Legal

Privacy Policy

Last updated: September 26, 2026

PIERRE MOUCHAN, an entrepreneur individuel (EI) operating as Obsibrain from 77 rue de Lagny, 75020 Paris, France, controls the personal data described in this policy. Contact contact@obsibrain.com for privacy questions or requests.

Obsibrain stores your notes, tasks, projects, templates, and dashboard content inside your Obsidian vault. Core workflows do not send vault content to Obsibrain servers.

License activation and periodic validation send your purchase email, license key, plugin version, and validation status over the internet. Your Markdown files remain in your vault if a license becomes invalid.

Cloudflare hosts the website and can process IP addresses, request metadata, device information, and security logs to deliver and protect the service. We use this data to operate the website, prevent abuse, and diagnose failures.

With your analytics choice, we use PostHog to measure checkout activity and attribution. After a successful demo or pricing signup, we use a hashed email identifier to link lead and purchase events across devices. We store first-touch campaign data in a browser cookie for up to 180 days. The site also stores an earned discount code and an offer dismissal choice in browser storage. The plugin reports completed onboarding to PostHog with a hashed email identifier. To change your analytics choice, clear browser data for this site and choose again when the banner reappears. Checkout works if you reject analytics cookies. Embedded services can receive request data when their content loads.

Polar acts as merchant of record and authorized reseller. Polar processes checkout, payment, taxes, invoices, customer records, license delivery, and refunds under its own privacy policy.

Obsibrain receives the purchase details needed to deliver and validate your license, provide support, prevent fraud, and process an unconditional refund requested within 30 calendar days. Legacy purchases can remain recorded in LemonSqueezy and MailerLite while those licenses remain supported.

MailerLite receives your email address when you request the demo. Joining the demo group triggers delivery, follow-up messages, and offers with your consent. You can unsubscribe through an email link or contact us.

When you request a pricing code and opt in to pricing emails, MailerLite receives your email address and adds you to the Pricing Intent group. The site shows the code after MailerLite accepts the signup. Pricing follow-ups and offers can follow; you can unsubscribe at any time.

MailerLite also stores customer and legacy subscriber records. The website reads the customer group only to calculate an aggregate customer count. Individual MailerLite records never reach the browser.

Tally and our email provider process information that you submit for support or feedback. This can include your email, purchase details, diagnostic information, messages, and attachments. Do not submit vault content, license keys, or unrelated personal data.

Discord processes your account and community activity when you use the included community access. Discord rules and privacy terms also apply.

Senja supplies testimonial widgets, YouTube supplies the product video, and Featurebase hosts the public roadmap. These providers can receive IP addresses, device data, and interaction data when you load or use their services.

We publish testimonials only with the contributor’s authorization. Contact us to request withdrawal of a testimonial that identifies you.

The website can display aggregate customer totals and recent purchases. Public purchase entries include the product and purchase date. If available, they also show the buyer’s first name and billing city. We do not publish full names, email addresses, street addresses, postal codes, or order identifiers.

AI Alpha is optional. After per-vault consent, prompts, instructions, and vault excerpts returned by read-only tools can reach the AI provider that you select through Pi. Core workflows do not require AI.

Obsibrain does not select your provider or promise local AI processing. Your provider controls its retention and account practices. Pi stores provider credentials and session history separately from Obsibrain.

We process data to perform our contract, meet legal obligations, obtain consent for optional communications and tracking, and pursue legitimate interests in security, support, fraud prevention, and service improvement.

Accounting and transaction records are retained for the legally required period, normally ten years. License records remain during the license relationship and applicable claim period. Support records are normally deleted within two years after closure.

Demo and marketing contacts remain until you unsubscribe. A minimal suppression record can remain to respect that choice. Customer marketing data can remain during the relationship and for three years after the last customer contact. Aggregate website responses are cached for five minutes.

Some providers process data outside the European Economic Area. Where required, transfers rely on an adequacy decision, the EU-US Data Privacy Framework, or Standard Contractual Clauses. Contact us to request information about applicable safeguards.

You can request access, correction, deletion, restriction, portability, or objection where applicable. You can withdraw consent without affecting earlier lawful processing. Send requests to contact@obsibrain.com.

You can also file a complaint with the French data protection authority, CNIL, at cnil.fr. We do not use personal data for automated decisions that produce legal or similarly significant effects.

We will update this page when processing changes materially. The date above identifies the current version. Material changes will not retroactively reduce your statutory rights.

Obsibrain is an independent plugin for Obsidian. Obsibrain is not affiliated with or endorsed by Obsidian.

Built with 💙 by @pierremouchan

Copyright © 2026