Legal
Privacy Policy
Last updated: September 26, 2026
Who controls your data
PIERRE MOUCHAN, an entrepreneur individuel (EI) operating as Obsibrain from 77 rue de Lagny, 75020 Paris, France, controls the personal data described in this policy. Contact contact@obsibrain.com for privacy questions or requests.
Local-first product data
Obsibrain stores your notes, tasks, projects, templates, and dashboard content inside your Obsidian vault. Core workflows do not send vault content to Obsibrain servers.
License activation and periodic validation send your purchase email, license key, plugin version, and validation status over the internet. Your Markdown files remain in your vault if a license becomes invalid.
Website and security data
Cloudflare hosts the website and can process IP addresses, request metadata, device information, and security logs to deliver and protect the service. We use this data to operate the website, prevent abuse, and diagnose failures.
With your analytics choice, we use PostHog to measure checkout activity and attribution. After a successful demo or pricing signup, we use a hashed email identifier to link lead and purchase events across devices. We store first-touch campaign data in a browser cookie for up to 180 days. The site also stores an earned discount code and an offer dismissal choice in browser storage. The plugin reports completed onboarding to PostHog with a hashed email identifier. To change your analytics choice, clear browser data for this site and choose again when the banner reappears. Checkout works if you reject analytics cookies. Embedded services can receive request data when their content loads.
Purchases, licenses, and refunds
Polar acts as merchant of record and authorized reseller. Polar processes checkout, payment, taxes, invoices, customer records, license delivery, and refunds under its own privacy policy.
Obsibrain receives the purchase details needed to deliver and validate your license, provide support, prevent fraud, and process an unconditional refund requested within 30 calendar days. Legacy purchases can remain recorded in LemonSqueezy and MailerLite while those licenses remain supported.
Demo, marketing, and customer records
MailerLite receives your email address when you request the demo. Joining the demo group triggers delivery, follow-up messages, and offers with your consent. You can unsubscribe through an email link or contact us.
When you request a pricing code and opt in to pricing emails, MailerLite receives your email address and adds you to the Pricing Intent group. The site shows the code after MailerLite accepts the signup. Pricing follow-ups and offers can follow; you can unsubscribe at any time.
MailerLite also stores customer and legacy subscriber records. The website reads the customer group only to calculate an aggregate customer count. Individual MailerLite records never reach the browser.
Support, feedback, and community
Tally and our email provider process information that you submit for support or feedback. This can include your email, purchase details, diagnostic information, messages, and attachments. Do not submit vault content, license keys, or unrelated personal data.
Discord processes your account and community activity when you use the included community access. Discord rules and privacy terms also apply.
Testimonials, video, and roadmap
Senja supplies testimonial widgets, YouTube supplies the product video, and Featurebase hosts the public roadmap. These providers can receive IP addresses, device data, and interaction data when you load or use their services.
We publish testimonials only with the contributor’s authorization. Contact us to request withdrawal of a testimonial that identifies you.
Recent purchases
The website can display aggregate customer totals and recent purchases. Public purchase entries include the product and purchase date. If available, they also show the buyer’s first name and billing city. We do not publish full names, email addresses, street addresses, postal codes, or order identifiers.
Optional AI Alpha
AI Alpha is optional. After per-vault consent, prompts, instructions, and vault excerpts returned by read-only tools can reach the AI provider that you select through Pi. Core workflows do not require AI.
Obsibrain does not select your provider or promise local AI processing. Your provider controls its retention and account practices. Pi stores provider credentials and session history separately from Obsibrain.
Legal bases
We process data to perform our contract, meet legal obligations, obtain consent for optional communications and tracking, and pursue legitimate interests in security, support, fraud prevention, and service improvement.
Retention
Accounting and transaction records are retained for the legally required period, normally ten years. License records remain during the license relationship and applicable claim period. Support records are normally deleted within two years after closure.
Demo and marketing contacts remain until you unsubscribe. A minimal suppression record can remain to respect that choice. Customer marketing data can remain during the relationship and for three years after the last customer contact. Aggregate website responses are cached for five minutes.
International transfers
Some providers process data outside the European Economic Area. Where required, transfers rely on an adequacy decision, the EU-US Data Privacy Framework, or Standard Contractual Clauses. Contact us to request information about applicable safeguards.
Your rights
You can request access, correction, deletion, restriction, portability, or objection where applicable. You can withdraw consent without affecting earlier lawful processing. Send requests to contact@obsibrain.com.
You can also file a complaint with the French data protection authority, CNIL, at cnil.fr. We do not use personal data for automated decisions that produce legal or similarly significant effects.
Policy changes
We will update this page when processing changes materially. The date above identifies the current version. Material changes will not retroactively reduce your statutory rights.
Provider policies
Review the providers’ policies for more information about their processing.