Data Privacy
This guide explains how Mainbranch collects, uses, stores, and protects your organization’s data.
Our Commitment to Privacy
Section titled “Our Commitment to Privacy”Mainbranch is designed with privacy as a core principle:
- Your data is used only to provide Mainbranch services
- Your data is not used to train AI models
- You maintain control over your data
- We are transparent about data handling
Data Collection
Section titled “Data Collection”What We Collect
Section titled “What We Collect”Content Data
Section titled “Content Data”Content from connected data sources:
- Documents and files
- Emails
- Calendar events
- Support tickets
This data is indexed to enable search and AI features.
Usage Data
Section titled “Usage Data”How the platform is used:
- Feature usage statistics
- Performance metrics
- Error information
This data helps us improve the service.
Account Data
Section titled “Account Data”Information about users and workspaces:
- User profiles (name, email)
- Workspace configuration
- Authentication data
How We Use Your Data
Section titled “How We Use Your Data”Primary Uses
Section titled “Primary Uses”- Search functionality — Indexing content to enable search
- AI features — Processing queries and generating responses
- Platform operation — Running the service reliably
What We Do Not Do
Section titled “What We Do Not Do”- No model training — Your data is not used to train AI models
- No selling — Your data is never sold to third parties
- No advertising — No advertising based on your content
Data Storage
Section titled “Data Storage”Where Data Is Stored
Section titled “Where Data Is Stored”- Data is stored in secure cloud infrastructure
- Located in data centers with strong security
- Compliant with relevant regulations
Retention
Section titled “Retention”- Data is retained while your workspace is active
- Deleted data is removed according to retention policies
- You can request data deletion at any time
Data Isolation
Section titled “Data Isolation”- Your data is isolated from other organizations
- Multi-tenant architecture with strict separation
- No data sharing between workspaces
Data Security
Section titled “Data Security”Encryption
Section titled “Encryption”- In Transit — All data encrypted with TLS 1.2+
- At Rest — Data encrypted using AES-256
- API Communications — All APIs use HTTPS
Access Controls
Section titled “Access Controls”- Role-based access within Mainbranch
- Permission inheritance from source systems
- Audit logging of sensitive actions
Infrastructure Security
Section titled “Infrastructure Security”- Secure cloud hosting
- Regular security updates
- Network-level protections
- Monitoring and alerting
Your Rights
Section titled “Your Rights”Access Your Data
Section titled “Access Your Data”- View your content through the platform
- Request information about your data
- Export your data upon request
Control Your Data
Section titled “Control Your Data”- Delete content from connected sources
- Disconnect data sources
- Request workspace deletion
Data Portability
Section titled “Data Portability”- Your source data remains in your original systems
- No lock-in of your content
- Export options available
Data Sharing
Section titled “Data Sharing”We Do Not Share
Section titled “We Do Not Share”- Your content with other organizations
- Your data with advertisers
- Your information for unrelated purposes
Limited Sharing
Section titled “Limited Sharing”Sharing occurs only:
- With your authorization
- To provide the service (e.g., cloud hosting)
- When required by law
Compliance
Section titled “Compliance”Our Practices
Section titled “Our Practices”- Regular security assessments
- Privacy by design principles
- Employee training on data handling
- Incident response procedures
Your Compliance
Section titled “Your Compliance”Mainbranch supports your compliance needs:
- Access controls and audit logs
- Data residency options (contact us)
- Export capabilities
- Retention management
Administrator Controls
Section titled “Administrator Controls”Available Controls
Section titled “Available Controls”Administrators can:
- Manage connected data sources
- Control feature availability
- Manage user access
- Review usage information
Data Management
Section titled “Data Management”- Disconnect sources to stop syncing
- Remove users to revoke access
- Configure retention settings
User Privacy
Section titled “User Privacy”Your Activity
Section titled “Your Activity”- Searches are private to you
- Chat history is yours
- Your data access follows permissions
What Others See
Section titled “What Others See”- Administrators see aggregate statistics
- Your specific queries are not exposed
- Your documents are accessed only when you view them
Data Deletion
Section titled “Data Deletion”How to Delete Data
Section titled “How to Delete Data”Content from sources:
- Delete from the source system
- Changes sync to Mainbranch
Uploaded files:
- Delete from The Vault
- Removed from indexes
Workspace deletion:
- Contact support for complete deletion
- All data is permanently removed
Deletion Timeline
Section titled “Deletion Timeline”- Deleted content is removed from active systems promptly
- Backup removal follows backup rotation schedule
- No recovery is possible after deletion completes
Questions and Requests
Section titled “Questions and Requests”For privacy-related questions or requests:
- Contact your Mainbranch administrator
- Review this documentation
- Reach out to our support team
Next Steps
Section titled “Next Steps”- Learn about Permissions — Understand access control
- Review Security Features — Full security overview
- Configure SSO — Secure authentication