Privacy Policy
Last updated October 21, 2026
Last updated October 21, 2026
This policy explains how Brimeo handles personal information on our website, brimeo.org. We collect as little as we can: our pages set no cookies and run no advertising or tracking tools. The site's fonts, scripts and videos come from brimeo.org itself, so the only other company your browser connects to is Calendly, for the booking calendar.
Brimeo ("Brimeo", "we", "us") is based in Colorado, USA, and is responsible for the personal information described in this policy. You can reach us at [email protected].
This policy covers brimeo.org. If your university uses Brimeo's AI office hours, how student and faculty information is handled inside the product is set out in our agreement with your university and in your university's own privacy notices. Questions about that can go to your university or to us.
The booking calendar is provided by Calendly. The calendar loads from Calendly when you scroll to the booking section, so at that point your browser connects to Calendly, which receives your IP address and device information and may set its own cookies. If you then book a call, Calendly collects your name, your email address, the time you choose and anything you type into the booking form, and shares that with us so we can hold the call.
We receive your email address, your message and anything you attach.
Our hosting provider, Cloudflare, processes your IP address, browser and device information, and the pages you request, so that it can deliver the site and protect it from abuse. This information may be kept briefly in security logs.
If you press "Pause motion", your browser remembers that choice in its local storage on your device. It isn't sent to us.
Some links, such as those in our Terms of Use, take you to other companies' websites. Once you follow a link, that company's own privacy policy applies.
Here is each kind of personal information we handle, why, and who helps us with it:
| What | Why we use it | Shared with |
|---|---|---|
| Booking details: name, email address, chosen time, anything you type in the booking form | To schedule and hold the call, and to follow up about it | Calendly; Zoho Mail; our video-meeting provider |
| Emails you send us and their attachments | To answer you and follow up | Zoho Mail |
| Technical data: IP address, browser and device details, pages requested | To deliver the website and protect it from abuse | Cloudflare; Calendly, once the calendar loads |
In particular, we use personal information:
We don't use it for targeted advertising, and we don't use it to profile you or to make automated decisions about you.
If you're in the European Economic Area or the United Kingdom, we rely on these legal bases:
We share personal information only with service providers that help us run Brimeo, and only as needed for the purposes above:
We may also disclose information if the law requires it, to protect our rights or someone's safety, or as part of a merger, acquisition or sale of our business, in which case this policy would continue to apply.
We do not sell personal information, and we do not share it for cross-context behavioral advertising.
We're based in the United States, and our service providers may process information in the United States and other countries. Where the law requires it, we rely on appropriate safeguards for these transfers, such as the European Commission's Standard Contractual Clauses or a provider's certification under the EU–U.S. Data Privacy Framework and its UK and Swiss extensions.
We keep booking details and email correspondence for as long as we need them for the conversation and any follow-up, and generally delete them within 24 months of our last contact, unless we go on to work together or the law requires us to keep them longer. Cloudflare keeps security logs for a short period under its own policies.
Depending on where you live, you may have the right to:
EEA and UK: you can also complain to your local data protection authority. We'd appreciate the chance to help first.
California and other U.S. states: you have the rights to know, correct and delete, and to opt out of the sale or sharing of personal information. We don't sell or share personal information, so there is nothing to opt out of, but we honor Global Privacy Control signals as an opt-out anyway. You can use an authorized agent to make a request for you.
Do Not Track and Global Privacy Control: because we don't track you, there's nothing for these browser settings to turn off. We honor them anyway: if your browser sends either signal, we treat it as a request to opt out of any sale of personal data, sharing and targeted advertising.
To make a request, email [email protected]. We may need to confirm your identity first, using information you've already given us. We'll respond within 45 days of receiving your request. If we need more time, we may extend that once by another 45 days where the law allows, and we'll tell you why. Where the law sets a shorter deadline, such as one month in the EEA and UK, we'll meet it. Requests are free, up to the number the law requires.
We're based in Colorado, and we apply the Colorado Privacy Act's protections to everyone who uses brimeo.org, whether or not the Act's size thresholds apply to us. Under the Act you have the right to:
We don't process sensitive data, including biometric data, through this website, and we don't sell personal data or use it for targeted advertising or profiling, including the data of anyone under 18.
Appeals. If we decline to act on your request, in whole or in part, we'll explain why. You can appeal by replying to our decision, or by emailing [email protected] with "Privacy appeal" in the subject, within 45 days of our decision. We'll tell you in writing what we've decided and why within 45 days of receiving your appeal. Where the law allows, we may extend that by up to another 60 days and tell you why. If we deny your appeal, you can contact the Colorado Attorney General at coag.gov/file-complaint.
brimeo.org is meant for universities, faculty and university students. It isn't directed to children under 16, and we don't knowingly collect their personal information. If you believe a child has given us personal information, email us and we'll delete it.
The website is served only over encrypted connections (HTTPS), we limit who on our team can see personal information, and we use established providers. No method of storing or sending information is completely secure, but we work to protect yours and will tell you if a breach affects you where the law requires it.
If we change this policy, we'll update the date at the top of this page. If a change is significant, we'll make it clear on the website, or tell you directly if we have your contact details. We won't use personal information we've already collected for a new purpose that isn't reasonably related to the ones described here without asking you first.
Brimeo · Colorado, USA · [email protected]