Published notice
A concise English account of current processing.
This Notice is operational information, not legal advice. It describes the controlled launch design and the processing that is enabled. If a mandatory privacy rule requires a different result, that rule controls. We publish a new immutable version when material processing changes.
1. Controller and contact
Propeller OOD, EIK 206840771, VAT BG206840771, Business Park Sofia 1, building 2, floor 7, Sofia 1766, Bulgaria, is the controller for AddBrains account, billing, security, support, and service-operation data. Contact [email protected] for privacy rights or [email protected] for ordinary service support.
2. Scope and launch facts
AddBrains is an API-only, text-only service with 39 reviewed model aliases. Cheaper is the production upstream. OpenRouter is only a pricing-reference source and is not a recipient of AddBrains customer prompts or outputs. There is no hosted chat and no image or video fulfilment in the initial launch.
This Notice covers the public website, signup and verification, API credentials, text inference, usage and ledger records, future payment records, security controls, and support requests.
3. Processing map
| Area | Data | Purpose | Main basis |
|---|---|---|---|
| Account | Email, password verifier, account state, verification record | Create and secure an account and deliver requested service | Contract steps and legitimate security interests |
| Credentials | Hashed API-key identifiers, key label, creation, revocation and last-use metadata | Authenticate requests, revoke access, prevent abuse, and audit security | Contract performance, legitimate security interests, legal claims |
| Requests and usage | Model alias, request identifiers, metering, rate version, status, timing, error and account-linked ledger entries | Fulfil text requests, meter the service, settle or release reservations, and investigate failures | Contract performance, legitimate interests, legal claims |
| Payment and tax | Order, quote, policy evidence, service-entitlement amount, 6% fee, VAT or other tax, currency, payment reference and state | Process and reconcile a purchase, refund, dispute, fraud review, and accounting duty | Contract performance and legal obligations |
| Website and security | IP address, request headers, timestamps, device/network metadata, and hashed rate-limit identifiers | Deliver the site, prevent abuse, maintain network security, and diagnose faults | Legitimate service-delivery and security interests |
| Support and rights | Messages, contact details, attachments you choose to send, identity-verification evidence, and case notes | Answer support, refund, complaint, account-closure, and privacy-rights requests | Contract steps, legal obligations, and legitimate support interests |
AddBrains does not currently request marketing consent for service access. Marketing consent, if introduced, will be separate, optional, and withdrawable.
4. Prompts and outputs
AddBrains does not retain prompt or output content by default after fulfilment. Content is processed transiently to complete the text request. Operational records retain request and usage metadata, not the prompt or output itself.
Cheaper processes the request as the production upstream. AddBrains sends content only as needed to fulfil an authenticated request and applies the configured zero-retention control where available. AddBrains fails closed when a required launch control is absent. This Notice does not promise an upstream practice beyond the applicable public terms, configured control, and current service behavior.
A technical request fingerprint is designed not to reconstruct or expose content. Support attachments are retained only as needed to resolve the case or meet a legal obligation.
5. Recipients and processors
- Cheaper: text fulfilment under the configured production controls.
- Hosting and network providers: site and API delivery, security, backups, and technical reporting.
- Transactional email provider: verification, recovery, account, receipt, and policy communications.
- Approved payment provider: payment and refund processing only after checkout is enabled; the public policy does not name a provider.
- Professional advisers, courts, and authorities: where necessary for legal, accounting, audit, claims, or statutory duties.
OpenRouter supplies reference-rate information only and is not a recipient of customer prompts, outputs, or account data.
6. International transfers
Some providers may process data outside Bulgaria or the European Economic Area. AddBrains will use an adequacy decision, appropriate contractual safeguards, or another lawful transfer mechanism as applicable, and will document the recipient, role, location, and safeguard. We do not claim a transfer mechanism that has not been verified for the relevant processing.
7. Retention and deletion
| Category | Launch treatment |
|---|---|
| Prompt and output content | Not retained by AddBrains after fulfilment by default; exceptional support material is deleted or anonymised when no longer needed. |
| Account and credential metadata | Kept while the account is active, then erased or anonymised through the closure workflow unless a lawful exception applies. |
| Request, usage, and security metadata | Kept only for metering, security, abuse prevention, troubleshooting, and claims; access is restricted and retention is periodically reviewed. |
| Ledger, payment, tax, refund, fraud, and audit records | Kept for the period required by applicable accounting, tax, payment, fraud, and claims rules, then securely deleted or anonymised. Only necessary evidence is retained. |
| Privacy and support cases | Kept while the case and any required legal follow-up are open, then deleted or anonymised subject to lawful retention. |
Account closure is not a promise to erase records AddBrains must retain to comply with law or establish, exercise, or defend a claim. See the Account Closure and Data Deletion policy.
8. Your rights
Subject to applicable law, you may request access, correction, erasure, restriction, portability, or objection, and may withdraw consent where processing is based on consent. Send a request to [email protected]. We may use proportionate identity verification and will explain any lawful limitation. We normally respond within one month; complex requests may be extended where law permits, with notice.
You may complain to the Commission for Personal Data Protection. See Support and Privacy Requests for request instructions.
9. Security
AddBrains uses credential hashing, one-time tokens, access separation, rate limits, data minimisation, structured logs without prompt or output content, closed launch flags, encrypted backups, and controlled production access. No internet service can guarantee absolute security. Report suspected credential compromise promptly to [email protected].
10. Changes and version evidence
This URL identifies immutable version 2026-08-22.1. A material change uses a new version and URL. Historical acknowledgement remains tied to the Notice supplied at the time. Privacy is acknowledged as information about required processing; it is not optional marketing consent.
11. Contact
Email [email protected] or write to Propeller OOD, EIK 206840771, VAT BG206840771, Business Park Sofia 1, building 2, floor 7, Sofia 1766, Bulgaria.