Privacy Policy

1. Scope of this policy

This policy applies to braintrustcapital.com and the pages and forms hosted on it. It describes how Braintrust Capital® ("we," "us," "our") handles information about website visitors and prospective clients.

Separate notices may apply where a relationship is governed by its own agreements or by a third party's platform. In particular, the client portal is operated by an outside provider on its own systems, and any custodian, broker-dealer, planning platform, or other institution you engage will provide its own privacy notice governing the information it collects and holds. Where those notices apply, they control that provider's own practices, not ours.

2. Information we collect

Information you give us directly

When you submit the consultation request form on this site, we collect the information you enter: your first and last name, email address, an optional phone number, the topic you select, and the message you write. You choose what to include — please do not send account numbers, Social Security numbers, passwords, or other sensitive identifiers through the website form.

If you email us or contact us by phone, we receive whatever information you choose to provide in that communication.

Information collected automatically

Like most websites, our hosting infrastructure records basic technical data when a page is requested, which may include:

• IP address and general location inferred from it
• Browser type, operating system, and device type
• The page requested, referring URL, and date and time of the request
• Server response and error information used for reliability and abuse prevention

3. How we use information

We use the information described above to:

• Respond to consultation requests and other inquiries
• Communicate with you about services you have asked about
• Maintain an internal record of the inquiry and our follow-up
• Operate, secure, and troubleshoot the website
• Meet recordkeeping, supervisory, and other legal or regulatory obligations that apply to our business

We do not use website form submissions to build advertising audiences, and we do not run retargeting or behavioral advertising campaigns from this site.

4. Cookies & similar technologies

This website is intentionally light on tracking. We do not set advertising cookies, and we do not deploy third-party marketing pixels, retargeting tags, or cross-site ad trackers on the public marketing pages.

What may be stored on your device

• Strictly necessary storage. Cookies or browser storage needed to serve pages securely, balance traffic, and protect against abuse. These are set by our hosting infrastructure and are required for the site to function.
• Your consent record. When you make a cookie choice, we save it in a first-party cookie named btc_consent_v1 (and in matching browser storage) for up to 180 days. It is scoped to braintrustcapital.com and its subdomains so your choice carries across our pages and sessions, and it holds only your category selections, any individual vendor overrides, the version of our consent configuration in force, and the time you made the choice — no identifiers and no tracking value. Clearing it simply causes the banner to ask again.
• Local consent audit log. To let us verify that gating works as described, your browser keeps a small local record named btc_consent_audit_v1 listing your consent decisions, any tag our runtime guard blocked and why it was blocked, and timestamps. It contains no identifiers, no advertising values, and no personal information. You can review it directly in the preferences center under “Consent activity log” — with search and allowed/blocked filters — and download it as a CSV file or clear it at any time.
• Confirming updated choices. If we change the list of services covered by these categories, the consent configuration version changes and the banner reappears so you can confirm or update your choices under the new rules.
• Audit records sent to us. So that we can confirm gating works in production and not only on your device, these same technical audit entries (event name, category or vendor, block reason, page path, consent configuration version, and timestamp) are sent in small batches to our own backend over an encrypted connection. They are stored in our first-party system, are readable only by our administrators, are never shared with advertising networks, and cannot be used to identify you.
• Preference storage. If you use the signed-in application areas of our site, your browser may store a session token and interface preferences (such as a saved theme) so you are not signed out or reset on every visit. This storage is functional, not advertising-related.
• Embedded fonts. Our pages load typefaces from Google Fonts. Requesting a font file discloses your IP address and browser information to Google as the font host. Google states it does not use Google Fonts requests to build advertising profiles; its handling of that request is governed by its own privacy policy.

Your cookie controls

You can set your choices for each optional category at any time using our preferences center. Your selection is remembered in the first-party consent cookie described above, so it persists across visits and applies everywhere on this site. If you have this site open in more than one browser tab, a change you save is applied to every open tab immediately:

Manage cookie preferences Reset my consent

Resetting clears the btc_consent_v1 record entirely, withdraws every optional category and vendor permission, shuts down any analytics tool that was running, and asks you to choose again — in this tab and any other tab you have open.

