Data Privacy with a Cookieless Approach.

At Brainfish, we prioritize user privacy while delivering powerful insights through our analytics and AI support agents. We understand the importance of user control and transparency, which is why we provide full flexibility and control over data collection.

A Cookieless Approach

Unlike traditional analytics solutions that rely on cookies, Brainfish employs a cookieless tracking approach. This means we do not store cookies on user's devices to track their behavior. Instead, we use a combination of server-side tracking, local storage, and anonymized data collection techniques. This ensures that user privacy is respected and fully complies with privacy laws like GDPR.

By avoiding cookies, Brainfish eliminates the need for intrusive consent banners, providing a seamless user experience. Our method is less likely to be blocked by ad blockers, which often target cookie-based tracking solutions, resulting in more accurate and reliable data.

Brainfish is committed to transparency and user privacy. We collect specific data to enhance user experience and improve our services. Below is an overview of the types of data we collect:

1. User Interaction Data:

• Page Views: Information about the pages users visit on your website.
• Click Events: Details on elements users click, such as buttons or links.
• Session Duration: The length of time users spend on your site.

2. Behavioral Analytics:

• Navigation Paths: The sequence of pages users navigate through.
• Scroll Depth: How far users scroll down on a page.
• Search Queries: Customer support queries.

3. Technical Information:

• Device Type: Whether the user is on a desktop, tablet, or mobile device.
• Browser Type and Version: The web browser and its version used by the user.
• Operating System: The operating system running on the user's device.
• Screen Resolution: The display resolution of the user's device.

4. Geographical Data:

• Approximate Location: General geographic information based on IP address, such as city or country.

Screen Recording Without Compromising Privacy

Brainfish also includes screen recording functionality to capture user interactions with your website. Brainfish is designed to avoid capturing any Personally Identifiable Information (PII) or sensitive data.

To ensure privacy, Brainfish's screen recordings:

1. Redact sensitive information: We automatically suppress on-page text, input fields, and other elements that may contain sensitive data. This includes emails, names, phone numbers, or any other identifiable information.
2. De-identify users: By using anonymized identifiers instead of PII, we ensure that no personal data is exposed in our recordings.
3. Comply with privacy settings: Brainfish fully respects user's privacy preferences based of browser setting and does not collect data if Do-Not-Track (DNT) is enabled.

User Control and Data Privacy: Users have the right to:

1. Opt-Out of Screen Recording: Customers can easily choose to skip screen recording if they prefer not to have their interactions recorded. This ensures that users have complete control over their data.
2. Data Access Requests: We empower customers by allowing them to request access to any data collected about them. This ensures transparency and gives users the ability to review what information is stored.
3. Data Deletion on Request: Customers can request data deletion at any time. Brainfish ensures that these requests are processed promptly, guaranteeing that user's privacy preferences are fully respected.

FAQs

1. What kind of data does Brainfish track?

Brainfish tracks user interactions on your website to help you gain insights into customer behavior. This includes data like:

• Page Views: What pages users visit and how long they stay.
• Click Events: Elements users interact with, such as buttons and links.
• Search Queries: Customer search queries.
• Scroll Depth: How far down users scroll on a page.

We also collect technical data like device type, browser version, operating system, and screen resolution to optimize user experience.

2. Is Brainfish tracking GDPR compliant?

Yes, Brainfish is fully compliant with GDPR. We prioritize user privacy and ensure that all data collection methods align with global privacy standards. Additionally, Brainfish uses cookieless tracking, meaning no cookies are stored on user's devices. This approach reduces the need for intrusive consent banners.

3. How does Brainfish protect user privacy during screen recordings?

Brainfish's screen recording functionality is designed to avoid capturing any Personally Identifiable Information (PII). We automatically redact sensitive information from recordings, including email addresses, phone numbers, and other personal data. Additionally, users can opt out of screen recording entirely if they wish.

Below are examples of the types of information and corresponding regex rules used:

• Email Addresses: Regex: \b[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\.[A-Za-z]{2,}\b Example: john.doe@example.com → ****
• Phone Numbers: Regex: \b\d{3}[-.\s]??\d{3}[-.\s]??\d{4}\b Example: 123-456-7890 → ****

4. Can users opt out of being tracked by Brainfish?

==Yes, users have the option to== ==opt out== ==of tracking. Brainfish respects the== ==Do-Not-Track (DNT)== ==browser setting, so if a user has enabled DNT, we will automatically stop tracking any interactions for th==at session.

5. How can users request access to the data Brainfish has collected about them?

Users can request access to their data at any time. If a user wants to see what information has been collected, they can contact Brainfish. We provide a mechanism to deliver this data upon request.

6. Can users ask for their data to be deleted?

Yes, users can request that their data be deleted. Brainfish allows website owners to quickly remove all data related to a specific user upon request, ensuring compliance with privacy regulations.

7. Does Brainfish use cookies for tracking?

No, Brainfish uses a cookieless tracking approach. Instead of cookies, we rely on server-side tracking and anonymized data collection techniques. This provides a privacy-friendly way to gather insights without storing information on users' devices.

8. What is the benefit of cookieless tracking?

Cookieless tracking allows us to collect accurate analytics without relying on cookies. This means:

• No need for consent banners that interrupt user experience.
• Higher accuracy as data is not blocked by ad blockers.
• Full compliance with privacy laws without compromising data quality.

9. How long does Brainfish retain user data?

Brainfish retains collected data for a period necessary to provide analytics and insights to our customers. However, users can request their data to be deleted at any time, and it will be promptly removed from our systems.

10. How long are session recordings stored?

Session recordings are securely stored for a maximum duration of 365 days. After this period, recordings are automatically deleted to ensure data privacy and compliance.

11. How is sensitive information handled during session recording?

Sensitive information is obfuscated in real-time during recording using advanced regex patterns. This ensures that sensitive data is never exposed in the recordings.

12. Can customers define their own rules for obfuscating sensitive information?

Yes, customers can configure custom regex rules to meet their specific requirements for obfuscating sensitive information. This flexibility ensures compliance with unique privacy policies or regulatory needs.

13. What measures are in place to ensure no sensitive data is exposed?

Real-time obfuscation of PII ensures that identifiable or private details are redacted as they are detected. This process is automated and designed to minimize the risk of any sensitive data being recorded.