This Privacy Notice for Briefly ("we," "us," or "our") describes how and why we might access, collect, store, use, and/or share ("process") your personal information when you use our services ("Services"), including when you:

• Visit our website or any website of ours that links to this Privacy Notice
• Use Briefly — an AI-powered workspace that processes uploaded documents to generate structured summaries, statistical data, and strategic analysis modules
• Engage with us in other related ways, including any marketing or events

Questions or concerns? Reading this Privacy Notice will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please do not use our Services. If you have questions, contact us at hartmann.tech.dev@gmail.com.

1. What Information Do We Collect?

Personal information you disclose to us

We collect personal information that you voluntarily provide to us when you register on the Services, express an interest in obtaining information about us or our products and Services, when you participate in activities on the Services, or otherwise when you contact us.

The personal information we collect may include:

• Names
• Email addresses
• Usernames

Sensitive Information. We do not process sensitive information.

Payment Data. We may collect data necessary to process your payment if you choose to make purchases, such as your payment instrument number and associated security code. All payment data is handled and stored by Stripe. You may find their privacy notice here: https://stripe.com/privacy.

Social Media Login Data. We may provide you with the option to register using your existing social media account details, like your Google account. If you choose to register this way, we will collect certain profile information from the social media provider, as described in the section "How Do We Handle Your Social Logins?" below.

All personal information that you provide to us must be true, complete, and accurate.

Information automatically collected

We automatically collect certain information when you visit, use, or navigate the Services. This information does not reveal your specific identity but may include device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, and other technical information.

Log and Usage Data. Our servers automatically collect log data when you access or use our Services, which may include your IP address, device information, browser type, and information about your activity (such as date/time stamps, pages viewed, and features used).

Google API. Our use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

2. How Do We Process Your Information?

We process your personal information for the following purposes:

• To facilitate account creation and authentication — so you can create and log in to your account.
• To process payments — to fulfill subscription orders and manage billing.
• To provide AI-powered document analysis — to process documents you upload and return structured summaries and analysis.
• To request feedback — to contact you about your use of our Services.
• To protect our Services — as part of our efforts to keep the Services safe and secure, including fraud monitoring and prevention.
• To save or protect an individual's vital interest — when necessary to prevent harm.

3. What Legal Bases Do We Rely On?

If you are located in the EU or UK, the GDPR requires us to explain the valid legal bases we rely on to process your personal information:

• Consent — where you have given us permission to use your personal information for a specific purpose. You can withdraw your consent at any time.
• Contract Performance — where processing is necessary to fulfill our subscription contract with you.
• Legitimate Interests — where processing is reasonably necessary to achieve our legitimate business interests (e.g., diagnosing problems, preventing fraud, improving user experience).
• Legal Obligations — where processing is necessary for compliance with our legal obligations.
• Vital Interests — where processing is necessary to protect someone's vital interests.

4. When and With Whom Do We Share Your Information?

We may share your personal information in the following situations:

• Service Providers — we share information with Supabase (authentication and database), Stripe (payment processing), and Anthropic (AI document processing) pursuant to written contracts.
• Business Transfers — we may share or transfer your information in connection with any merger, sale of company assets, financing, or acquisition of all or a portion of our business.

5. Do We Offer AI-Based Products?

Yes. As part of our Services, we offer products, features, or tools powered by artificial intelligence through third-party service providers, including Anthropic. Your input (uploaded documents) and output (generated summaries) will be processed by these AI Service Providers to enable your use of our AI Products. You must not use the AI Products in any way that violates the terms or policies of any AI Service Provider.

Our AI Products are designed for: document analysis and structured summary generation.

6. How Do We Handle Your Social Logins?

Our Services offer you the ability to register and log in using your third-party social media account details (such as Google). Where you choose to do this, we will receive certain profile information from your social media provider, which may include your name, email address, and profile picture.

We will use the information we receive only for the purposes described in this Privacy Notice. We do not control, and are not responsible for, other uses of your personal information by your third-party social media provider.

7. How Long Do We Keep Your Information?

We will only keep your personal information for as long as you have an account with us, unless a longer retention period is required by law. When you delete your account, we will delete your personal information from our active databases.

If we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize it, or securely store it and isolate it from further processing until deletion is possible.

8. How Do We Keep Your Information Safe?

We have implemented appropriate technical and organizational security measures designed to protect your personal information, including:

• JWT-based authentication via Supabase with Row Level Security (RLS)
• All payment data handled exclusively by Stripe — we never store raw card numbers
• HTTPS encryption for all data in transit
• API endpoints protected by authentication requirements

However, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure. Transmission of personal information to and from our Services is at your own risk.

9. What Are Your Privacy Rights?

If you are located in the EEA, UK, Switzerland, or Canada, you have certain rights under applicable data protection laws, including:

• The right to request access to and obtain a copy of your personal information
• The right to request rectification or erasure
• The right to restrict the processing of your personal information
• The right to data portability
• The right to object to the processing of your personal information

If you are located in the EEA or UK and believe we are unlawfully processing your personal information, you have the right to complain to your Member State data protection authority or the UK data protection authority.

Account Information

You can delete your account at any time from within the Briefly app (right panel → Delete account). Upon deletion, we will remove your account and information from our active databases.

For questions about your privacy rights, email us at hartmann.tech.dev@gmail.com.

10. Controls for Do-Not-Track Features

Most web browsers include a Do-Not-Track ("DNT") feature. As no uniform technology standard for recognizing DNT signals has been finalized, we do not currently respond to DNT browser signals.

Global Privacy Control: We recognize and honor Global Privacy Control (GPC) signals. If you use a browser or extension that supports GPC, we will treat this as a valid request to opt out of the sale or sharing of your personal information for targeted advertising purposes under applicable state privacy laws, including CCPA.

11. Do United States Residents Have Specific Privacy Rights?

If you are a resident of California, Colorado, Connecticut, or other US states with privacy laws, you may have the right to request access to, correct, or delete your personal information, and to withdraw consent to our processing of your personal information.

Categories of Personal Information We Collect

We have not sold or shared any personal information to third parties for a business or commercial purpose in the preceding twelve (12) months, and we will not do so in the future.

How to Exercise Your Rights

To exercise your rights, email us at hartmann.tech.dev@gmail.com. We will honor your opt-out preferences if you enact the GPC opt-out signal on your browser.

12. Do We Make Updates to This Notice?

Yes, we will update this notice as necessary to stay compliant with relevant laws. The updated version will be indicated by an updated date at the top. If we make material changes, we may notify you by prominently posting a notice or by sending you a notification directly.

13. How Can You Contact Us?

If you have questions or comments about this notice, email us at hartmann.tech.dev@gmail.com.

14. How Can You Review, Update, or Delete Your Data?

Based on the applicable laws of your country, you may have the right to request access to the personal information we collect from you, correct inaccuracies, or delete your personal information. You can delete your account directly within the Briefly app at any time. For other requests, email us at hartmann.tech.dev@gmail.com.