Privacy Policy

1. Who we are

BriefKit ("we", "our") provides a SaaS product for creating professional creative briefs. This policy explains how we collect, use and protect your personal data when you use our website and service.

2. Data we collect

We may collect:

• Account data: email, password (hashed), name if you provide it.
• Usage data: briefs you create, brand kit data, preferences.
• Payment data: processed by Stripe; we do not store full card numbers.
• Technical data: IP address, browser type, device information, for security and analytics.

3. How we use your data

We use your data to provide and improve the service, process payments, send transactional emails (e.g. password reset), prevent abuse, and comply with legal obligations. We may use aggregated, non-personal data for analytics.

4. Third parties

We use Supabase (hosting and database), Stripe (payments), and Vercel (hosting). These providers process data in accordance with their privacy policies and applicable law. We do not sell your personal data to third parties.

5. Cookies and similar tech

We use essential cookies and local storage for authentication and preferences. We may use analytics cookies to understand how the product is used. You can control cookies via your browser settings.

6. Your rights

Depending on your location, you may have the right to access, correct, delete or export your data, and to object to or restrict certain processing. To exercise these rights, contact us at the email below. You may also have the right to lodge a complaint with a supervisory authority.

7. Security and retention

We implement appropriate technical and organisational measures to protect your data. We retain your data for as long as your account is active or as needed to provide the service and comply with legal obligations.

8. Contact

For privacy-related questions or requests, contact us at: privacy@briefkit.to