pebrik

Privacy policy

Last updated 20 October 2026

Pebrik is an AI workspace for companies: people chat with AI models, work with their files, and build agents and flows. This policy says what personal data Pebrik keeps, why, who else sees it, how long it’s kept and what you can ask for.

Who we are

Pebrik is run by PEBRIK LTD, a company registered in England and Wales (company number 17529361), whose registered office is at Suite RA01, 195-197 Wood Street, London E17 3NU. PEBRIK LTD is responsible for your personal data (its controller, under UK data protection law). Write to [email protected] with any question or request about your data.

If your employer or another organisation gave you access, they decide what Pebrik is used for, who can use it and how long chats and files are kept. For what you and your colleagues put into Pebrik, we act on their instructions.

What we keep

• Your account: your name and email address, your role and groups in your company, and your preferences, such as your time zone and the voice you chose.
• How you sign in: when and how you signed in, the browser and system, and the IP address and country it came from; the browsers you’re signed in on; the passkeys you add (only their public keys: your fingerprint or face never leaves your device); and, if you sign in with Google or Microsoft, their identifier for you. Sign-in codes are kept scrambled, for 10 minutes.
• What you put in: your chats, the files you upload or make, and the projects, agents, skills and flows you build; what the AI remembers about you, if memory is on; and what you say in voice conversations and dictation, as text in your chats. Recordings aren’t kept.
• Usage: which models and tools you used and what they cost, for spending limits and your company’s usage pages.
• Activity: a record your company’s admins can see of changes to settings, sign-ins and some actions, such as deleting a chat.
• Messages: the emails we send you (sign-in codes, invitations and notifications) and, if your company uses agents on WhatsApp, your phone number and your messages with them.

Why we use it

• To give you and your company Pebrik and what you ask of it.
• To keep it secure: checking who signs in, limiting repeated tries, and keeping the Activity record.
• To keep within your company’s spending limits and work out what it owes.
• To answer your questions and tell you about changes to Pebrik.

We use your data because we need it to provide Pebrik, or because your company and we have a legitimate interest in running it securely. We don’t sell personal data, show adverts or use your chats and files to train AI models.

Who else sees it

Pebrik relies on these companies, each handling data only to provide their service:

• Amazon Web Services, in London: the servers, database, file storage and backups, sending emails, and running code for the AI.
• Cloudflare carries all traffic to Pebrik and protects it, so it sees addresses and requests.
• OpenAI, Anthropic and Google receive what a reply needs (your message, the chat so far, files and tool results) to produce it, under their terms for business customers, which don’t let them train their models on it. OpenAI also turns files into searchable form and speech into text, and speaks in voice conversations.
• Brave and Tavily receive the search words when the AI searches the web, which may include words from your chat.
• Google and Microsoft tell us your name and email address if you sign in with them. If your company connects Google Drive, Microsoft 365 or other services, Pebrik reads and changes files there with your permission.
• Meta, through WhatsApp, only if your company uses agents on WhatsApp.

We give data to anyone else only when the law requires it.

Where it’s kept

Pebrik keeps your data in the United Kingdom, on Amazon Web Services in London. AI model and search providers may handle the part they receive in the United States or elsewhere, with the safeguards UK law requires, such as the UK’s data bridge or standard contract clauses in their terms.

How long it’s kept

• Chats and files: until you or your company delete them, or as your company’s retention settings say.
• Your account: while your company uses Pebrik. If an admin removes you, your account and work are kept so they can bring you back, until your company asks for them to be deleted.
• Each signed-in browser: 30 days from its last use. Sign-in codes: 10 minutes.
• Backups: 30 days.
• Usage and Activity records: while your company uses Pebrik.

Cookies and your browser

Pebrik uses only the cookies it needs to work, and none for adverts or analytics:

• one that keeps you signed in, for 30 days from your last visit;
• short-lived ones while you sign in with Google, Microsoft or a passkey, for up to 10 minutes;
• one that remembers whether you hid the sidebar, for a year;
• Cloudflare’s own, which protect the site from attacks.

Pebrik also keeps a few choices in your browser, on your device only: light or dark, your microphone, which projects are open in the sidebar, and whether you closed the hint about installing the app.

Your rights

You can ask to see the personal data we hold about you, to correct it, to delete it, to limit or object to how we use it, and to have a copy to take elsewhere. Write to [email protected]and we’ll answer within a month. If your company controls the data you ask about, we’ll pass your request to them and help them answer.

You can also complain to the Information Commissioner’s Office, the UK’s data protection regulator, at ico.org.uk or on 0303 123 1113.

Children

Pebrik is for work and isn’t meant for anyone under 18.

Changes

When this policy changes, we’ll update this page and its date, and tell you in Pebrik or by email about changes that matter.