Privacy Policy
Last updated 14 October 2026
In short
- We use your email address to sign you in and to send you the emails you ask for.
- No advertising, no third-party analytics trackers, and we never sell your data.
- Your personal data is not used to train or prompt AI models.
- Every email can be switched off with one click, and you can ask us to delete your account at any time: privacy@agentcerebro.app.
- 1. Who we are
- 2. What we collect
- 3. How we use it, and why
- 4. Emails we send
- 5. Cookies and local storage
- 6. Who we share it with
- 7. International transfers
- 8. How long we keep it
- 9. Your rights
- 10. Security
- 11. Children
- 12. Changes and contact
1. Who we are
Agent Cerebro (agentcerebro.app) is run by Cerebral Research, London ("we", "us"). We are responsible, as the controller, for the personal data described in this policy.
Questions about your data: privacy@agentcerebro.app. Anything else: contact@agentcerebro.app.
2. What we collect
Your account
- Email address, and whether it has been confirmed. You sign in with a one-time code sent to that address; we never store a password.
- Account ID from our sign-in provider (Auth0).
- Your plan (for example free or paid), any credits on your account, and when your account was created and last used.
- Your email preferences: whether you want podcast emails and earnings emails.
We don't take payments at the moment, so we hold no card or bank details.
What you follow, and the emails we send you
- The podcast channels and companies you follow, and when you followed them.
- A record of each email we send you: what it was about, when, and whether it was delivered, bounced or reported as spam. We also keep the email's content for a limited time (see section 8).
- When you use a link in one of our emails ("View analysis", "Open in Agent Cerebro", "Unsubscribe"): which email it came from, when, and the type of device (desktop, mobile or automated). We do not record your IP address for this.
What you open in the app
- When you open an analysis in Agent Cerebro, such as an earnings report or a podcast episode report: which one, when, and where you opened it from (for example News, the Desk, the Knowledge Graph or a link in one of our emails). We use this to see which analyses are read. We do not record your IP address for this.
Messages you send us
If you email us, or reply to one of our emails, we receive your message and email address so we can answer.
Technical data
- Server logs. Like most websites, our servers log each request: your IP address, the date and time, the page or file requested and the result. These logs are kept by our hosting provider for 7 days and used to keep the service running and secure.
- To stop abuse, such as too many requests, your IP address is also checked briefly in memory and then discarded. It isn't stored.
- To stop abuse of the channel search on the Agent Concierge Desk, we count how many channels your account looks up each day. The count is replaced the next day.
What we don't collect
We don't use third-party analytics or advertising trackers, we don't build advertising profiles, and we don't sell personal data. The research on Agent Cerebro is generated from public sources, such as published podcasts and earnings-call transcripts. Your personal data is not sent to AI providers.
3. How we use it, and why
| What we do | Legal basis (UK GDPR) |
|---|---|
| Create and run your account, sign you in, give you the features of your plan | Contract: we need it to provide the service you signed up for |
| Send account emails, such as your welcome email or a note that your access is ready | Contract |
| Email you new analyses for the channels and companies you follow | Consent: you choose what to follow, and you can switch these emails off at any time |
| Keep sending within safe limits, honour bounces and spam reports, and never email an address that asked us to stop | Legitimate interests: protecting you and our email delivery |
| Count how often email links are used, to tell whether our emails are useful | Legitimate interests: improving the service. Automated link scanners are filtered out |
| See which analyses are opened in the app, and from where, to improve the research we publish | Legitimate interests: improving the service. Never used for advertising or shared |
| Keep server logs and block abuse | Legitimate interests: security and reliability |
| Answer your messages | Legitimate interests, or contract when it's about your account |
| Meet legal obligations | Legal obligation |
4. Emails we send
Account emails. A welcome email when you sign up, and a note when your access is approved.
Emails about what you follow (the "Agent Concierge Desk"). If you follow a podcast channel or a company, we email you when a new analysis is ready: a new episode analysis from a channel you follow, or the earnings-call analysis for a company you follow once the call transcript is published. We only email addresses that have been confirmed with a one-time sign-in code.
- Stopping them. Every one of these emails has an Unsubscribe link: one click switches that type of email off, and your email app's own unsubscribe button works too. You can also switch either type off, or unfollow, on the Agent Concierge Desk page in the app.
- How many. We limit how many of these emails anyone receives in a day, and sending pauses automatically if anyone would receive an unusual number.
- "View analysis" links. Each email can include a link that opens that one analysis without signing in, for 30 days. Anyone you forward the email to can open that analysis until the link expires. The link never gives access to your account, your other analyses or your settings, and we can switch these links off at any time.
