BRAINFOREST AI
Legal

Privacy Policy

Last updated: October 12, 2026

This policy explains how Done Yesterday LLC, doing business as Brainforest ("Brainforest", "we", "us") handles your information. It covers this website and the Brainforest AI Readiness Index: the AI Snapshot, the Executive Diagnostic and the 90-Day Advisory. We are based in Tempe, Arizona, USA.

What we collect

  • Contact details. Your name, work email, company name and industry.
  • Your interview answers. What you tell the AI interview. This includes company and financial information, such as revenue, costs, margins and headcount.
  • Payment details. Stripe processes card payments. We never see or store your full card number. Stripe sends us a record of the payment, such as the amount and the date.
  • Advisory applications. What you send on the 90-Day Advisory application form.
  • Usage data. Pages visited, browser and device type, and approximate location from your IP address (your internet address). Google Analytics collects this on our public pages. Our server also keeps short technical logs.
  • Voice input. If you use the microphone button in the interview, your browser turns your speech into text with its own speech service (for example, Google in Chrome or Apple in Safari). We receive only the text.

How we use it

  • To run your interview and produce your report.
  • To check the numbers in your report. For the Executive Diagnostic, to prepare the live interviews and the readout.
  • To take payment, apply fee credits and handle refunds.
  • To email you about your report, your purchase and next steps.
  • To answer your questions.
  • To see how the site is used, so we can improve it.
  • To meet legal and tax duties.

We do not sell your information. We do not use it for advertising.

Who we share it with

We share your information only with these service providers, and only to run the service:

  • Stripe processes payments.
  • Supabase stores your interview answers and your report (our database).
  • Resend sends our emails.
  • Anthropic (Claude API) runs the AI that conducts the interview and drafts the report.
  • DigitalOcean hosts our server.
  • Google Analytics measures visits to our public pages. Pages that show your report or interview do not load it.
  • Cal.com handles call bookings, if you book a call.
  • Iron River Technologies, a Brainforest technology partner, delivers Executive Diagnostic work. For Executive Diagnostic clients, it may see your contact details and interview answers to run the live interviews and the readout.

We may also share information when the law requires it, or to protect our rights. If Brainforest is sold or merged, your information may pass to the new owner under this same policy.

Who sees your answers

  • Your interview answers are seen only by the Brainforest team and the lead for your report.
  • Your answers are never used to train public AI models.
  • Anthropic processes them under its commercial API terms. Those terms do not allow Anthropic to train its models on them.

How we protect it

  • All traffic to this site is encrypted (HTTPS).
  • Your answers and reports are stored in a managed database that encrypts data at rest (while stored).
  • Only people who need access have it. Our admin area is password-protected.
  • Our service keys stay on our server. They never reach your browser.

No system is perfectly secure. If a security breach affects your information, we will tell you as the law requires.

How long we keep it

  • Interview answers and reports: we keep them so your report link keeps working and your fee credit can be applied. We delete them when you ask.
  • Payment and tax records: as long as US tax law requires.
  • Usage data: Google Analytics deletes it after the period set in our account.

Access, correction and deletion

You can ask us to:

  • send you a copy of your information;
  • correct it;
  • delete it.
  1. Email hello@brainforest.com from the email address you used with us.
  2. Say what you want us to do.
  3. We reply within 2 working days and complete the request within 30 days.

We may ask you to confirm your identity first. We must keep some records, such as payment records, even after a deletion request. Every follow-up email we send has an unsubscribe link.

Depending on where you live (for example, California, the EU or the UK), you may have further rights. You use them the same way.

Cookies

Cookies are small files a website stores in your browser.

  • Google Analytics sets cookies on our public pages to count visits. You can block them in your browser settings.
  • Your interview stores your session ID in your browser (a cookie and browser storage) for up to 30 days. This lets you pick up where you left off if the page reloads.
  • Stripe sets its own cookies on its checkout page, to take payment and prevent fraud.

We use no advertising cookies.

Children

Our service is for businesses. It is not meant for anyone under 18.

Changes

If we change this policy, we update this page and the date at the top. If a change is significant, we tell clients by email.

Contact

Privacy questions: hello@brainforest.com.

Done Yesterday LLC, dba Brainforest, 733 W University Dr, Tempe, AZ 85281, USA.

Terms of Service ยท Support