-a-Service platform — a semantic memory layer that plugs into MCP-compatible AI tools so your assistant can remember your notes, documents, web pages, thoughts, and calendar events.

This policy explains what information we collect, how we use it, and the choices you have. We keep it short and plain because we want you to actually read it.

2. Information We Collect

  • Account information. When you sign up, our authentication system stores your email, brain name, and password hash. We never see your raw password.
  • Your brain data. The notes, documents, web pages, thoughts, PDFs, and calendar events you save to your brain. You control what you put in, and you can delete it at any time.
  • Payment information. Handled entirely by Stripe. We never see, store, or transmit your credit card number. We only keep a Stripe customer ID and your subscription status.
  • Usage data. API call counts and plan metadata, stored securely so we can enforce your plan limits and show you usage in the dashboard.
  • No tracking cookies. No analytics. No ad networks. No third-party pixels. The only cookies we use are essential authentication cookies for keeping you logged in.

3. How We Use Your Information

  • To provide the ButlerBrain service — storing, embedding, and retrieving your memories.
  • To process payments through Stripe.
  • To send transactional emails (welcome, billing, trial expiry, account lifecycle). We do not send marketing emails.
  • To enforce the usage limits of your plan.
  • To respond to your support requests.

We do not sell your data. We do not use your brain data to train AI models — ours or anyone else's.

4. Data Storage and Security

  • All data is stored securely on AWS.
  • Your brain content lives in our secure cloud storage and vector database, isolated by tenant prefix.
  • Embeddings are generated by self-hosted models running inside our private VPC. Your content is never sent to a third-party embedding API — it never leaves our infrastructure for that purpose.
  • All data is encrypted in transit (TLS 1.2+) and at rest (industry-standard server-side encryption).
  • Your API keys are SHA-256 hashed before storage. We physically cannot see your raw key after you create it — if you lose it, you rotate it.

5. Third-Party Services

We use a small, deliberate set of third-party services to run ButlerBrain:

  • Amazon Web Services (AWS) — cloud infrastructure (compute, storage, authentication, and email delivery). See AWS Privacy Notice.
  • Stripe — payment processing. Stripe receives your payment details directly and never exposes them to us. See Stripe Privacy Policy.
  • Anthropic — if you connect ButlerBrain through the Claude.ai MCP connector, your queries and tool results pass through Anthropic's infrastructure on their way to and from Claude. See Anthropic Privacy Policy.

No other third parties receive your data.

6. Data Retention and Deletion

You are always in control of your data. From the dashboard you can:

  • Cancel your subscription. You keep full access through the end of your billing period, then drop to read-only. Your data is preserved.
  • Delete your account. Your account and subscription are closed immediately. Your brain data is retained for 30 days in case you change your mind, then permanently removed.
  • Delete everything. An immediate and permanent wipe of your account, authentication credentials, database records, Stripe customer, stored files, and vector data. Irreversible.

7. Your Rights

  • Access. View your data anytime via the dashboard or the MCP search_brain and get_context tools.
  • Deletion. Self-service via the dashboard using any of the options above.
  • Export. Email support@butlerbrain.ai and we'll provide a data export.
  • Correction. Edit your notes directly in Obsidian and sync — changes flow back into your brain automatically.

8. Children's Privacy

ButlerBrain is not directed at children under 13, and we do not knowingly collect information from them. If you believe a child has given us information, contact us and we'll delete it.

9. Changes to This Policy

If we make material changes to this policy, we'll notify you by email at the address on file before the changes take effect. Minor clarifications will be posted here with an updated "Last updated" date.

10. Contact

Questions about this policy or how we handle your data? Reach us at:

CNL Capital Partners LLC d/b/a ButlerBrain