You can also block or delete cookies and clear local storage through your browser settings, and most browsers offer a "Do Not Track" or global privacy control signal. Because we do not run cross-site behavioral tracking on this site, there is nothing for us to disable in response to such a signal. Blocking strictly necessary storage may cause parts of the site — particularly signed-in areas — to stop working.

5. Website analytics & search tools

We want to be precise here rather than generic:

• No third-party advertising analytics. The public pages of this site do not load Google Analytics, Meta Pixel, TikTok, LinkedIn Insight, Hotjar, or comparable behavioral analytics or ad-tech scripts.
• Google Search Console. We use Search Console to see how our pages perform in Google Search. It reports aggregate, de-identified data — queries, impressions, clicks, and crawl or indexing status — and sets no cookie on your browser.
• Server and platform logs. Our hosting platform generates aggregate traffic and error logs used for performance and security. We review these in aggregate and do not attempt to identify individual visitors from them.

If we later add a cookie-based analytics tool, we will update this section and the effective date above before or at the time it goes live.

6. When we share information

We share personal information only in these circumstances:

• Service providers. Vendors that host our site, store our records, and deliver our email, acting on our instructions under confidentiality obligations.
• At your direction. With professionals you ask us to coordinate with, such as your attorney or CPA, or with an institution you have asked us to contact on your behalf.
• Legal and regulatory. Where required by law, subpoena, court order, or a lawful request from a regulator or examiner, or to protect our rights, safety, or property.
• Business transfer. In connection with a merger, acquisition, or transfer of our business, subject to this policy's commitments.

We never sell personal information, and we do not license it to data brokers.

7. Service providers

The website relies on a small number of infrastructure providers. Broadly, these fall into these categories:

• Website hosting and content delivery — serving pages and static assets, and generating security and reliability logs
• Database and application backend — securely storing form submissions and internal records with access controls in place
• Transactional email delivery — routing form notifications to our team
• Web font delivery — Google Fonts, as described in Section 4
• Search performance reporting — Google Search Console, as described in Section 5

Each provider is engaged to process information for us for the purposes described in this policy and not for its own independent marketing purposes.

8. Data retention

We keep consultation requests and related correspondence for as long as needed to respond, to maintain a record of the relationship or inquiry, and to satisfy the recordkeeping and supervisory requirements that apply to our business — after which they are deleted or de-identified in the ordinary course. Technical server logs are retained for a much shorter period, consistent with our hosting providers' operational and security needs. You may ask us to delete an inquiry that did not lead to a relationship; see Section 10.

9. How we protect information

We maintain administrative, technical, and physical safeguards designed to protect the information in our possession. The site is served exclusively over encrypted HTTPS connections, form submissions travel over that encrypted connection, and access to stored submissions is limited to authorized personnel through per-user authentication and database-level access rules.

10. Your choices & rights

You can, at any time:

• Ask us what information we hold about you from your website inquiry
• Ask us to correct inaccurate contact information
• Ask us to delete an inquiry that did not result in a client relationship, subject to any recordkeeping obligations that require us to retain it
• Ask us to stop sending you non-essential communications — every marketing email we send includes an unsubscribe option, and you can also simply reply and ask
• Decline to provide information, keeping in mind that we may not be able to respond to your request without it

Depending on where you live, you may have additional rights under state or non-U.S. privacy law, including rights of access, correction, deletion, portability, and the right not to be discriminated against for exercising them. To exercise any of these, contact us using Section 14; we may need to verify your identity before acting, and we will respond within the timeframe the applicable law requires.

11. Children's privacy

This website is directed to adults. We do not knowingly collect personal information from children under 13. If you believe a child has provided information through this site, contact us and we will delete it.

12. Third-party links

Our site links to third-party destinations, including the client portal and other institutions' websites. We do not control those sites and are not responsible for their content or privacy practices. Review the privacy notice of any site you visit through our links.

13. Changes to this policy

We may update this policy to reflect changes in our practices, technology, or legal requirements. When we do, we will revise the "Last updated" date at the top of this page. Material changes will be reflected on this page; please check back periodically.

14. Contact us

Questions about this policy, or requests regarding your information, can be sent to:

Braintrust Capital®
Attn: Privacy
San Antonio, Texas
Email: roger@braintrustcapital.net

You can also reach us through the consultation request form.