Privacy Policy

Last updated: April 28, 2026

1. Introduction

Welcome to Brifly ("we," "our," or "us"). We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your information when you visit our website and use our services.

2. Information We Collect

We collect the following types of information:

  • Account Information: When you create an account, we collect your email address and profile information to provide our services.
  • Usage Data: We use Vercel Analytics to collect anonymous usage data about how visitors interact with our website, including page views, device type, and general location (country level).
  • Cookies: We use essential cookies for website functionality and analytics cookies with your consent. See our Cookie Policy for more details.

3. How We Use Your Information

We use your information to:

  • Send you product updates and launch notifications (with your consent)
  • Improve our website and user experience
  • Analyze website traffic and usage patterns
  • Respond to your inquiries and provide customer support

4. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA), we process your data based on:

  • Consent: When you create an account and agree to our terms of service
  • Contract: To provide the services you have requested
  • Legitimate Interests: For website analytics and improving our services

5. Data Sharing

We do not sell your personal data, and we do not use your content to train third-party AI models. We share information with the sub-processors listed below, and with authorities when required by law or to protect our rights.

Sub-processors

We rely on the following service providers to operate Brifly. Each is bound by a data processing agreement and processes your data only on our instructions.

ProviderPurposeData processedLocationPrivacy policy
VercelHosting and product analyticsRequest metadata, anonymous usage dataUSA / global edgeLink
SupabaseDatabase, authentication, file storageAccount data, notes, uploadsSwitzerland (Zurich)Link
OpenAIAudio/video transcription, embeddings, AI-generated content and searchNote text, audio, video, and commentsUSALink
SentryError tracking and crash reportingError context, browser info, user IDUSA / EULink
Cloudflare TurnstileBot protection on contact and signup formsIP address, browser signalsGlobal edgeLink

OpenAI processes your content via their API and does not use it to train their models. We will update this list before introducing any new sub-processor that handles your personal data.

6. Your Rights

You have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data
  • Withdraw consent at any time
  • Unsubscribe from marketing communications
  • Lodge a complaint with a supervisory authority

To exercise these rights, please contact us at dima@getbrifly.com

7. Data Retention

We retain your account information for as long as your account is active or as needed to provide you services. You can request deletion of your account at any time. Analytics data is retained in aggregated, anonymized form.

8. Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction.

9. International Transfers

Your data may be transferred to and processed in countries outside your country of residence. We ensure appropriate safeguards are in place for such transfers.

10. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any significant changes by posting the new policy on this page and updating the "Last updated" date.

11. Contact Us

If you have questions about this privacy policy or our data practices, please contact us at dima@getbrifly.com