Privacy Policy

1. Introduction

BriefGenius ("we," "our," or "us") operates the website briefgenius.io and the BriefGenius application (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. By using the Service, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Information You Provide

We collect information you provide directly to us, including:

• Account Information: When you create an account, we collect your email address and authentication credentials. If you sign up through a third-party provider (e.g., Google), we receive your name and email address from that provider.
• Billing Information: When you subscribe to a paid plan, our payment processor (Stripe) collects your payment information. We do not directly store credit card numbers or bank account details on our servers.
• Content Data: Keywords, preferences, and settings you input when generating content briefs. This includes target keywords, audience descriptions, tone preferences, and competitor URLs you provide.
• Generated Briefs: The content briefs generated by our AI are stored in your account so you can access, export, and manage them.
• Communications: When you contact us for support or feedback, we collect the content of your messages and any associated metadata.

2.2 Information We Collect Automatically

When you use our Service, we automatically collect certain information:

• Usage Data: Information about how you use the Service, including pages visited, features used, briefs generated, and actions taken within the application.
• Device Information: Browser type, operating system, device type, screen resolution, and language preferences.
• Log Data: IP address, access times, referring URLs, and pages viewed.
• Cookies and Similar Technologies: We use essential cookies for authentication and session management, and analytics cookies to understand Service usage. See Section 7 for details.

3. How We Use Your Information

We use the information we collect for the following purposes:

• To provide, maintain, and improve the Service, including generating AI-powered content briefs
• To process payments and manage your subscription
• To send you technical notices, updates, security alerts, and administrative messages
• To respond to your comments, questions, and support requests
• To monitor and analyze trends, usage, and activities to improve the Service
• To detect, prevent, and address technical issues, fraud, and abuse
• To comply with legal obligations and enforce our terms

4. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

• Service Providers: We share information with third-party service providers who perform services on our behalf, including Stripe (payment processing), Supabase (database and authentication), Anthropic (AI model provider for brief generation), and Vercel (hosting). These providers are contractually obligated to protect your information and use it only to provide services to us.
• Legal Requirements: We may disclose your information if required by law, regulation, legal process, or governmental request.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.
• With Your Consent: We may share information when you direct us to or provide explicit consent.

5. AI-Generated Content and Data Processing

When you use BriefGenius to generate content briefs, your input (keywords, preferences, and settings) is sent to our AI provider (Anthropic) for processing. Important details:

• Your inputs are used solely to generate your content briefs and are not used to train AI models.
• Generated briefs are stored in your account and are not shared with other users or made public (unless you explicitly share them via a shareable link).
• You retain full ownership of all content briefs generated using the Service.
• We do not use your generated content to train, improve, or develop our AI models or those of our providers.

6. Data Retention

We retain your account information and generated content briefs for as long as your account is active. If you delete your account, we will delete your personal information and generated briefs within 30 days, except where retention is required by law. Usage data and analytics are retained in aggregated, anonymized form for up to 24 months for service improvement purposes.

7. Cookies and Tracking Technologies

We use the following types of cookies:

• Essential Cookies: Required for authentication, session management, and core Service functionality. These cannot be disabled.
• Analytics Cookies: Used to understand how visitors interact with the Service. We use privacy-focused analytics that do not track individual users across websites.

We do not use advertising cookies or share cookie data with advertisers.

8. Data Security

We implement industry-standard security measures to protect your information, including encryption in transit (TLS/SSL), encryption at rest for sensitive data, secure authentication mechanisms, regular security audits and monitoring, and access controls limiting employee access to personal data. While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

9. Your Rights and Choices

Depending on your location, you may have the following rights:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request correction of inaccurate or incomplete personal information.
• Deletion: Request deletion of your personal information and account.
• Data Portability: Request a copy of your data in a portable format.
• Opt-Out: Opt out of non-essential data collection and analytics cookies.

To exercise any of these rights, contact us at privacy@briefgenius.io. We will respond to your request within 30 days.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. Our service providers (including Supabase, Vercel, Stripe, and Anthropic) may process data in the United States and other jurisdictions. We ensure appropriate safeguards are in place for international data transfers, including standard contractual clauses where applicable.

11. Children's Privacy

The Service is not directed to children under 16 years of age. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16, we will delete that information promptly.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. For significant changes, we will provide additional notice via email or in-app notification. Your continued use of the Service after changes become effective constitutes acceptance of the updated policy.

13. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at: