Privacy Policy

Effective 2026-08-26 · Cerebro Technologies, a product of MikeNBen, LLC ("we")

This policy describes what we collect when you use Cerebro (cerebroradar.com, the API and the MCP endpoint), why, and what your rights are. The tender and award data you search is public procurement information about organizations, not personal data we collect about you.

1. What we collect

Account data: your email address, plan, subscription status, and the timestamps of account events (created, last sign-in, terms acceptance).
Payment data: handled entirely by Stripe. We never see or store card numbers; we store only your Stripe customer reference and subscription status.
Usage data: queries you run (search terms and filters), pages viewed, API/MCP call counts, and standard technical logs (IP address, timestamps). We use this to operate the Service, enforce plan limits, prevent abuse, and understand which features matter.
Your saved work: stars, "applied" marks, seen-state and saved searches, stored per account so the Service can show them back to you (and email you digests if you opt in).

2. What we do not do

We do not sell or rent your data. We do not run advertising or third-party analytics trackers. The only cookie we set is the session cookie that keeps you signed in.

3. Processors we rely on

Stripe (payments and billing)
Cloudflare (DNS, TLS and network proxying)
Transactional email provider (delivery of sign-in links and digests)

Each processes data only as needed to provide its function.

4. Retention and deletion

Account and usage data are kept while your account exists and for a reasonable period afterwards for security and accounting. You can delete your account yourself on the Account page: your stars, saved searches and sign-in data are erased and your email is anonymized. Invoicing records held by Stripe are retained as required by tax law. You can also request deletion by emailing [email protected].

5. Your rights

Depending on where you live (including under the GDPR), you have the right to access, correct, export and erase your personal data, and to object to or restrict certain processing. Write to [email protected] and we will act on it promptly. If you believe we handle your data unlawfully, you can complain to your local data protection authority.

6. Security

Sign-in uses single-use, expiring email links; no passwords are stored. Sessions are signed. Access to production data is limited to the operator. No system is perfectly secure; if a breach affects your data, we will notify you without undue delay.

7. Changes

If this policy changes materially, we announce it by email or in the app before it takes effect.

8. Contact

MikeNBen, LLC · [email protected]