> For the complete documentation index, see [llms.txt](https://docs.ebrain.ai/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.ebrain.ai/account-and-settings/privacy-and-security.md).

# Privacy and security

eBrain is built so that you stay in control of your data and your accounts. This page explains, in plain language, how that works: nothing is sent or changed without your say-so, you decide which accounts are connected, your data is stored in Europe and encrypted, it is never used to train AI models, and everything is kept separate per workspace.

{% hint style="info" %}
The promise you'll see throughout eBrain: **"eBrain never stores your passwords and never acts without permission."**
{% endhint %}

## Tim asks before it acts

Tim, your assistant, can read your information freely, but it **never changes anything on your behalf without your explicit confirmation**. Whenever Tim wants to perform a write action, such as sending an email or creating a calendar event, it shows you an approval card (in web chat) or Approve / Decline buttons (on WhatsApp) describing exactly what it's about to do. Nothing happens until you approve.

* **No silent writes.** The action is held as "pending" and only runs the moment you approve it.
* **What you see is what runs.** The card describes the specific item and details; for email you can even edit the message before sending.
* **Reject means nothing happens.** Your data is left unchanged.
* **Reading is free; writing always asks first.** Searching your mail, checking your calendar, and reading tasks never need approval.

<table data-view="cards"><thead><tr><th>Topic</th><th data-card-target data-type="content-ref">Link</th></tr></thead><tbody><tr><td>Approve, reject, and edit before sending</td><td><a href="/pages/U5I52kkdwBkHiYY8zxEH">/pages/U5I52kkdwBkHiYY8zxEH</a></td></tr></tbody></table>

## You control your connected accounts

You choose which external tools eBrain works with, and you can connect or disconnect any of them at any time.

* Connections are made through **each provider's own secure sign-in and consent screen**. You log in there and approve the access, so eBrain never sees or stores your passwords.
* You can **disconnect** a service whenever you like. Disconnecting does **not** delete your data:

{% hint style="success" %}
**"Disconnecting won't delete your data. eBrain will simply stop syncing from this service."**
{% endhint %}

For the full list of services and how to add or remove them, see the page below.

<table data-view="cards"><thead><tr><th>Topic</th><th data-card-target data-type="content-ref">Link</th></tr></thead><tbody><tr><td>Connect and disconnect your tools</td><td><a href="/pages/FIBJv6fZUgUNT5RkB5cQ">/pages/FIBJv6fZUgUNT5RkB5cQ</a></td></tr></tbody></table>

## Where your data lives and how it's protected

A few things are true of your data everywhere in eBrain:

* **Stored in Europe.** Your data is kept on European servers.
* **Encrypted at rest and in transit.** Information is encrypted both while it's stored and while it's being transferred. This includes the stored authorization credentials for your connected accounts and your verified WhatsApp number.
* **Never used to train AI.** eBrain is a closed system: your data is never used to train AI models.

You never have to manage any of this yourself; it's handled for you behind the scenes.

## Review and close your active sessions

The **Security** page lets you see everywhere your account is signed in and sign out devices you no longer use.

{% stepper %}
{% step %}

## Open Security

Go to **Settings**, then open **Security** under "Your Account."
{% endstep %}

{% step %}

## Review active sessions

Each browser or device with access is listed, showing the browser or device type, the IP address, when the session started, and when it was last active. Your own session is marked **Current session**.
{% endstep %}

{% step %}

## Terminate other sessions

Click **Terminate other sessions** to sign out every other browser and device at once. Your current session stays active. A confirmation dialog warns that "Every other browser and device will need to sign in again," and a success message tells you how many sessions were ended.
{% endstep %}
{% endstepper %}

{% hint style="warning" %}
If you ever notice a session you don't recognize, use **Terminate other sessions** and then sign in again on your trusted device.
{% endhint %}

## Your data is scoped to your workspace

eBrain keeps each company (workspace) separate. When you switch companies, the entire context switches with it:

* Connected accounts, teammates, billing, and data are **scoped to the company you're currently in**.
* A WhatsApp number can be **linked to only one company at a time**.
* Some connections are **personal to you** (for example, your own mailbox), and you only ever see and control your own.

<table data-view="cards"><thead><tr><th>Topic</th><th data-card-target data-type="content-ref">Link</th></tr></thead><tbody><tr><td>How workspaces and roles work</td><td><a href="/pages/YfN6WEtt82ChZ7vWGPwc">/pages/YfN6WEtt82ChZ7vWGPwc</a></td></tr></tbody></table>

## What Tim remembers, and how to forget it

Tim remembers useful facts and preferences long-term so you don't have to re-explain yourself. You can review, edit, and permanently delete anything Tim remembers from the **Capabilities** page in Settings. Deleting a memory makes Tim forget it permanently.

<table data-view="cards"><thead><tr><th>Topic</th><th data-card-target data-type="content-ref">Link</th></tr></thead><tbody><tr><td>Manage and delete what Tim remembers</td><td><a href="/pages/z6JeBtmzo81Jodbl2onX">/pages/z6JeBtmzo81Jodbl2onX</a></td></tr></tbody></table>

## At a glance

| Control                | What it means for you                                                                                 |
| ---------------------- | ----------------------------------------------------------------------------------------------------- |
| Approval before action | Tim never sends or changes anything without your confirmation.                                        |
| Provider sign-in       | You log in on each provider's own secure screen; eBrain never stores your passwords.                  |
| Disconnect anytime     | Removing a connection stops syncing but does not delete your data.                                    |
| Stored in Europe       | Your data is kept on European servers.                                                                |
| Encryption             | Encrypted at rest and in transit; stored credentials and your verified WhatsApp number are protected. |
| No AI training         | eBrain is a closed system; your data is never used to train AI models.                                |
| Session control        | See every signed-in device and end all other sessions in one click.                                   |
| Workspace isolation    | Accounts, teammates, billing, and data are separate per company.                                      |


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.ebrain.ai/account-and-settings/privacy-and-security.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.