- Images. Our emails show our logo, loaded from agentcerebro.app, and podcast emails show the episode's thumbnail, which your email app loads from YouTube. These images are the same for everyone, so they can't tell us whether you opened an email.
- Opens. We could measure whether an email was opened with a tiny invisible image. This is switched off. If we ever switch it on, we will update this policy and ask for your consent first.
Our newsletter, if you subscribe to it, is run on Substack under Substack's own privacy policy.
5. Cookies and local storage
We only use cookies and browser storage that are needed for the site to work. There are no analytics, advertising or tracking cookies, which is why we don't show a cookie banner.
| Name | Set by | Purpose | Lasts |
|---|---|---|---|
cerebro_static | agentcerebro.app | Set after you sign in, so your browser can load the protected research pages in the app | 12 hours |
auth0.…is.authenticated | agentcerebro.app (sign-in library) | Remembers that you're signed in, so your session can be renewed without a new code | About 1 day |
| Auth0 session cookies | login.agentcerebro.app (Auth0) | Your sign-in session and protection against fraud | As set by Auth0, typically days |
| Local storage | agentcerebro.app | Display preferences only, such as theme, panel sizes and the last tab you used | Until you clear your browser data |
Content from other services. Our pages load fonts from Google Fonts and code libraries from jsDelivr, the Tailwind CSS CDN and Auth0; these services receive your IP address when your browser fetches them. Episode clips are played through YouTube's privacy-enhanced mode (youtube-nocookie.com) and thumbnails load from YouTube; when you play a clip, YouTube (Google) may set its own cookies under Google's privacy policy.
6. Who we share it with
We use a small number of service providers who process data for us, under contracts, only to run Agent Cerebro:
| Provider | What they do for us |
|---|---|
| Auth0 (Okta) | Sign-in and email confirmation (one-time codes) |
| Amazon Web Services (Amazon SES and SNS) | Sends our emails and tells us when one is delivered, bounces or is reported as spam (region: US East) |
| Railway | Hosts the app, its database and the server logs |
| Cloudflare | Domain name service, content delivery, and forwarding of mail sent to our addresses |
| Google (Gmail) | The mailbox where we read messages sent to our addresses |
We don't sell personal data or share it for advertising. We would only disclose it otherwise if the law required us to.
7. International transfers
Some of these providers process data outside the UK, mainly in the United States. Where that happens, we rely on the safeguards these providers offer, such as the UK–US Data Bridge or the UK International Data Transfer Agreement and Addendum.
8. How long we keep it
| What | How long |
|---|---|
| Account details and email preferences | While you have an account |
| What you follow | Until you unfollow or your account is deleted |
| The record of each email we sent you (subject, when, delivery status) | While you have an account |
| The content of those emails | 90 days |
| Link use from our emails, and delivery, bounce and spam reports | 12 months, or until your account is deleted |
| Which analyses you opened in the app, and when | 12 months, or until your account is deleted |
| Addresses that bounced permanently or reported spam | Kept on our "do not email" list, so we keep honouring it. Contact us if you want to be emailed again |
| Server logs | 7 days |
| Messages you send us | As long as needed to deal with them |
9. Your rights
Under UK data protection law you can ask us to:
- give you a copy of your personal data;
- correct it;
- delete it;
- restrict how we use it, or object to our use of it (including where we rely on legitimate interests);
- give you your data in a portable format.
You can withdraw consent to follow emails at any time with the Unsubscribe link or on the Agent Concierge Desk page.
Deleting your account. Email privacy@agentcerebro.app from the address you sign in with. We delete your account details, what you follow, the records and content of the emails we sent you, your link use, the record of what you opened in the app and the delivery reports. An address that bounced permanently or reported spam stays on our "do not email" list so we keep honouring it.
We reply to requests within one month. If you're unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ico.org.uk), though we'd appreciate the chance to put it right first.
10. Security
The site is served only over HTTPS. Sign-in uses one-time codes, so there's no password to steal. Access to our systems is limited to the people who run the service, and sending email is restricted to our own addresses. No system is perfectly secure, but we take reasonable steps to protect your data.
11. Children
Agent Cerebro is meant for adults. We don't knowingly collect personal data from children under 16. If you believe a child has signed up, contact us and we'll delete the account.
12. Changes and contact
If we change how we use personal data, we'll update this page and the date at the top, and tell you by email or in the app if the change is significant.
Cerebral Research, London · privacy@agentcerebro.app