Privacy Policy

Last updated: October 2026

1. Who we are

Brains4Cloud is a cloud certification preparation platform, operated by TerrasNova LLC, a company incorporated in the United States. You can contact us at information@brains4cloud.com.

2. Data we collect

  • Account data: name, email address, password (encrypted).
  • Social login data: if you sign in with Google, we receive your name and email from Google.
  • Payment data: processed by Stripe. We do not store card data — only your Stripe customer and subscription ID.
  • Usage data: progress on practice exams, completed labs, answers, scores.
  • Technical data: IP address, browser type, access timestamps (server logs and analytics).
  • Waitlist: if you ask us to let you know when a guide is available, we store your email, the guide you chose, and your language, even if you don’t have an account.

3. How we use your data

  • Provide and personalize the exam simulation and interactive lab service.
  • Generate AI-assisted question explanations (see section 4).
  • Process payments and manage subscriptions.
  • Send you transactional emails (account confirmation, password recovery, payment receipts).
  • Send you emails about your preparation and platform news: reminders based on your activity (for example, if you haven’t taken your first practice exam yet or if you passed the demo), subscription renewal or expiration notices, discount coupons, and announcements of new certifications or labs. You can stop receiving these emails at any time from the “Manage notifications” link in each email, from your profile, or with your email client’s unsubscribe option. Transactional emails are still sent because they are needed to use your account.
  • If you joined a waitlist, send you a confirmation and a single notice when the guide is available. If you want us to delete your email before then, write to the contact address.
  • Improve the platform based on aggregated usage patterns.
  • Respond to your support inquiries.

4. Third parties with access to your data

  • Supabase — database and authentication. Data is stored on AWS servers in the us-east-1 (Virginia, USA) region.
  • Stripe — payment processing (PCI DSS certified).
  • Resend — email delivery (transactional and notifications).
  • Upstash — abuse protection (rate limiting). It temporarily stores your IP address or user ID only for the duration of the rate-limit window, which ranges from one minute to one hour.
  • Google — OAuth authentication (if you choose to sign in with Google), Google Analytics and Google Tag Manager (site usage analysis), and Google Ads (conversion and remarketing — see section 7).
  • Vercel — hosting and CDN infrastructure.
  • Anthropic — AI provider. When the platform generates question explanations, the question text and its context are processed by the Anthropic API (Claude model). We do not send account data or personally identifiable information to Anthropic.

We do not sell your data. Aside from Google Ads/Analytics (see section 7), we do not share your data with third parties for advertising purposes.

5. Data retention

We retain your data while your account is active. If you delete your account, your personal data is deleted within 30 days, except for transaction records that we must retain for legal obligations (up to 7 years under applicable tax law).

6. Your rights

You have the right to:

  • Access the data we hold about you.
  • Correct inaccurate data.
  • Request the deletion of your account and data.
  • Export your data in a portable format.

To exercise these rights, write to us at information@brains4cloud.com.

7. Cookies and analytics

We use the following types of cookies:

  • Session cookies (essential) — strictly necessary to maintain your authentication. They do not track behavior.
  • Language preference — a cookie (NEXT_LOCALE) that remembers whether you chose to view the site in English or Spanish. It does not track behavior.
  • Google Analytics and Google Tag Manager — to understand how the site is used (pages visited, session time).
  • Google Ads (conversion and remarketing) — we use the Google Ads conversion tag to measure the effectiveness of our advertising campaigns and, in some cases, to show you relevant Brains4Cloud ads on other sites. This may set cookies such as _ga, _gcl_au, and _gcl_aw.

You can opt out of Google Analytics by installing the Google Analytics Opt-out extension, and manage Google ad personalization at adssettings.google.com.

We do not sell your data to third parties or share it for advertising purposes outside of Google Ads/Analytics.

8. Security

Your data is transmitted encrypted via HTTPS. Passwords are stored using bcrypt hashing. Payment data is handled exclusively by Stripe, which is PCI DSS certified.

9. International data transfers

Our servers and those of our main providers (Supabase/AWS, Vercel, Anthropic) are located in the United States. When using the platform from another country, your data is transferred to and processed in the USA under the applicable laws of that country.

10. Changes to this policy

If we make material changes — such as adding new providers with access to personal data or changing how we use your information — we will notify you by email and with a notice on the platform at least 14 days in advance. Minor changes (corrections, clarifications) are reflected by updating the date on this page.

11. Contact

Questions about this policy: information@brains4cloud.com
TerrasNova LLC — United States